The SonicWALLŽ Network Security Appliance (NSA) Series applies next-generation Unified Threat Management (UTM) against a comprehensive array of attacks, combining intrusion prevention, anti-virus and antispyware with the application-level control of SonicWALL Application Intelligence. With advanced routing, stateful high-availability and high-speed VPN technology, the NSA Series adds security, reliability, functionality and productivity to branch offices, central sites and distributed mid-enterprise networks, while minimizing cost and complexity.
Legend
S Standard Feature
O Optional Feature
- Feature Not Available
S Standard Feature
O Optional Feature
- Feature Not Available| Firewall Overview | NSA 240 | NSA 2400 | NSA 2400MX | NSA 3500 | NSA 4500 |
| Application Layer Inspection | Full Layer 7 | Full Layer 7 | Full Layer 7 | Full Layer 7 | Full Layer 7 |
| Stateful Packet Inspection Firewall | S | S | S | S | S |
| Unlimited File Size Protection | S | S | S | S | S |
| Protocols Scanned | 50+ | 50+ | 50+ | 50+ | 50+ |
| ICSA Firewall Certified | S | S | S | S | S |
| Security Services Included | NSA 240 | NSA 2400 | NSA 2400MX | NSA 3500 | NSA 4500 |
| Application Intelligence1 | O | O | O | O | O |
| Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention Service1 | O | O | O | O | O |
| Enforced Client Anti-Virus & Anti-Spyware1 | O | O | O | O | O |
| Content & URL Filtering (CFS)1 | O | O | O | O | O |
| ViewPoint Reporting1 | O | O | O | O | O |
| Comprehensive Anti-Spam Service1 | O | O | O | O | O |
| Deep Packet Inspection SSL1 | - | - | - | O | O |
| Support Services | NSA 240 | NSA 2400 | NSA 2400MX | NSA 3500 | NSA 4500 |
| Dynamic Support 8x5 | 90 Days | 90 Days | 90 Days | 90 Days | 90 Days |
| Dynamic Support 24x71 | O | O | O | O | O |
| Firewall General | NSA 240 | NSA 2400 | NSA 2400MX | NSA 3500 | NSA 4500 |
| Interfaces | 3 GbE, 6 FE, USB, PC Card Slot (Optional 3G/Analog Modem) | (6) 10/100/ 1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (16) 10/100, (10) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB, 2 Module Slots (For Future Use) | (6) 10/100/ 1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/ 1000 Copper Gigabit Ports, 1 Console Interface, 2 USB |
| Management | CLI, SSH,GUI, GMS | CLI, SSH, GUI, GM | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS |
| Certifications | EAL4+, VPNC AES, ICSA Firewall 4.1 | EAL4+, VPNC AES, ICSA Firewall 4.1 | VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 |
| Nodes Supported | No Limits | No Limits | No Limits | No Limits | No Limits |
| Included SonicOS Version | Enhanced | Enhanced | Enhanced | Enhanced | Enhanced |
| RAM | 256 MB | 512 MB | 512 MB | 512 MB | 512 MB |
| Flash Memory | 32 MB | 512Mb | 512Mb | 512Mb | 512 MB |
| Site-to-Site VPN Tunnels | 25 (50) | 75 | 75 | 800 | 1,500 |
| Global VPN Clients (Maximum) | 2 (25) | 10 (250) | 10 (250) | 50 (1,000) | 500 (3,000) |
| SSL VPN NetExtender Clients (Maximum) | 2 (15) | 2 (25) | 2 (25) | 2 (30) | 2 (30) |
| Threat Signatures Capable | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 |
| Virtual Assist Technicians (Maximum) | 30-Day Trial (5) | 1 (5) | 1 (5) | 2 (10) | 2 (10) |
| VLAN Interfaces | 10/256 | 25 | 25 | 50 | 200 |
| SonicPoints Supported | 16 | 32 | 32 | 32 | 64 |
| Performance | NSA 240 | NSA 2400 | NSA 2400MX | NSA 3500 | NSA 4500 |
| Stateful Throughput2 | 600 Mbps | 775 Mbps | 775 Mbps | 1.5 Gbps | 2.75 Gbps |
| UTM Performance3 | 110 Mbps | 150 Mbps | 150 Mbps | 240 Mbps | 600 Mbps |
| Gateway Anti-Virus Throughput3 | 115 Mbps | 160 Mbps | 160 Mbps | 350 Mbps | 690 Mbps |
| Intrusion Prevention Throughput3 | 195 Mbps | 275 Mbps | 275 Mbps | 750 Mbps | 1.4 Gbps |
| IMIX Performance3 | 195 Mbps | 235 Mbps | 235 Mbps | 580 Mbps | 700 Mbps |
| 3DES/AES VPN Throughput4 | 150 Mbps | 300 Mbps | 300 Mbps | 625 Mbps | 1.0 Gbps |
| Maximum Connections5 | 85,000/ 110,0006 |
225,000 | 225,000 | 325,000 | 500,000 |
| Maximum UTM Connections | 32,000/ 50,0006 |
125,000 | 125,000 | 175,000 | 250,000 |
| New Connections per Second | 2,000 | 4,000 | 4,000 | 7,000 | 10,000 |
| Features | NSA 240 | NSA 2400 | NSA 2400MX | NSA 3500 | NSA 4500 |
| Logging | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog |
| SNMP | S | S | S | S | S |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database |
| Dynamic Routing | S | S | S | S | S |
| Single Sign-On | S | S | S | S | S |
| Voice over IP (VoIP) Security | S | S | S | S | S |
| PortShield Security | S | S | S | S | S |
| Failover | |||||
| Hardware Failover | Optional Active/ Passive with State Sync | Optional Active/ Passive with State Sync | Optional Active/ Passive with State Sync | Optional Active/ Passive with State Sync | Active/ Passive with State Sync |
| Multi-WAN Failover | S | S | S | S | S |
| Automated Failover/Failback | S | S | S | S | S |
| Analog Modem Failover | S | S | S | S | S |
| 3G Cellular Modem Failover7 | S | N | S | S | S |
| Dynamic Routing | OSPF, RIP | OSPF, RIP | OSPF, RIP | OSPF, RIP | OSPF, RIP |
| Policy-based Routing | S | S | S | S | S |
| Route-based VPN | S | S | S | S | S |
| Dynamic Bandwidth Management | S | S | S | S | S |
| 802.11n Wireless Support via SonicPoints | S | S | S | S | S |
| Integrated Wireless Switch & Controller | S | S | S | S | S |
| Layer 2 Wireless Bridging | S | S | S | S | S |
| High Availability6 | S | S | S | S | S |
| Multi-WAN | S | S | S | S | S |
| Load Balancing | S | S | S | S | S |
| Object-based Management | S | S | S | S | S |
| Policy-based NAT | S | S | S | S | S |
| Inbound Load Balancing | S | S | S | S | S |
| IKEv2 VPN | S | S | S | S | S |
| Terminal Services Authentication/Citrix Support | S | S | S | S | S |
| Onboard Quality of Service (QoS) | S | S | S | S | S |
| SSL Control | S | S | S | S | S |
| IPv6 Ready | S | S | S | S | S |
| Firewall Overview | NSA 240 TS |
NSA 2400 TS |
NSA 2400MX TS |
NSA 3500 TS |
NSA 4500 TS |
| Hardware Platform | NSA 240 | NSA 2400 | NSA 2400MX | NSA 3500 | NSA 4500 |
| Deep Packet Inspection Firewall | S | S | S | S | S |
| Stateful Packet Inspection Firewall | S | S | S | S | S |
| Unlimited File Size Protection | S | S | S | S | S |
| Protocols Scanned | 50+ | 50+ | 50+ | 50+ | 50+ |
| SonicPoints Supported (Max) | 16 | 32 | 32 | 32 | 64 |
| ICSA Firewall Certified | S | S | S | S | S |
| Security Services | NSA 240 TS |
NSA 2400 TS |
NSA 2400MX TS |
NSA 3500 TS |
NSA 4500 TS |
| Gateway Anti-Virus, Anti-Spyware & IPS | S | S | S | S | S |
| Application Firewall | S | S | S | S | S |
| Content Filtering Service (CFS) Premium Edition | S | S | S | S | S |
| ViewPoint Reporting | S | S | S | S | S |
| Dynamic Support 24x7 | S | S | S | S | S |
| Comprehensive Anti-Spam Service1 | O | O | O | O | O |
| Enforced Client Anti-Virus & Anti-Spyware1 | O | O | O | O | O |
| Deep Packet Inspection SSL1 | - | - | - | O | O |
| Firewall General | NSA 240 TS | NSA 2400 TS | NSA 2400MX TS | NSA 3500 TS | NSA 4500 TS |
| Interfaces | 3 GbE, 6 FE, USB, PC Card Slot (Optional 3G/Analog Modem) | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (16) 10/100, (10) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB, 2 Module Slots (For Future Use) | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB |
| Management | CLI, SSH,GUI, GMS | CLI, SSH,GUI, GMS | CLI, SSH,GUI, GMS | CLI, SSH,GUI, GMS | CLI, SSH,GUI, GMS |
| Certifications | EAL4+, VPNC AES, ICSA Firewall 4.1 | EAL4+, VPNC AES, ICSA Firewall 4.1 | VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 |
| Nodes Supported | No Limits | No Limits | No Limits | No Limits | No Limits |
| Included SonicOS Version | Enhanced 5.0 or Higher | Enhanced 5.0 or Higher | Enhanced 5.7 or Higher | Enhanced 5.0 or Higher | Enhanced 5.0 or Higher |
| RAM | 256 MB | 512 MB | 512 MB | 512 MB | 512 MB |
| Flash Memory | 32 MB | 512 MB | 512 MB | 512 MB | 512 MB |
| Site-to-Site VPN Tunnels | 25/506 | 75 | 75 | 800 | 1,500 |
| Bundled GVC Licenses (Max) | 2 (25) | 10 (250) | 10 (250) | 50 (1,000) | 500 (3,000) |
| Bundled SSL VPN Licenses (Max) | 2 (15) | 2 (25) | 2 (25) | 2 (30) | 2 (30) |
| Virtual Assist Technicians (Max) | 30-Day Trial (5) | 1 (5) | 1 (5) | 2 (10) | 2 (10) |
| VLAN Interfaces | 10/256 | 25 | 25 | 50 | 200 |
| Firewall / VPN / Performance | NSA 240 TS |
NSA 2400 TS |
NSA 2400MX TS |
NSA 3500 TS |
NSA 4500 TS |
| Stateful Throughput2 | 600 Mbps | 775 Mbps | 775 Mbps | 1.5 Gbps | 2.75 Gbps |
| UTM Performance3 | 110 Mbps | 150 Mbps | 150 Mbps | 240 Mbps | 600 Mbps |
| Gateway Anti-Virus Throughput3 | 115 Mbps | 160 Mbps | 160 Mbps | 350 Mbps | 690 Mbps |
| Intrusion Prevention Throughput3 | 195 Mbps | 275 Mbps | 275 Mbps | 750 Mbps | 1.4 Gbps |
| IMIX Performance3 | 195 Mbps | 235 Mbps | 235 Mbps | 580 Mbps | 700 Mbps |
| 3DES/AES VPN Throughput4 | 150 Mbps | 300 Mbps | 300 Mbps | 625 Mbps | 1.0 Gbps |
| Maximum Connections5 | 85,000/ 110,0006 |
225,000 | 225,000 | 325,000 | 500,000 |
| Maximum UTM Connections | 32,000/ 50,0006 |
125,000 | 125,000 | 175,000 | 250,000 |
| New Connections/Sec | 2,000 | 4,000 | 4,000 | 7,000 | 10,000 |
| Features | NSA 240 TS |
NSA 2400 TS |
NSA 2400MX TS |
NSA 3500 TS |
NSA 4500 TS |
| Logging | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog |
| SNMP | S | S | S | S | S |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database |
| Voice over IP (VoIP) Security | S | S | S | S | S |
| Route-based VPN | S | S | S | S | S |
| IKEv2 VPN | S | S | S | S | S |
| Single Sign-On | S | S | S | S | S |
| Dynamic Routing | S | S | S | S | S |
| 802.11n Wireless Support via SonicPoints | S | S | S | S | S |
| Integrated Wireless Switch & Controller | S | S | S | S | S |
| Layer 2 Wireless Bridging | S | S | S | S | S |
| High Availability6 | S | S | S | S | S |
| Multi-WAN | S | S | S | S | S |
| Automated Failover & Failback | S | S | S | S | S |
| 3G Wireless/Modem7 | With PC Card or USB 3G Adapter/ Modem | N | With USB 3G Adapter/ Modem | With USB 3G Adapter/ Modem | With USB 3G Adapter/ Modem |
| Object-based Management | S | S | S | S | S |
| Policy-based NAT | S | S | S | S | S |
| Load Balancing | S | S | S | S | S |
| PortShield Security | S | S | S | S | S |
| Terminal Services Authentication & Citrix Support | S | S | S | S | S |
| Onboard Quality of Service (QoS) | S | S | S | S | S |
| SSL Control | S | S | S | S | S |
| IPv6 Ready | S | S | S | S | S |
1Services must be purchased separately.
2Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
3UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
4VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
5Actual maximum connection counts are lower when UTM services are enabled.
6Only with the NSA 240 Series Stateful HA and Expansion Upgrade.
7USB 3G card and modem are not included. View supported USB devices.
