
Dell SonicWALL NSA Series
Dell SonicWALL NSA Series
Dell SonicWALL NSA Series
Dell SonicWALL NSA Series
Easily deploy and manage an extensive array of advanced networking and configuration flexibility features, with the NSA 220 firewall appliance.
Easily deploy and manage an array of advanced, flexible networking and configuration features in a wide variety of environments, with the firewall appliance.
Secure small- to medium-sized businesses and branch sites requiring capacity and performance with the UTM network security appliance.
Protect small or midsized central sites, branch offices, and distributed environments needing significant capacity and performance, with the SonicWALL NSA 3500 UTM business firewall appliance.
Estimated Ship Date:10 Jul 2013
Estimated Ship Date:10 Jul 2013
Estimated Ship Date:10 Jul 2013
Estimated Ship Date:10 Jul 2013
Legend: S — Standard, O — Optional, N — Not Available
Regulatory Information:
Product Safety, EMC and Environmental Data Sheets
Dell Regulatory Compliance Home Page
Dell and the Environment
| Firewall Overview | NSA 6600 | NSA 5600 | NSA 4600 | NSA 3600 | NSA 2400 | NSA 250M | NSA 220 |
| Deep Packet Inspection Firewall | S | S | S | S | S | S | S |
| Stateful Packet Inspection Firewall | S | S | S | S | S | S | S |
| Unlimited File Size Protection | S | S | S | S | S | S | S |
| ICSA Firewall Certified | S | S | S | S | S | S | S |
| Security Services Available | NSA 6600 | NSA 5600 | NSA 4600 | NSA 3600 | NSA 2400 | NSA 250M | NSA 220 |
| Application Intelligence and Control* | S | S | S | S | S | S | S |
| Intrusion Prevention* | S | S | S | S | S | S | S |
| Gateway Anti-Virus and Anti-Spyware* | S | S | S | S | S | S | S |
| Enforced Client Anti-Virus and Anti-Spyware* | S | S | S | S | S | S | S |
| Content & URL Filtering (CFS)* | S | S | S | S | S | S | S |
| Analyzer Reporting* | S | S | S | S | S | S | S |
| Comprehensive Anti-Spam Service* | S | S | S | S | S | S | S |
| SSL Decryption & Inspection (DPI-SSL)* | S | S | S | S | S | S | S |
| Support Services | NSA 6600 | NSA 5600 | NSA 4600 | NSA 3600 | NSA 2400 | NSA 250M | NSA 220 |
| Dynamic Support 8x5* | O | O | O | O | O | O | O |
| Dynamic Support 24x7* | O | O | O | O | O | O | O |
| Firewall General | NSA 6600 | NSA 5600 | NSA 4600 | NSA 3600 | NSA 2400 | NSA 250M | NSA 220 |
| Interfaces | (4) 10GbE SFP+, (8) GbE SFP, (8) GbE, Module Interface, Mgmnt Interface | (2) 10GbE SFP+, (4) GbE SFP, (12) GbE, Module Interface, Mgmnt Interface | (2) 10GbE SFP+, (4) GbE SFP, (12) GbE, Module Interface, Mgmnt Interface | (2) 10GbE SFP+, (4) GbE SFP, (12) GbE, Module Interface, Mgmnt Interface | (6) GbE, Console | (5) GbE , Module Interface, Console | (7) GbE, Console |
| Management | CLI, SSH, GUI, GMS | ||||||
| Certifications | In Progress | EAL4+, VPNC, ICSA Firewall 4.1, FIPS 140-2 | VPNC, ICSA Firewall 4.1 | VPNC, ICSA Firewall 4.1 | |||
| Nodes Supported | Unrestricted | ||||||
| RAM | 4GB | 4GB | 2GB | 2GB | 512MB | 512MB | 512MB |
| CPU | 24x 1.0GHz | 10x 1.3GHz | 8x 1.1GHz | 6x 800MHz | 2x 700MHz | 2x 500MHz | |
| Site-to-Site VPN Tunnels | 6000 | 4000 | 1500 | 800 | 75 | 50 | 25 |
| Global VPN Clients (Maximum) | 2000 (10000) | 2000 (10000) | 500 (3000) | 50 (1000) | 10 (250) | 2 (25) | 2 (25) |
| SSL VPN NetExtender Clients (Maximum) | 2 (50) | 2 (50) | 2 (30) | 2(30) | 2 (25) | 2 (15) | 2 (15) |
| Unique Malware Threats Blocked (with CloudAV) | 10,000,000+ | ||||||
| Virtual Assist Technicians (Maximum) | 1 (25) | 1 (25) | 2 (10) | 2 (10) | 1 (5) | 30-Day Trial (5) | 30-Day Trial (5) |
| VLAN Interfaces | 256 | 256 | 200 | 50 | 25 | 35 | 25 |
| SonicPoints | 128 | 96 | 64 | 48 | 32 | 16 | 16 |
| Performance | NSA 6600 | NSA 5600 | NSA 4600 | NSA 3600 | NSA 2400 | NSA 250M | NSA 220 |
| Stateful Throughput* | 12 Gbps | 9 Gbps | 6 Gbps | 3.4 Gbps | 775 Mbps | 750 Mbps | 600 Mbps |
| DPI Performance* | 3.0 Gbps | 1.6 Gbps | 800 Mbps | 450 Mbps | 150 Mbps | 130 Mbps | 110 Mbps |
| Gateway Anti-Virus Throughput* | 3.0 Gbps | 1.7 Gbps | 1.1 Gbps | 600 Mbps | 160 Mbps | 140 Mbps | 115 Mbps |
| Intrusion Prevention Throughput* | 4.5 Gbps | 3.0 Gbps | 2.0 Gbps | 1.1 Gbps | 275 Mbps | 250 Mbps | 195 Mbps |
| IMIX Performance* | 3.5 Gbps | 2.4 Gbps | 1.6 Gbps | 900 Mbps | 235 Mbps | 210 Mbps | 180 Mbps |
| 3DES/AES VPN Throughput* | 5.0 Gbps | 4.5 Gbps | 3.0 Gbps | 1.5 Gbps | 300 Mbps | 200 Mbps | 150 Mbps |
| Maximum Connections* | 1,000,000 | 750,000 | 500,000 | 325,000 | 225,000 | 110,000 | 85,000 |
| Maximum UTM Connections | 600,000 | 500,000 | 250,000 | 175,000 | 125,000 | 64,000 | 32,000 |
| New Connections per Second | 90,000 | 60,000 | 40,000 | 20,000 | 4,000 | 3,000 | 2,200 |
| Features | NSA 6600 | NSA 5600 | NSA 4600 | NSA 3600 | NSA 2400 | NSA 250M | NSA 220 |
| Logging | IPFIX, Netflow, Analyzer, Local Log, Syslog | ||||||
| Network Traffic Visualization | S | S | S | S | S | S | S |
| Netflow/IPFIX Reporting | S | S | S | S | S | S | S |
| SNMP | S | S | S | S | S | S | S |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | ||||||
| Single Sign-On | S | S | S | S | S | S | S |
| Voice over IP (VoIP) Security | S | S | S | S | S | S | S |
| PortShield Security | S | S | S | S | S | S | S |
| Dynamic Routing | OSPF, RIP | ||||||
| Policy-based Routing | S | S | S | S | S | S | S |
| Route-based VPN | S | S | S | S | S | S | S |
| Dynamic Bandwidth Management | S | S | S | S | S | S | S |
| 802.11n Wireless Support via SonicPoints | S | S | S | S | S | S | S |
| Integrated Wireless Switch & Controller | S | S | S | S | S | S | S |
| Layer 2 Wireless Bridging | S | S | S | S | S | S | S |
| Stateful High Availability | S | S | S | S | S | O | S |
| Multi-WAN | S | S | S | S | S | S | S |
| Load Balancing | S | S | S | S | S | S | S |
| Object-based Management | S | S | S | S | S | S | S |
| Policy-based NAT | S | S | S | S | S | S | S |
| Inbound Load Balancing | S | S | S | S | S | S | S |
| IKEv2 VPN | S | S | S | S | S | S | S |
| Terminal Services Authentication/Citrix Support | S | S | S | S | S | S | S |
| Onboard Quality of Service (QoS) | S | S | S | S | S | S | S |
| SSL Control | S | S | S | S | S | S | S |
| IPv6 | S | S | S | S | S | S | S |
| Failover | NSA 6600 | NSA 5600 | NSA 4600 | NSA 3600 | NSA 2400 | NSA 250M | NSA 220 |
| Hardware Failover | Optional Active/Passive with State Sync | Optional Active/Passive with State Sync | Optional Active/Passive with State Sync | Optional Active/Passive with State Sync | Optional Active/Passive with State Sync | Optional Active/Passive with State Sync | Optional Active/Passive with State Sync |
| Multi-WAN Failover | S | S | S | S | S | S | S |
| Automated Failover/Failback | S | S | S | S | S | S | S |
| Analog Modem Failover | S | S | S | S | S | S | S |
| 3G Cellular Modem Failover* | N | N | N | N | N | S | S |
Regulatory Information:
Product Safety, EMC and Environmental Data Sheets
Dell Regulatory Compliance Home Page
Dell and the Environment
Protection without compromise
The Dell SonicWALL Network Security Appliance (NSA) Series offers enterprise-level security and performance for emerging large and midsize organizations. Based on the same architecture as the flagship SuperMassive Series NGFW platforms for some of the world’s most demanding carriers and enterprises, the NSA Series offers the ease of use and high value that emerging institutions require.
Next-generation security
The NSA Series combines Dell’s patented Reassembly-Free Deep Packet Inspection* (RFDPI) single-pass threat prevention engine with a powerful, scalable multi-core architecture. By integrating automated and dynamic security capabilities into a single platform, the NSA Series provides NGFW protection without compromising performance. It offers ultralow latency and among the highest number of concurrent connections and connections-per-second rates in its class, with no file size limitations.As many as 24 cores spread the network’s load evenly, so you won’t find your performance lessening when you are exposed to heavy traffic conditions or malicious content.
Deep packet inspection technology scans every byte
The NSA Series uses high-performance deep packet inspection (DPI) to look at all traffic and examine every byte of every packet, regardless of port or protocol, to detect and block threats before they ever enter the network . DPI helps eliminate the protection-for-performance trade-off and offers one of the industry’s highest on-the-fly Secure Sockets Layer (SSL) decryption rates.
Simplified structure and low costs
The NSA Series makes it easy to configure, deploy and maintain your security solutions. Quick, easy setup, excellent power efficiency and a simple, intuitive design help lower the cost of ownership.
Dell SonicWALL NSA 6600
Next-generation firewall (NGFW) protection for emerging large organizations that need high-performance deep-security capabilities. NSA 6600 integrates multi-core hardware with Dell’s Reassembly-Free Deep Packet Inspection (RFDPI) engine.
Dell SonicWALL NSA 5600
NGFW protection for growing medium-size organizations that need high-performance deep-security capabilities. NSA 5600 integrates multi-core hardware with Dell’s RFDPI engine.
Dell SonicWALL NSA 4600
NGFW protection for growing small to medium-sized organizations that need high-performance deep-security capabilities. NSA 4600 integrates multi-core hardware with Dell’s RFDPI engine.
Dell SonicWALL NSA 3600
NGFW designed for growing small to medium-size organizations needing significant capacity and performance.
Dell SonicWALL NSA 2400
A unified threat management (UTM) platform for small to medium-size businesses and branch sites requiring capacity and performance.
Dell SonicWALL NSA 250M
An extensive array of advanced networking and configuration flexibility features, including an expansion module slot, in an accessible, affordable platform that is easy to deploy and manage in a wide variety of environments.
Dell SonicWALL NSA 220
An extensive array of advanced networking and configuration flexibility features in an accessible, affordable platform that is easy to deploy and manage in a wide variety of environments.

