Thiết bị tường lửa SonicWall NSA2650 TotalSecure
– Interfaces: 12 x 1 GbE, 4 x 2.5 GbE SFP
– Recommended Users: 1 – 100
– Firewall Inspection Throughput: 3.0 Gbps
– Full DPI Throughput: 300 – 600 Mbps
– TLS/SSL Throughput (DPI SSL): 300 Mbps
– VPN Throughput: 1.5 Gbps
– IMIX Throughput: 700 Mbps
– Maximum Connections: 1,000,000 (500,000 with DPI)
– VLAN Interfaces: 256
– Site-to-Site VPN Policies: 1,000
– IPSec VPN Client: 10 (250)
– SSL VPN Licenses: 2 (250)
| odels: | NSA 2600 | NSA 2650 | NSA 3600 | NSA 4600 | NSA 5600 | NSA 6600 |
|---|---|---|---|---|---|---|
| Firewall | ||||||
| SonicOS Version | SonicOS 6.5 | |||||
| Security Processing Cores | 4 | 4 | 6 | 8 | 10 | 24 |
| Interfaces | 8 x 1-GbE, 1 GbE Management, 1 Console | 4 x 2.5-GbE SFP, 4 x 2.5-GbE, 12 x 1-GbE, 1 GbE Management, 1 Console | 2 x 10-GbE SFP+, 4 x 1-GbE SFP, 12 x 1 GbE, 1 GbE Management, 1 Console | 2 x 10-GbE SFP+, 4 x 1-GbE SFP, 12 x 1 GbE, 1 GbE Management, 1 Console | 2 x 10-GbE SFP+, 4 x 1-GbE SFP, 12 x 1 GbE, 1 GbE Management, 1 Console | 4 x 10-GbE SFP+, 8 x 1-GbE SFP, 8 x 1 GbE, 1 GbE Management, 1 Console |
| Management | CLI, SSH, GUI, GMS | |||||
| Expansion | 1 Expansion Slot (Rear)*, SD Card* | 1 Expansion Slot (Rear)*, 16 GB storage module | 1 Expansion Slot (Rear)*, SD Card* | |||
| SSO users | 30,000 | 40,000 | 40,000 | 50,000 | 60,000 | 70,000 |
| Maximum SonicPoints supported | 32 | 48 | 48 | 64 | 96 | 128 |
| Logging | Analyzer, Local Log, Syslog | |||||
| Firewall/VPN Performance | NSA 2600 | NSA 2650 | NSA 3600 | NSA 4600 | NSA 5600 | NSA 6600 |
| Firewall Inspection Throughput1 | 1.9 Gbps | 3.0 Gbps | 3.4 Gbps | 6.0 Gbps | 9.0 Gbps | 12.0 Gbps |
| Full DPI Throughput2 | 300 Mbps | 600 Mbps | 500 Mbps | 800 Mbps | 1.6 Gbps | 3.0 Gbps |
| Application Inspection Throughput2 | 700 Mbps | 1.4 Gbps | 1.1 Gbps | 2.0 Gbps | 3.0 Gbps | 4.5 Gbps |
| IPS Throughput2 | 700 Mbps | 1.4 Gbps | 1.1 Gbps | 2.0 Gbps | 3.0 Gbps | 4.5 Gbps |
| Anti-Malware Inspection Throughput2 | 400 Mbps | 600 Mbps | 600 Mbps | 1.1 Gbps | 1.7 Gbps | 3.0 Gbps |
| IMIX Throughput3 | 600 Mbps | 700 Mbps | 900 Mbps | 1.6 Gbps | 2.4 Gbps | 3.5 Gbps |
| SSL Inspection & Decription (DPI SSL)2 | 200 Mbps | 300 Mbps | 300 Mbps | 500 Mbps | 800 Mbps | 1.3 Gbps |
| VPN Throughput3 | 1.1 Gbps | 1.5 Gbps | 1.5 Gbps | 3.0 Gbps | 4.5 Gbps | 5.0 Gbps |
| Connections per Second | 15,000/sec | 15,000/sec | 20,000/sec | 40,000/sec | 60,000/sec | 90,000/sec |
| Maximum Connections (SPI) | 500,000 | 1,000,000 | 750,000 | 1,000,000 | 1,500,000 | 1,500,000 |
| Maximum Connections (DPI)4 | 250,000 | 500,000 | 375,000 | 500,000 | 1,000,000 | 1,000,000 |
| Maximum Connections (DPI)5 | 1,000/1,000 | 12,000/13,500 | 2,000/2,750 | 3,000/4,500 | 4,000/8,500 | 6,000/10,500 |
| VPN | NSA 2600 | NSA 2650 | NSA 3600 | NSA 4600 | NSA 5600 | NSA 6600 |
| Site-to-Site Tunnels | 250 | 1,000 | 1,000 | 1,500 | 4,000 | 6,000 |
| IPSec VPN clients (Maximum) | 10 (250) | 50 (1,000) | 50 (1,000) | 500 (3,000) | 2,000 (4,000) | 2,000 (6,000) |
| SSL VPN licenses (Maximum) | 2 (250) | 2 (350) | 2 (350) | 2 (500) | 2 (1,000) | 2 (1,500) |
| Encryption/Authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography | |||||
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14v | |||||
| Route-Based VPN | RIP, OSPF | |||||
| Networking | NSA 2600 | NSA 2650 | NSA 3600 | NSA 4600 | NSA 5600 | NSA 6600 |
| IP Address Assignment | Static (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay | |||||
| NAT Modes | 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode | |||||
| VLAN Interfaces | 256 | 256 | 256 | 256 | 400 | 500 |
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast | |||||
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p | |||||
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | |||||
| VoIP | Full H323-v1-5, SIP | |||||
| Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 | |||||
| Certifications | ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL | |||||
| High availability | Active/Passive with State Sync | Active/Passive with State Sync Active/Active Clustering | Active/Passive with State Sync, Active/Active DPI with State Sync, Active/Active Clustering | |||
| Hardware | NSA 2600 | NSA 2650 | NSA 3600 | NSA 4600 | NSA 5600 | NSA 6600 |
| Power Supply | Single, Fixed 200W | Dual, redundant 120W (one included) | Single, Fixed 250W | |||
| Fans | Dual, Fixed | Dual, redundant, hot swappable | ||||
| Input Power | 100-240 VAC, 60-50 Hz | |||||
| Max Power Consumption (W) | 49.4 | 74.3 | 74.3 | 86.7 | 90.9 | 113.1 |
| MTBF @25ºC in hours | 176,540 | 146,789 | 146,789 | 139,783 | 134,900 | 116,477 |
| MTBF @25ºC in years | 20.15 | 16.76 | 16.76 | 15.96 | 15.40 | 13.30 |
| Form Factor | 1U Rack Mountable | |||||
| Dimensions | 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43 cm) | |||||
| Weight | 10.1 lb (4.6 Kg) | 13.56 lb (6.15 kg) | 13.56 lb (6.15 Kg) | 13.56 lb (6.15 Kg) | 13.56 lb (6.15 Kg) | 14.93 lb (6.77 Kg) |
| WEEE Weight | 11 lb (5.0 Kg) | 14.24 lb (6.46 kg) | 14.24 lb (6.46 Kg) | 14.24 lb (6.46 Kg) | 14.24 lb (6.46 Kg) | 19.78 lb (8.97 Kg) |
| Shipping Weight | 14.3 lb (6.5 Kg) | 20.79 lb (9.43 kg) | 20.79 lb (9.43 Kg) | 20.79 lb (9.43 Kg) | 20.79 lb (9.43 Kg) | 26.12 lb (11.85 Kg) |
| Major Regulatory | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CU | |||||
| Environment | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C) | |||||
| Humidity | 10-90% non-condensing. | |||||
