|
| |
|
|
Network Security Solution  |
|
|
| |
| |
|
|
| |
|
|
SonicWALL
SonicWALL: E-Class NSA Series
SonicWall Network Security Solutions
Other existing network security solutions can be technologically limited, notoriously ex-
pensive or painful to deploy and use. SonicWALL eliminates these concerns by focusing
on engineering the cost and complexity out of a high performance security infrastructure.
This frees business resources to be more productive. SonicWALL Network Security solu-
tions incorporate multiple security technologies in a single platform to provide high-speed
threat protection, reliable communications, low total cost of ownership and flexible
connectivity options.
The SonicWALL E-Class Network Security Appliance (NSA) Series is an industry first-
using are-assembly free deep packet inspection engine in combination with multi-core
specialized security microprocessors to deliver gateway anti-virus, anti-spyware and
intrusion prevention at high-speed so you don’t have to sacrifi ce network performance.
Combining a powerful deep packet inspection fi rewall with multiple layers of protection
technology and a suite of high-availability features, the NSA Series off ers the ultimate
choice for a variety of enterprise deployments including distributed environments,
campus networks and data centers.
The E-Class NSA appliances are engineered to be the most scalable, high performance
and reliable multi-function threat appliances in class. Taking protection to new levels
of control is Application Firewall, a set of customizable protection tools that affords
administrators precise control over network traffi c. To meet the operational reliability
enterprise-class network demand, the E-Class NSA Series incorporates a suite of high
availability features at the hardware and system level to maximize uptime and improve
security coverage. The E-Class NSA Series lowers management complexity by providing
an extensive array of advanced network confi guration features that ease deployment
and integration. This makes NSA an ideal solution for organizations that require high
performance network security deployed across a wide variety of environments. The
E-Class NSA Series delivers:
•
•
•
•
•
• |
Enterprise-class deep packet inspection (DPI) and Application Firewall for every packet,
every protocol, over every interface
Revolutionary multi-core performance utilizing up to 16 cores for ultra high-speed multi-
layer threat protection over both external and internal networks
Ultimate scalability in eliminating threats of unlimited fi le size and unrestricted concur-
rent connections by utilizing a reassembly-free deep packet inspection engine
Dynamically updateable and customizable security defense
Uncompromising business continuity and high availability protection |
|
|
|
|
SonicWALL NSA E7500
The SonicWALL E-Class Network Security Appliance (NSA) E7500 is the flag ship of the
E-Class NSA product family designed to be the most scalable, high performance and
reliable multifunction threat appliance in its class. It protects against a vast spectrum
of network attacks with unprecedented speed and reliability. This protection is enabled
through the NSA E7500 16-core architecture, a parallel performance design for ultra
high-speed threat protection and deployment scalability. Taking protection to new levels
of control is Application Firewall, a set of customizable protection tools that empowers
administrators with precise control and inspection over network traffic. The NSA E7500
comes standard with four gigabit copper Ethernet ports, four expandable SFP ports for
deployment flexibility and an LCD management screen for instant configuration access.
Operational reliability is delivered through a suite of high availability features at the
hardware level with dual power supplies and fans and at the system level with Stateful
failover to dramatically improve uptime. The NSA E7500 offers enterprise customers an
extensive array of advanced network and deployment flexibility features for use in large
scale enterprise network deployments.
SonicWALL NSA E6500
The SonicWALL E-Class Network Security Appliance (NSA) E6500 is engineered to meet
the needs of the expanding enterprise network by providing a high performance, scalable,
multifunction threat prevention appliance. The NSA E6500 has been engineered to take
advantage of specialized multi-core processing technology, providing parallel traffic
processing, in conjunction with SonicWALL’s re-assembly free deep packet inspection
engine. The NSA E6500 provides enterprise administrators a high performance secure
platform to combat the changing threat landscape. Using tools such as Application Fire-
wall network administrators can take advantage of customizable protection tools that
empower network administrator’s precise control and inspection over network traffic.
The NSA E6500 comes standard with eight gigabit copper Ethernet ports for deployment
flexibility and includes a management LCD screen for ease of deployment.
SonicWALL NSA E5500
The SonicWALL E-Class Network Security Appliance (NSA) E5500 is high performance,
multiservice network security platform engineered to be the work horse of the enter-
prise network environment. Taking advantage of SonicWALL’s re-assembly free deep
packet inspection engine and an 8-core processor technology providing parallel traffic
processing, the NSA E5500 delivers exceptional deep packet inspection performance for
the enterprise network environment. The NSA E5500 comes standard with eight gigabit
copper Ethernet ports for deployment flexibility and includes a management LCD screen
for ease of deployment. This solutions offers enterprise network administrators an array
of enterprise networking features, designed to provide lowered management complexity,
and unrivalled value.
| |
Model |
NSA 5500 |
NSA 6500 |
NSA 7500 |
| |
SonicOS Supported |
SonicOS Enhanced
5.0 (or higher) |
SonicOS Enhanced
5.0 (or higher) |
SonicOS Enhanced
5.0 (or higher) |
| |
Users and Nodes |
Unrestricted |
Unrestricted |
Unrestricted |
| |
Network Interfaces |
(8) 10/100/1000
Copper Gigabit Ports,
1Gbe HA Interface,
1 Console Interface
|
(8) 10/100/1000
Copper Gigabit Ports,
1Gbe HA Interface,
1 Console Interface
|
(4) 10/100/1000
Copper Gigabit Ports
and (4) SFP Ports,
1Gbe HA Interface,
1 Console Interface |
| |
CPU Cores |
8 |
16 |
16 |
| |
Power Supply |
Single 250W |
ATX Single 250W |
ATX Dual 250W ATX,
Hot Swappable |
| |
Cooling System (Fans) |
Dual Fans,
Hot Swappable |
Dual Fans,
Hot Swappable |
Dual Fans,
Hot Swappable |
| |
VLAN Interfaces |
256 |
256 |
512 |
| |
High Availability |
Active/Standby
Statesync |
Active/Standby
Statesync |
Active/Standby
Statesync |
| |
Stateful Throughput (1) |
2 Gbps |
3 Gbps |
5.5 Gbps |
| |
3DES/AES Throughput (1) |
1.5 Gbps |
2.5 Gbps |
4 Gbps |
| |
Gateway Anti-Virus
Throughput (2) |
750 Mbps |
900 Mbps |
1.8 Gbps |
| |
Intrusion Prevention
Throughput (2) |
550 Mbps |
850 Mbps |
1.2 Gbps |
| |
UTM Performance (2) |
400 Mbps |
750 Mbps |
1 Gbps |
| |
New Connections/Sec
|
10,000 |
19,000 |
25,000 |
| |
Total Concurrent
Connections |
700,000 |
750,000 |
1,000,000 |
| |
Site-to-Site VPNs |
4,000 |
6,000 |
10,000 |
| |
Zone Security |
Yes |
Yes |
Yes |
| |
Object-based Management |
Yes |
Yes |
Yes |
| |
Policy-based NAT |
Yes |
Yes |
Yes |
| |
WAN/WAN Failover |
Yes |
Yes |
Yes |
| |
Load Balancing |
Yes |
Yes |
Yes |
| |
Integrated Wireless
Switch and Controller |
Yes |
Yes |
Yes |
| |
Spam Blocking |
Yes |
Yes |
Yes |
| |
Voice over IP (VoIP) |
Yes |
Yes |
Yes |
| |
IKEv2 VPN |
Yes |
Yes |
Yes |
| |
Secure Remote Management
(SSHv2 Support) |
Yes |
Yes |
Yes |
| |
Multiple SSIDs using VAP |
Yes |
Yes |
Yes |
| |
Dynamic Address Objects |
Yes |
Yes |
Yes |
| |
Layer 2 Bridge Mode |
Yes |
Yes |
Yes |
| |
802.1q VLANs |
Yes |
Yes |
Yes |
| |
RIPv2 and OSPF Routing |
Yes |
Yes |
Yes |
| |
Single Sign On (SSO) |
Yes |
Yes |
Yes |
| |
Application Firewall |
Yes |
Yes |
Yes |
| |
SSL Control |
Yes |
Yes |
Yes |
(1) Firewall and VPN throughput measured using UDP traffic adhering to RFC 2544
(2) Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent
WebAvalanche HTTP Performance test
|
|
|
|
|
|
| |
|
|
| |
|
|
|
|
|
|
