The SonicWALL® E-Class Network Security Appliance (NSA) Series is an industry first—using a re-assembly free deep packet inspection engine in combination with multi-core specialized security microprocessors to deliver gateway anti-virus, anti-spyware and intrusion prevention at high-speed so you don’t have to sacrifice network performance.

Features of NSA E6500

Deep Packet Inspection & Multi-Threat Protection
» Fully integrated deep packet inspection firewall, including gateway anti-virus, anti-spyware, intrusion prevention, and application firewall for perimeter and internal protection
» Application Firewall feature-set for Application inspection and control
» Automated and Dynamic Security Updates

Powerful Performance
» High-performance 16-core Multi-Core Architecture
» 3.0 Gbps Stateful Packet Inspection Firewall¹
» 2.5 Gbps 3DES and AES VPN Throughput¹
» 750 Mbps Full Unified Threat Management (UTM) Inspection
» Eight (8) 10/100/1000 Copper Gigabit Ethernet interfaces

Enterprise Networking & Complete Business Continuity
» Business application prioritization & QoS
» Highly Redundant Hardware - Fans
» Stateful Hardware Failover, ISP Failover, and WAN Redundancy
» Integrated Server Load Balancing Feature-set

Integration & Simplified Maanaagement
» Integrated Network Security Policy and Management
» Next-Generation Streamlined GUI
» Powerful Wizards - Set-up, Firewall Policies, VPN, NAT
» Front panel controls and LCD display provides easy network deployment and integration

Deployment Flexibility
» Data Center, Campus and Department Network Applications
» Transparent L2 Bridge Mode
» Integrated Wireless Switch Deployment

Flexible, Customizable Deployment Options:

Central-site Gateway: Deployed as a Central-site Gateway the NSA Series provides a high-speed scalable platform, providing network segmentation and security using VLAN’s and security zones. Redundancy features include WAN Load balancing, ISP fail-over and stateful high availability.

Layer 2 Bridge: Mode Layer 2 bridge mode provides inline intrusion detection and prevention, adds an additional level of zone-based security to network segments or business units and simplifies layered security. Additionally, this enables administrators to limit access to sensitive data by specific business unit or database server.

Multi-layer Protection:

Remote Site Protection: The E-Class NSA Series incorporates ultra-high performance Virtual Private Networks (VPNs) that easily scales to thousands of end points and branch offices. Innovative SonicWALL Clean VPN™ technology prevents vulnerabilities and malicious code by decontaminating traffic before it enters the corporate network, in real time and without user intervention.

Gateway Protection: Easily integrated into existing environments, E-Class NSAs centralize gateway-level protection across all incoming and outgoing applications, files and content-based traffic, while controlling bandwidth and applications, without significantly impacting performance or scalability.

Internal Protection: The highly-configurable E-Class NSA Series extends protection over the internal network by inspecting traffic over LAN interfaces and VLANs. Specifically designed for LAN network threats, the E-Class NSA Series monitors and responds to internally spreading malware, denial of service attacks, exploited software vulnerabilities, confidential documents, policy violations and network misuse.

Desktop and Server Protection: In addition to network and gateway based protection, the E-Class NSA Series provides additional end point protection for workstations and servers through an enforced anti-virus and antispyware client with advanced heuristics. This enforced client solution delivers network access control by restricting Internet access on end points that do not have the latest signature or engine updates. When enforcement is enabled on the appliance, each end point is directed to download the enforced anti-virus and anti-spyware client without any administrator intervention, automating the deployment of end point security.

Centralized Policy Management: The SonicWALL Global Management System (GMS) provides flexible, powerful and intuitive tools to centrally manage E-Class NSA configurations across distributed enterprises, view real-time monitoring metrics and integrate policy and compliance reporting.

Technical Specification for NSA E6500:

Features
Nodes Supported	Unrestricted
SonicOS Version	SonicOS Enhanced 5.0
Stateful Throughput*	3 Gbps
GAV Performance	900 Mbps
IPS Performance	850 Mbps
UTM Throughput	750 Mbps
Connections	750,000 (Max)
Denial of Service Attack Prevention	22 classes of DoS, DDoS and scanning attacks
SonicPoints Supported	128
VPN
3DES/AES Throughput*	2.5 Gbps
Encryption	DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1
Site-to-Site Performance	6,000
Licenses	2,000 (6,000)
Key Exchange	IKE, IKEv2, Manual Key, PKI (X.509)
L2TP/IPsec	Yes
Certificate Support	Verisign, Thawte, Cybertrust, RSA Keon, Entrust, and Microsoft CA for SonicWALL-to-SonicWALL VPN
Redundant VPN Gateway	Yes
Global VPN Client Platforms Supported	Microsoft® Windows 2000, Windows XP, Microsoft® Vista 32-bit
Networking
IP Address Assignment	Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT Modes	1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Policy-based Routing	OSPF, RIPv1/v2, static routes, policy-based routing, Multicast
QoS	Bandwidth priority. maximum bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
Authentication	XAUTH/RADIUS, Active Directory, SSO, LDAP, internal user database
User Database	2,500
VoIP	Full H.323v1-5, SIP, gatekeeper support, outbound bandwidth management, VoIP over WLAN, deep inspection security, full interoperability with most VoIP gateway and communications devices
System
Standards	TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS
Management and Monitoring	Web GUI (HTTP, HTTPS), Command Line (SSH, Console), SNMP v2: Global management with SonicWALL GMS
Logging and Reporting	ViewPoint, Local Log and Syslog
Load Balancing	Yes, (Outgoing with percent-based, round robin and spill-over) (Incoming with round robin, random distribution, sticky IP, block remap and symmetrical remap
High Availability	Active/Passive with State Sync
Hardware
Interfaces	(8) 10/100/1000 Copper Gigabit Ports, 1Gbe HA Interface, 1 Console Interface, 2 USB (Future Use)
Memory	1 GB
Flash Memory	512 MB Compact Flash
Power Supply	Single 250W ATX Power Supplies
Max Power Consumption	90 W
Total Heat Dissipation	307 BTU
Certifications (Pending)	ICSA Firewall 4.1
Dimensions	17 x 16.75 x 1.75 in/43.18 x 42.54 x 4.44 cm
Weight	15.00 lbs/ 6.85 kg
Major Regulatory Compliance	FCC Class A, CES Class A, CE, C-Tick, VCCI, Compliance MIC, UL, cUL, TUV/GS, CB, NOM, RoHS, WEEE
Environment	40-105° F, 5-40° C

¹Firewall and VPN throughput measured using UPD traffi c adhering to RFC 2544.
²Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP Performance test.

SonicWALL Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service

SonicWALL® Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service integrates gateway anti-virus, anti-spyware and intrusion prevention to deliver intelligent, real-time network security protection against sophisticated application layer and content-based attacks. Because new threats emerge daily and are often unpredictable, SonicWALL is able to deliver the highest protection possible with a deep packet inspection engine that delivers threat protection directly on the security gateway by matching downloaded, e-mailed and compressed fi les against an extensive and continuously updated database of signatures written by a combination of SonicWALL’s SonicAlert Team and third-party sources.

Feature List

Virus Scanning Capabilities	• Common protocols such as SMTP, POP3, IMAP, HTTP, FTP, NetBIOS and many others • All non-encrypted protocols across every port • Dozens of stream-based protocols • Instant Messaging and peer-to-peer file transfers
Threat Protection	• Protection against viruses, spyware, worms, Trojans, software vulnerabilities such as buffer overflows, as well as peer-to-peer and instant messenger applications, backdoor exploits, and other malicious code
Scalability	• Able to scan an unlimited number of concurrent downloads of any file size
Signature Database	• Dynamically-updated database containing thousands of attack, vulnerability and high threat virus signatures
Logging and Reporting	• Real-time logging and alerting • Granular reports through SonicWALL ViewPoint and Global Management System
Supported Compression Formats	• ZIP, Deflate and GZIP