The SonicWALL NSA 3500 is ideal for corporate, branch office and distributed environments needing significant throughput capacity and performance
The SonicWALL® Network Security Appliance (NSA) Series applies next-generation Unified Threat Management (UTM) against a comprehensive array of attacks, combining intrusion prevention, anti-virus and anti-spyware with the application-level control of SonicWALL Application Intelligence. With advanced routing, stateful high-availability and high-speed VPN technology, the NSA Series adds security, reliability, functionality and productivity to branch offices, central sites and distributed mid-enterprise networks, while minimizing cost and complexity.
Features of SonicWALL NSA 3500Deep Packet Inspection & Multi-Threat Protection
• Fully integrated deep packet inspection firewall, including gateway anti-virus, anti-spyware, intrusion prevention, and application firewall for perimeter and internal protection
• Application Firewall feature-set for Application inspection and control
• Automated and Dynamic Security Updates
Powerful Performance
• High-performance 4-core Multi-Core Architecture
• 1.5 Gbps Stateful Packet Inspection Firewall
• 625 Gbps 3DES and AES VPN Throughput
• 240 Mbps Full Unified Threat Management (UTM) Inspection
• Six (6) 10/100/1000 Copper Gigabit Ethernet interfaces
Networking & Complete Business Continuity
• Business application prioritization & QoS
• Stateful Hardware Failover, ISP Failover, and WAN Redundancy
• Integrated Server Load Balancing Feature-set
Integration & Simplified Management
• Integrated Network Security Policy and Management
• Next-Generation Streamlined GUI
• Powerful Wizards - Set-up, Firewall Policies, VPN, NAT
Deployment Flexibility
• Data Center, Campus and Department Network Applications
• Transparent L2 Bridge Mode
• Integrated Wireless Switch Deployment
Flexible, Customizable Deployment Options:
Specification of NSA 3500
| Features |
| Nodes Supported | Unrestricted |
| SonicOS Version | SonicOS Enhanced 5.0 |
| Stateful Throughput* | 1.5 Gbps |
| GAV Performance | 350 Mbps |
| IPS Performance | 750 Mbps |
| UTM Throughput | 240 Mbps |
| IMIX Performance | 580 Mbps |
| Connections | 128,000 |
| Denial of Service Attack Prevention | 22 classes of DoS, DDoS and scanning attacks |
| SonicPoints Supported | 32 |
| VPN |
| 3DES/AES Throughput* | 625 Mbps |
| Encryption | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1 |
| Site-to-Site Performance | 800 |
| Licenses | 10 (250) |
| Key Exchange | IKE, IKEv2, Manual Key, PKI (X.509) |
| L2TP/IPsec | Yes |
| Certificate Support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust, and Microsoft CA for SonicWALL-to-SonicWALL VPN |
| Dead Peer Detection | Yes |
| DHCP Over VPN | Yes |
| IPSec NAT Traversal | Yes |
| Redundant VPN Gateway | Yes |
| Global VPN Client Platforms Supported | Microsoft® Windows 2000, Windows XP, Microsoft® Vista 32-bit |
| Networking |
| IP Address Assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
| Policy-based Routing | OSPF, RIPv1/v2, static routes, policy-based routing, Multicast |
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, internal user database |
| DDNS | Support for services offered by the following dynamic DNS providers: dynds.org, yi.org, no-ip.com and changeip.com |
| User Database | 500 |
| VoIP | Full H.323v1-5, SIP, gatekeeper support, outbound bandwidth management, VoIP over WLAN, deep inspection security, full interoperability with most VoIP gateway and communications devices |
| System |
| Zone Security | yes |
| Object-based/Group-based Management | yes |
| Schedules | yes |
| Management and Monitoring | Web GUI (HTTP, HTTPS), Command Line (SSH, Console), SNMP v2: Global management with SonicWALL GMS |
| Logging and Reporting | ViewPoint, Local Log and Syslog |
| Load Balancing | Yes, with percent-based, round robin and spill-over3 |
| Hardware |
| Interfaces | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB (Future Use) |
| Memory | 512 MB |
| Flash Memory | 512 MB Compact Flash |
| Power Input | 100-240V, 60-50Hz |
| Max Power Consumption | 64 W |
| Total Heat Dissipation | 219 BTU |
| Certifications (Pending) | ICSA Firewall 4.1, Common Criteria EAL-4+, FIPS 140-2 |
| Dimensions | 7.125 x 1.5 x 10.5 in/ |
| Weight | 8.05 lbs/ 3.65 kg |
| Major Regulatory Compliance | FCC Class B, ICES Class B, CE, C-Tick, VCCI Class B, MIC, NOM, UL, cUL, TUV/GS, CB, WEEE, ROHS (TZ 180/190) |
| Environment | 40-105° F, 5-40° C |
| MTBF | 14 Years |
* Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. VPN throughput UDP traffic at 1418 byte packet size adhering to RFC 2544. UTM performance is based on HTTP tests run on the Spirent Avalanche/Reflector. Testing done with multiple flows through multiple port pairs. ** Only with the NSA 240 Series Stateful HA and Expansion Upgrade
SonicWALL TotalSecure All-in-One Network Security Solutions
SonicWALL® TotalSecure delivers the convenience of all-in-one network protection by combining gateway anti-virus, anti-spyware intrusion prevention, content filtering, firmware updates and 24X7 support onto a high-performance deep packet inspection firewall, creating a powerful, single security solution. Even before new threats begin to spread, TotalSecure solutions are automatically updated with signatures that stop attacks before they can enter the network, ensuring around-the-clock protection. TotalSecure provides complete network security against threats including viruses, spyware, worms, Trojans and more, yet it is simple to install and manage.
Convenient Security Package
SonicWALL TotalSecure removes the complexity associated with choosing between a host of point products and add-on services by integrating comprehensive network security in a convenient and affordable package. Every TotalSecure solution includes:
• Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service subscription (1 year)
• Application Intelligence subscription included on TZ 210, NSA and E-Class NSA Series (1 year)
• Content Filtering Service subscription - Standard Edition on TZ 180 Series and Premium Business Edition on TZ 100, TZ 200, TZ 210, NSA and E-Class NSA Series (1 year)
• 24x7 Support subscription (1 year)
• ViewPoint reporting software
• SonicWALL deep packet inspection network security appliance (wired and wireless options)
Tangible Results
SonicWALL TotalSecure makes it easy to:
• Eliminate viruses, worms and Trojans
• Block spyware, adware, keyloggers, malicious mobile code (MMC) and other dangerous applications
• Protect networks against intrusions from hackers and bots
• Filter access to unproductive, inappropriate and illegal objectionable content
• Restrict recreational file-sharing, multimedia streaming and downloading from peer-to-peer applications
• Implement comprehensive security measures with a single installation
• View reports on threats and activities
• Securely access your office network from a remote location