SonicWall NSA 9650
SonicWall NSA 9650
Your organization faces unprecedented security challenges. The sophistication and volume of attacks increase exponentially, resulting in lost company, personal and customer data, stolen intellectual property, damaged reputations and lost productivity. Security is more complex. You need to clarify what is important when assessing alternatives. With the (bring your own) BYO revolution, the explosion of personal devices connecting to the network, led by smartphones and tablets, slows performance and decreases productivity. Also, mobile applications, such as social media and video streaming, consume an enormous amount of bandwidth. This creates two distinct problems: ensuring security and maintaining productivity. IT managers often compromise security by turning of features to maintain network performance.
| FIREWALL GENERAL | NSA 9650 |
| Operating system | SonicOS |
| Interfaces | 10 x 10 GbE SFP+, 2 x 10 GbE, 8 x 2.5 GbE SFP, 8 x 1 GbE, 1 GbE Management, 1 Console |
| Expansion | 1 Expansion Slot (Rear)* |
| Build-in storage (SSD) | 1TB, 256 GB |
| Management | CLI, SSH, Web UI, GMS, REST APIs |
| Single Sign-On (SSO) Users | 100,000 |
| Maximum SonicPoints supported | 192 |
| Logging | Analyzer, Local Log, Syslog, IPFIX, NetFlow |
| FIREWALL/VPN PERFORMANCE | NSA 9650 |
| Firewall inspection throughput | 17.1 Gbps |
| Threat Prevention throughput | 9.4 Gbps |
| Application inspection throughput | 11.5 Gbps |
| IPS throughput | 10.2 Gbps |
| Anti-malware inspection throughput | 8.5 Gbps |
| TLS/SSL inspection and decryption throughput (DPI SSL) | 2.25 Gbps |
| VPN throughput | 10.0 Gbps |
| Connections per second | 130,000/sec |
| Maximum connections (SPI) | 12,500,000 |
| Maximum connections (DPI) | 5,000,000 |
| Default/Maximum connections (DPI SSL) | 550,000/320,000 |
| VPN | NSA 9650 |
| Site-to-site VPN tunnels | 12,000 |
| IPSec VPN clients (maximum) | 2,000 (6,000) |
| SSL VPN NetExtender client (maximum) | 50 (3,000) |
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Crytography |
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-based VPN | RIP, OSPF |
| NETWORKING | NSA 9650 |
| IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
| NAT modes | 1:1, 1:many, many:many, flexible NAT (overlapping Ips), PAT, transparent mode |
| VLAN interfaces | 512 |
| Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| VoIP | Full H323-v1-5, SIP |
| Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Certifications | Certifications ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL |
| High availability | Active/Passive with State Sync Active/Active DPI with State Sync Active/Active Clustering |
| HARDWARE | NSA 9650 |
| Power supply | Dual, redundant, 350W |
| Fans | Triple, Removable |
| Maximum power consumption (W) | 113.1 |
| Input power | 100 to 240 VAC, 50-60 Hz |
| MTBF @25C (in years) | 116.477 |
| MTBF @25C (in years) | 13.3 |
| Form factor | 1U Rack Mountable |
| Dimensions | 16.9 x 16.3 x 1.8 in (43 x 41.5 x 4.5 cm) |
| Weight | 17.9 lb (8.1 kg) |
| WEEE weight | 22.5 lb (10.2 kg) |
| Shipping weight | 27.8 lb (12.6 kg) |
| Major regulatory | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CU |
| Environment (Operating/Storage) | 32F-105F (0C-40C) / -40 to 158F (-40C to 70C) |
| Humidity | 10-90% non-condensing |
Specs
System Performance
| Firewall throughput | 17.1 Gbps |
| Firewall IMIX | 4.1 Gbps |
| Antivirus Throughput | 5.5 Gbps |
| Concurrent connections | 12,500,000 |
| New connections/sec | 130,000/sec |
| IPS throughput | 10.3 Gbps |
| Threat Protection Throughput | 5.5 Gbps |
| IPSec VPN throughput | 10.0 Gbps |
| Application Control Throughput | 11.5 Gbps |
Physical interfaces
| GE RJ45 Ports | 2 x 10-GbE, 8 x 2.5-GbE, 8 x 1-GbE |
| GE SFP Slots | 10 x 10-GbE SFP+ |
| I/O ports | 1 GbE Management |
| Console Port | 1 Console |
| Storage | 1TB, 256 GB |
Dimensions & Enviroment
| Mounting | 1U Rack Mountable |
| Dimensions Width x Depth x Height (inches) | 16.9 x 16.3 x 1.8 |
| Dimensions Height x Width x Length (mm) | 43 x 41.5 x 4.5 |
| Weight | 17.9 lb (8.1 kg) |
| Power supply | Dual, redundant, 350W |
| AC input voltage | 100-240 VAC, 50-60 Hz |
| Fans | Triple, Removable |
| Power Consumption | 113.1 W (Maximum) |
| Mean Time Between Failure (MTBF) | 116,477 (in hours), 13.3 (in years) |
| Operating Temperature | 32°-105° F (0°-40° C) |
| Storage Temperature | -40° to 158° F (-40° to 70° C) |
| Humidity | 10-90% non-condensing |
| Regulatory Compliance | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI |
