SonicWall NSA 2650
Protect your network from the core to the perimeter with industry-validated security effectiveness and performance. The SonicWall Network Security Appliance (NSA) Mid-Range Firewall Series consolidates automated advanced threat prevention technologies in a mid-range next-generation firewall (NGFW) platform. Built on a multi-core hardware architecture featuring 10-GbE interfaces, the NSA Series scales to meet the performance demands of mid-sized networks, branch offices and distributed enterprises. Features such as application intelligence and control, real-time visualization and WLAN management provide the controls to identify, monitor and control application and user traffic across the entire network.
| FIREWALL GENERAL | NSA 2650 |
| Operating system | SonicOS |
| Interfaces | 4 x 2.5 GbE SFP, 4 x 2.5 GbE, 12 x 1 GbE, 1 GbE Management, 1 Console |
| Expansion | 1 Expansion Slot (Rear)* |
| Build-in storage (SSD) | 16 GB |
| Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs |
| Single Sign-On (SSO) Users | 40,000 |
| Maximum SonicPoints supported | 48 |
| Logging | Analyzer, Local Log, Syslog |
| FIREWALL/VPN PERFORMANCE | NSA 2650 |
| Firewall inspection throughput | 3.0 Gbps |
| Threat Prevention throughput | 1.5 Gbps |
| Application inspection throughput | 1.85 Gbps |
| IPS throughput | 1.4 Gbps |
| Anti-malware inspection throughput | 1.3 Gbps |
| TLS/SSL inspection and decryption throughput (DPI SSL) | 300 Mbps |
| VPN throughput | 1.45 Gbps |
| Connections per second | 14,000/sec |
| Maximum connections (SPI) | 1,000,000 |
| Maximum connections (DPI) | 500,000 |
| Default/Maximum connections (DPI SSL) | 100,000/60,000 |
| VPN | NSA 2650 |
| Site-to-site VPN tunnels | 1,000 |
| IPSec VPN clients (maximum) | 50 (1,000) |
| SSL VPN NetExtender client (maximum) | 2 (350) |
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Crytography |
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-based VPN | RIP, OSPF |
| NETWORKING | NSA 2650 |
| IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
| NAT modes | 1:1, 1:many, many:many, flexible NAT (overlapping Ips), PAT, transparent mode |
| VLAN interfaces | 256 |
| Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| VoIP | Full H323-v1-5, SIP |
| Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Certifications | Certifications ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL |
| High availability | Active/Passive with State Sync |
| HARDWARE | NSA 2650 |
| Power supply | Dual, redundant, 120W (one included) |
| Fans | Dual, Fixed |
| Maximum power consumption (W) | 37.2 |
| Input power | 100 to 240 VAC, 50-60 Hz |
| MTBF @25C (in years) | 162 |
| MTBF @25C (in years) | 18.5 |
| Form factor | 1U Rack Mountable |
| Dimensions | 16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm) |
| Weight | 11.5 lb (5.2 kg) |
| WEEE weight | 12.1 lb (5.5 kg) |
| Shipping weight | 17.0 lb (7.7 kg) |
| Major regulatory | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CU |
| Environment (Operating/Storage) | 32F-105F (0C-40C) / -40 to 158F (-40C to 70C) |
| Humidity | 10-90% non-condensing |
Specs
System Performance
| Firewall throughput | 3.0 Gbps |
| Firewall IMIX | 700 Mbps |
| Antivirus Throughput | 600 Mbps |
| Concurrent connections | 1,000,000 |
| New connections/sec | 14,000/sec |
| IPS throughput | 1.4 Gbps |
| Threat Protection Throughput | 600 Mbps |
| IPSec VPN throughput | 1.3 Gbps |
| Application Control Throughput | 1.4 Gbps |
Physical interfaces
| GE RJ45 Ports | 4 x 2.5-GbE, 12 x 1-GbE |
| GE SFP Slots | 4 x 2.5-GbE SFP |
| I/O ports | 1 GbE Management |
| Console Port | 1 Console |
| Storage | 16 GB |
Dimensions & Enviroment
| Mounting | 1U Rack Mountable |
| Dimensions Width x Depth x Height (inches) | 16.9 x 12.8 x 1.8 |
| Dimensions Height x Width x Length (mm) | 43 x 32.5 x 4.5 |
| Weight | 11.5 lb (5.2 kg) |
| Power supply | Dual, redundant 120W (one included) |
| AC input voltage | 100-240 VAC, 50-60 Hz |
| Fans | Dual, Fixed |
| Power Consumption | 37.2 W (Maximum) |
| Mean Time Between Failure (MTBF) | 162,231 (in hours), 18.5 (in years) |
| Operating Temperature | 32°-105° F (0°-40° C) |
| Storage Temperature | -40° to 158° F (-40° to 70° C) |
| Humidity | 10-90% non-condensing |
| Regulatory Compliance | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI |
