SonicWall NSA 3650
SonicWall NSA 3650
The SonicWall Network Security appliance (NSa) Mid-Range Firewall series consolidates automated advanced threat prevention technologies in a mid-range next-generation firewall (NGFW) platform. It’s built on a multi-core hardware architecture featuring 10-GbE and 2.5-GbE interfaces. The NSa series scales to meet the performance demands of mid-sized networks, branch offices and distributed enterprises. NSa series firewalls feature cloud-based and on-box capabilities such as TLS/SSL decryption and inspection, application intelligence and control, real-time visualization and WLAN management.
The SonicWall Network Security Appliance (NSA) series provides mid-sized networks, branch offices and distributed enterprises with advanced threat prevention in a high-performance security platform. Combining next-generation firewall technology with our patented Reassembly-Free Deep Packet Inspection (RFDPI) engine on a multi-core architecture, the NSA series offers the security, performance and control organizations require.
| FIREWALL GENERAL | NSA 3650 |
| Operating system | SonicOS |
| Interfaces | 2 x 10 GbE SFP+, 8 x 2.5 GbE SFP, 4 x 2.5 GbE, 12 x 1 GbE, 1 GbE Management, 1 Console |
| Expansion | 1 Expansion Slot (Rear)* |
| Build-in storage (SSD) | 32 GB |
| Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs |
| Single Sign-On (SSO) Users | 50,000 |
| Maximum SonicPoints supported | 96 |
| Logging | Analyzer, Local Log, Syslog |
| FIREWALL/VPN PERFORMANCE | NSA 3650 |
| Firewall inspection throughput | 3.75 Gbps |
| Threat Prevention throughput | 1.75 Gbps |
| Application inspection throughput | 2.1 Gbps |
| IPS throughput | 1.8 Gbps |
| Anti-malware inspection throughput | 1.5 Gbps |
| TLS/SSL inspection and decryption throughput (DPI SSL) | 320 Mbps |
| VPN throughput | 1.5 Gbps |
| Connections per second | 14,000/sec |
| Maximum connections (SPI) | 2,000,000 |
| Maximum connections (DPI) | 750,000 |
| Default/Maximum connections (DPI SSL) | 100,000/40,000 |
| VPN | NSA 3650 |
| Site-to-site VPN tunnels | 3,000 |
| IPSec VPN clients (maximum) | 500 (3,000) |
| SSL VPN NetExtender client (maximum) | 2 (500) |
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Crytography |
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-based VPN | RIP, OSPF |
| NETWORKING | NSA 3650 |
| IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
| NAT modes | 1:1, 1:many, many:many, flexible NAT (overlapping Ips), PAT, transparent mode |
| VLAN interfaces | 256 |
| Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| VoIP | Full H323-v1-5, SIP |
| Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Certifications | Certifications ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL |
| High availability | Active/Passive with State Sync Active/Active Clustering |
| HARDWARE | NSA 3650 |
| Power supply | Dual, redundant, 120W (one included) |
| Fans | Dual, Fixed |
| Maximum power consumption (W) | 46 |
| Input power | 100 to 240 VAC, 50-60 Hz |
| MTBF @25C (in years) | 156.681 |
| MTBF @25C (in years) | 18.5 |
| Form factor | 1U Rack Mountable |
| Dimensions | 16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm) |
| Weight | 11.7 lb (5.3 kg) |
| WEEE weight | 12.3 lb (5.6 kg) |
| Shipping weight | 17.2 lb (7.8 kg) |
| Major regulatory | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CU |
| Environment (Operating/Storage) | 32F-105F (0C-40C) / -40 to 158F (-40C to 70C) |
| Humidity | 10-90% non-condensing |
Specs
System Performance
| Firewall throughput | 3.75 Gbps |
| Firewall IMIX | 900 Mbps |
| Antivirus Throughput | 800 Mbps |
| Concurrent connections | 2,000,000 |
| New connections/sec | 14,000/sec |
| IPS throughput | 1.8 Gbps |
| Threat Protection Throughput | 730 Mbps |
| IPSec VPN throughput | 1.5 Gbps |
| Application Control Throughput | 2.1 Gbps |
Physical interfaces
| GE RJ45 Ports | 4 x 2.5-GbE, 12 x 1-GbE |
| GE SFP Slots | 2 x 10-GbE SFP+, 8 x 2.5-GbE SFP |
| I/O ports | 1 GbE Management |
| Console Port | 1 Console |
| Storage | 32 GB |
Dimensions & Enviroment
| Mounting | 1U Rack Mountable |
| Dimensions Width x Depth x Height (inches) | 16.9 x 12.8 x 1.8 |
| Dimensions Height x Width x Length (mm) | 43 x 32.5 x 4.5 |
| Weight | 11.7 lb (5.3 kg) |
| Power supply | Dual, redundant 120W (one included) |
| AC input voltage | 100-240 VAC, 50-60 Hz |
| Fans | Dual, Fixed |
| Power Consumption | 46 W (Maximum) |
| Mean Time Between Failure (MTBF) | 156,681 (in hours), 17.9 (in years) |
| Operating Temperature | 32°-105° F (0°-40° C) |
| Storage Temperature | -40° to 158° F (-40° to 70° C) |
| Humidity | 10-90% non-condensing |
| Regulatory Compliance | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI |
