Home > SonicWall > Network Security > NSA Series

SonicWall NSA Series
(Wireless appliances available in NSA 220 and 250M models only)
The NSA Series Next-Generation Firewall provides security, reliability, and performance for distributed enterprises, small- to medium-sized organizations, branch offices, school campuses and government agencies. The NSA Series minimizes deployment cost and complexity by integrating multiple technologies into a single security appliance.

Next Generation Firewall Security: A suite of tools, including intrusion prevention, gateway anti-virus, and anti-spyware plus application intelligence and control, offer granular control through application blocking, bandwidth management and more. Additional security and connectivity capabilities such as IPSec VPN, SSL VPN, content filtering, anti-spam and enforced client anti-virus make the NSA Series a comprehensive and powerful all-in-one security solution.

Multi-core Architecture:
Single-core and ASIC processors may have been sufficient for the design of traditional stateful firewalls. But NSA Series appliances go above and beyond, with a multi-core design to help ensure that the deep packet inspection provided by the SonicWall Next-Generation Firewall can scale with your expanding organization. As many as 24 cores spread the network load evenly and protect against extreme performance degradation often present in other technologies when exposed to heavy traffic conditions and malicious content.

Deep Packet Inspection Technology:
Proprietary SonicWall Reassembly-Free Deep Packet Inspection (RFDPI) technology offers extremely high scalability and performance suitable for even the most demanding environments. RFDPI scans traffic on every port, on every protocol and in any direction to provide ultimate visibility and control. The unique design of the RFDPI engine allows it to inspect every byte of a connection—and up to hundreds of thousands of simultaneous connections—in order to categorize application traffic and protect against internal and external threats at both the application and network layer.

Lowered Complexity Costs:
Along with superior power efficiency, SonicWall NSA Series appliances lower the total cost of ownership by reducing complexity and the time necessary to configure, deploy and maintain security solutions. An intuitive GUI and powerful set-up wizards make it easy to quickly set up and fine-tune network policies, application rules, VPN connections and more.

Current Models: NSA 220/220W, 250M/250M-W, 2600, 3600, 4600, 5600 & 6600
(Wireless NSA models only available in NSA 220 and 250M appliances)

Enterprise-class security and performance made affordable for small- to medium-sized business. The NSA Series offers industry leading next-generation firewall protection, performance, and scalability.

The NSA Series appliances are available in a TotalSecure model which is simply the appliance bundled with 1 year of Comprehensive Gateway Security Suite (CGSS)*. All NSA Series appliances are also available as upgrades through SonicWall's Secure Upgrade Plus 2 or 3-year CGSS* program. The Secure Upgrade Plus appliances are bundled with 2 or 3 years of CGSS*. This upgrade path can be used to upgrade from an earlier qualifying SonicWALL model or a qualifying competitive brand firewall.

Each NSA model also available in an High Availability (HA) appliance. The NSA HA model must also match the primary NSA appliance you are using and wanting to institute fail over for.

For pre-sales sizing consultation or pricing, give CPU Distributing a call at 800-880-4200!


Basic NSA Series Info (NSA 220/220W, 250M/250M-W, 2600, 3600, 4600, 5600, & 6600)
(See NSA Series Data Sheet below for full specifications)

Stateful Throughput
(No security services running)
NSA 220 : 600 Mpbs
NSA 250 : 750 Mpbs
NSA 2600: 1.9 Gpbs
NSA 3600: 3.4 Gpbs
NSA 4600: 6.0 Gpbs
NSA 5600: 9.0 Gpbs
NSA 6600: 12.0 Gpbs
UTM Throughput
(All CGSS* Security Services Running)
NSA 220 : 110 Mpbs
NSA 250 : 130 Mpbs
NSA 2600: 300 Mpbs
NSA 3600: 500 Mpbs
NSA 4600: 800 Mpbs
NSA 5600: 1.6 Gpbs
NSA 6600: 3.0 Gpbs
Site-to-Site VPNs
(Firewall to Firewall)
NSA 220 : 25
NSA 250M: 50
NSA 2600: 75
NSA 3600: 800
NSA 4600: 1,500
NSA 5600: 4,000
NSA 6600: 6,000
GVC: Global VPN Client Licenses
(IPsec - Can apply up to 2 over the max but
only use up to the max # of licenses)
NSA 220 : 2 (25 Max)
NSA 250 : 2 (25 Max)
NSA 2600: 10 (250 Max)
NSA 3600: 50 (1,000 Max)
NSA 4600: 500 (3,000 Max)
NSA 5600: 2,000 (4,000 Max)
NSA 6600: 2,000 (6,000 Max)
SSL VPN Licenses
(Hard set on maximum # of licenses allowed)
NSA 220 : 2 (15 Max)
NSA 250 : 2 (15 Max)
NSA 2600: 2 (25 Max)
NSA 3600: 2 (30 Max)
NSA 4600: 2 (30 Max)
NSA 5600: 2 (50 Max)
NSA 6600: 2 (50 Max)

SonicPoints Supported
(When using multiple SonicPoints with a Wired
Appliance, roamers will NOT have to re-login
from one zone to another. If you use Sonic-
Points with a wireless NSA 220 or 250M
appliance then the roamers will have to re-login
when they cross from the SonicPoint zone over
into the wireless firewall zone and vice-versus.
NSA 220 : 16
NSA 250M: 16
NSA 2600: 32
NSA 3600: 48
NSA 4600: 64
NSA 5600: 96
NSA 6600: 96

Nodes Supported ALL NSA models: Unrestricted
NSA 220 : 7 x 1-GbE
NSA 250M: 5 x 1-GbE, 1 Module Interface
NSA 2600: 8 x1-GbE,
NSA 3600: 2 x 10-GbE SFP+, 4 x 1-GbE SFP, 12 x 1-GbE,
NSA 4600: 2 x 10-GbE SFP+, 4 x 1-GbE SFP, 12 x 1-GbE,
NSA 5600: 2 x 10-GbE SFP+, 4 x 1-GbE SFP, 12 x 1-GbE,
NSA 6600: 4 x 10-GbE SFP+, 8 x 1-GbE SFP, 8 x 1-GbE (1 LAN Bypass pair)

*CGSS (Comprehensive Gateway Security Suite): Provides real time network threat prevention with Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention Service, Premium Content Filter, Cloud AV and Application Control and 24x7 Support.
Data Sheets:
NSA Series SonicWALL VPN Client SonicWALL Comprehensive Gateway Security Suite
Enforced Client AV/ASW SonicWALL SSL Inspection SonicWALL Comprehensive Anti-Spam Service
Deep Packet Inspection SonicWALL Failover & Failback SonicWALL SonicWALL Wireless Network Security