Home > SonicWall > Network Security > NSA Series



SonicWall NSa Gen 7 & 8 Series


SonicWall Network Security appliance (NSa) Mid-Range Firewall protects against day-to-day incursions and advanced threats like ransomware, attacks against non-standard ports, and breaches in firewalls, all at the speed of business.

With cloud-based and on-box capabilities like TLS/SSL decryption and inspection, application intelligence and control, secure SD-WAN, real-time visualization, and WLAN management, SonicWall provides flexible, fast, and cost-effective security to keep the threats out and your business thriving.


The SonicWall NSa Series has been built from the ground up with the latest hardware components, all designed to deliver multi-gigabit threat prevention throughput — even for encrypted traffic. Featuring a high port density including multiple 40 GbE and 10 GbE ports, the solution supports network and hardware redundancy with high availability, and dual power supplies.

Now, medium- to large-sized enterprises can have a choice of firewalls with industry-leading performance at the lowest total cost of ownership in their class. Upon adding in SonicWall's comprehensive security features such as intrusion prevention, VPN, application control, malware analysis, URL filtering, DNS Security, Geo-IP and Bot-net services, one can have the peace of mind their perimeter is protected from advanced threats without their firewall becoming a performance bottleneck.




Deployments
The
NSa Series has two main deployment options for medium and distributed enterprises:
  • Internet Edge Deployment - In this standard deployment option, the Gen NSa Series NGFW protects private networks from malicious traffic coming from the internet.
  • Medium and Distributed Enterprises - The SonicWall NSa Series supports SD-WAN and can be centrally managed, making it an ideal fit for medium and distributed enterprises.


SonicOS 7.0
The Gen 7 NSa Series runs on SonicOS 7.0, a new operating system also built from the ground up, delivering a modern user interface, intuitive workflows, and user-first design principles. SonicOS 7.0 provides multiple features designed to facilitate enterprise-level workflows, easy policy configuration, zero-touch deployment, and flexible management — all of which allow enterprises to improve both their security and operational efficiency.

The Gen 7 NSa Series also supports advanced networking features, such as SD-WAN, dynamic routing, layer 4-7 high-availability and high-speed VPN functionality. In addition to integrating firewall and switch capabilities, the appliance provides a single-pane-of-glass interface to manage both switches and access points.

With Network Access Control integrated within the SonicOS 7.0, SonicWall customers can intergrate with Aruba ClearPass, giving them comprehensive and precise profiling, authentication, and authorization for systems and devices trying to access their IT resources. SonicOS provides a RESTful API that supports Aruba ClearPass as NAC to integrate with SonicWall NGFW. This architecture turns static security into contextual security to provide more flexible and advance security protection.

SonicOS 8.0
The Gen 8 NSa Series runs on SonicOS 8 continues with all the great features of SonicOS 7.0 while adding advanced security, simplified policy management, plus critical networking and management capabilities for advanced enterprises with next-gen SD-Branches and small to medium-sized businesses (SMBs). SonicOS 8 also enables Wi-Fi 6 support, DNS advanced security, reputation-based content filtering.


SonicWall Security & Support Services

Built to mitigate the advanced cyberattacks of today and tomorrow, the NSa Series offers access to SonicWall’s advanced firewall security services, allowing you to protect your entire IT infrastructure. Solutions and services such as Cloud Application Security, Capture Advanced Threat Protection (ATP) cloud-based sandboxing, Real-Time Deep Memory Inspection (RTDMI™) and Reassembly-Free Deep Packet Inspection (RFDPI) — for all traffic including TLS 1.3 — offering an organization comprehensive gateway protection from most stealthy and dangerous malware, including zero-day and encrypted threats.

SonicWall empowers businesses to reduce risk, stay compliant, and scale securely with smarter, co-managed cybersecurity - providing the peace of mind customers need in today's threat landscape. They do this through various security services that build on top of each other and work in unison to help create a barrier against the threats.

The following SonicWall's Security & Support services are available al a carte, as a bundle in the form of Advanced Protection Service Suite (APSS), or already bundled with the NSa GEN 7 & 8 series firewall.

Gateway Anti-Virus, Intrusion Prevention, & Application Control Bundle
  • Gateway Anti-Virus protection combines network-based anti-malware with a dynamically updated cloud database of tens of millions of malware signatures. Dynamic spyware protection blocks the installation of malicious spyware and disrupts existing spyware communications.
  • Intrusion Prevention Service (IPS) - Cutting edge technology protects against worms, trojans, software vulnerabilities and other intrusions by scanning all network traffic for malicious or anomalous patterns, thereby increasing network reliability and performance.
  • Application intelligence and control is a set of granular, application-specific policies providing application classification and policy enforcement to help administrators control and manage both business and non-business related applications.
Content Filtering Services (CFS) lets you enforce Internet use policies and control internal access to inappropriate, unproductive and potentially illegal web content with comprehensive content filtering. Reputation-based CFS 5.0 provides a reputation score that forecasts the security risk of a URL across 93 web categories.

Capture Advanced Threat Protection (ATP) multi-engine sandbox for analysis. Enhancing Capture ATP is their patented Real-Time Deep Memory Inspection (RTDMI™) technology. As one of Capture ATP’s engines, RTDMI detects and blocks malware and zero-day threats by inspecting directly in memory.
By leveraging Capture ATP with RTDMI technology along with security services such as Reassembly-Free Deep Packet Inspection (RFDPI), Anti-virus and Anti-spyware Protection, intrusion prevention system, Application Intelligence and Control, Content Filtering Services, DPI-SSL, TZ series, your NSa GEN 7 firewall will stop malware, ransomware and other advanced threats at the gateway.

DNS Filtering
blocks malicious websites or applications at the DNS layer to filter out harmful or inappropriate content without enabling TLS decryption and adversely affecting performance.


Comprehensive Anti-Spam Service (for use with on-prem email servers only) offers small-to-medium sized businesses a greater than 99% effectiveness against spam, dropping greater than 80% of spam at the gateway, while utilizing advanced anti-spam techniques like Adversarial Bayesian™ and machine-learning filtering.

SonicWall's 24/7 Support rounds it all off by providing firmware updates, 24/7 SonicWall Phone Support and web-based support for basic configuration and troubleshooting assistance, and Hardware Exchange Replacement service where if SonicWall's support can't resolve a functionality issue remotely, they will issue an RMA for the defective unit and send a replacement unit to arrive in 1-2 business days.

NSM Advanced - As part of the Advance Protection Security Services (APSS), SonicWall's Network Security Manager (NSM) provides Cloud-based Network Management streamlining network security management to enhance capability without increasing complexity. It adapts and scales to your growing business and evolving security requirements. From a unified console, seamlessly manage all firewall operations, uncover hidden risks, identify misconfiguration of policies, and simplify compliance with centralized policy enforcement and a comprehensive audit trail.

Included with the NSM Advanced is
Advanced Reporting & Analytics providing 7-Day Retention of Alerts, reports, and analytics which can be extended 30, 90 or 365 days of retention as needed.

NSM Cloud Management Data Sheet






FOR MORE INFORMATION, QUOTES, OR TO DISCUSS YOUR I.T. SECURITY NEEDS


CALL CPU @ 800-880-4200



COMPARE THE MODELS

Whether you're thinking about purchasing a SonicWall NSa firewall for the first time or for a new location or upgrading from an older SonicWall NSa firewall, the following chart can assist you with deciding which NSa model would be best for your organization's network security.

For Enlarged Viewing: Zoom in OR Right Click on either image & select "Open Image in New Tab"



FOR MORE INFORMATION, QUOTES, OR TO DISCUSS YOUR I.T. SECURITY NEEDS

CALL CPU @ 800-880-4200
(M-F 8:30am to 5:30pm CST)