|
Models:
|
NSA 2600
|
NSA 2650
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
|
Firewall
|
|
SonicOS Version
|
SonicOS 6.5
|
|
Security Processing Cores
|
4
|
4
|
6
|
8
|
10
|
24
|
|
Interfaces
|
8 x 1-GbE,
1 GbE Management,
1 Console
|
4 x 2.5-GbE SFP,
4 x 2.5-GbE,
12 x 1-GbE,
1 GbE Management,
1 Console
|
2 x 10-GbE SFP+,
4 x 1-GbE SFP,
12 x 1 GbE,
1 GbE Management,
1 Console
|
2 x 10-GbE SFP+,
4 x 1-GbE SFP,
12 x 1 GbE,
1 GbE Management,
1 Console
|
2 x 10-GbE SFP+,
4 x 1-GbE SFP,
12 x 1 GbE,
1 GbE Management,
1 Console
|
4 x 10-GbE SFP+,
8 x 1-GbE SFP,
8 x 1 GbE,
1 GbE Management,
1 Console
|
|
Management
|
CLI, SSH, GUI, GMS
|
|
Expansion
|
1 Expansion Slot (Rear)*, SD Card*
|
1 Expansion Slot (Rear)*, 16 GB storage module
|
1 Expansion Slot (Rear)*, SD Card*
|
|
SSO users
|
30,000
|
40,000
|
40,000
|
50,000
|
60,000
|
70,000
|
|
Maximum SonicPoints supported
|
32
|
48
|
48
|
64
|
96
|
128
|
|
Logging
|
Analyzer, Local Log, Syslog
|
|
Firewall/VPN Performance
|
NSA 2600
|
NSA 2650
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
|
Firewall Inspection Throughput1
|
1.9 Gbps
|
3.0 Gbps
|
3.4 Gbps
|
6.0 Gbps
|
9.0 Gbps
|
12.0 Gbps
|
|
Full DPI Throughput2
|
300 Mbps
|
600 Mbps
|
500 Mbps
|
800 Mbps
|
1.6 Gbps
|
3.0 Gbps
|
|
Application Inspection Throughput2
|
700 Mbps
|
1.4 Gbps
|
1.1 Gbps
|
2.0 Gbps
|
3.0 Gbps
|
4.5 Gbps
|
|
IPS Throughput2
|
700 Mbps
|
1.4 Gbps
|
1.1 Gbps
|
2.0 Gbps
|
3.0 Gbps
|
4.5 Gbps
|
|
Anti-Malware Inspection Throughput2
|
400 Mbps
|
600 Mbps
|
600 Mbps
|
1.1 Gbps
|
1.7 Gbps
|
3.0 Gbps
|
|
IMIX Throughput3
|
600 Mbps
|
700 Mbps
|
900 Mbps
|
1.6 Gbps
|
2.4 Gbps
|
3.5 Gbps
|
|
SSL Inspection & Decription (DPI SSL)2
|
200 Mbps
|
300 Mbps
|
300 Mbps
|
500 Mbps
|
800 Mbps
|
1.3 Gbps
|
|
VPN Throughput3
|
1.1 Gbps
|
1.5 Gbps
|
1.5 Gbps
|
3.0 Gbps
|
4.5 Gbps
|
5.0 Gbps
|
|
Connections per Second
|
15,000/sec
|
15,000/sec
|
20,000/sec
|
40,000/sec
|
60,000/sec
|
90,000/sec
|
|
Maximum Connections (SPI)
|
500,000
|
1,000,000
|
750,000
|
1,000,000
|
1,500,000
|
1,500,000
|
|
Maximum Connections (DPI)4
|
250,000
|
500,000
|
375,000
|
500,000
|
1,000,000
|
1,000,000
|
|
Maximum Connections (DPI)5
|
1,000/1,000
|
12,000/13,500
|
2,000/2,750
|
3,000/4,500
|
4,000/8,500
|
6,000/10,500
|
|
VPN
|
NSA 2600
|
NSA 2650
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
|
Site-to-Site Tunnels
|
250
|
1,000
|
1,000
|
1,500
|
4,000
|
6,000
|
|
IPSec VPN clients (Maximum)
|
10 (250)
|
50 (1,000)
|
50 (1,000)
|
500 (3,000)
|
2,000 (4,000)
|
2,000 (6,000)
|
|
SSL VPN licenses (Maximum)
|
2 (250)
|
2 (350)
|
2 (350)
|
2 (500)
|
2 (1,000)
|
2 (1,500)
|
|
Encryption/Authentication
|
DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
|
|
Key Exchange
|
Diffie Hellman Groups 1, 2, 5, 14v
|
|
Route-Based VPN
|
RIP, OSPF
|
|
Networking
|
NSA 2600
|
NSA 2650
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
|
IP Address Assignment
|
Static (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay
|
|
NAT Modes
|
1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode
|
|
VLAN Interfaces
|
256
|
256
|
256
|
256
|
400
|
500
|
|
Routing Protocols
|
BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
|
|
QoS
|
Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
|
|
Authentication
|
LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
|
|
VoIP
|
Full H323-v1-5, SIP
|
|
Standards
|
TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
|
|
Certifications
|
ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL
|
|
High availability
|
Active/Passive with State Sync
|
Active/Passive with State Sync
Active/Active Clustering
|
Active/Passive with State Sync,
Active/Active DPI with State Sync,
Active/Active Clustering
|
|
Hardware
|
NSA 2600
|
NSA 2650
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
|
Power Supply
|
Single, Fixed 200W
|
Dual, redundant 120W (one included)
|
Single, Fixed 250W
|
|
Fans
|
Dual, Fixed
|
Dual, redundant, hot swappable
|
|
Input Power
|
100-240 VAC, 60-50 Hz
|
|
Max Power Consumption (W)
|
49.4
|
74.3
|
74.3
|
86.7
|
90.9
|
113.1
|
|
MTBF @25ºC in hours
|
176,540
|
146,789
|
146,789
|
139,783
|
134,900
|
116,477
|
|
MTBF @25ºC in years
|
20.15
|
16.76
|
16.76
|
15.96
|
15.40
|
13.30
|
|
Form Factor
|
1U Rack Mountable
|
|
Dimensions
|
1.75 x 19.1 x 17 in
(4.5 x 48.5 x 43 cm)
|
|
Weight
|
10.1 lb (4.6 Kg)
|
13.56 lb (6.15 kg)
|
13.56 lb (6.15 Kg)
|
13.56 lb (6.15 Kg)
|
13.56 lb (6.15 Kg)
|
14.93 lb (6.77 Kg)
|
|
WEEE Weight
|
11 lb (5.0 Kg)
|
14.24 lb (6.46 kg)
|
14.24 lb (6.46 Kg)
|
14.24 lb (6.46 Kg)
|
14.24 lb (6.46 Kg)
|
19.78 lb (8.97 Kg)
|
|
Shipping Weight
|
14.3 lb (6.5 Kg)
|
20.79 lb (9.43 kg)
|
20.79 lb (9.43 Kg)
|
20.79 lb (9.43 Kg)
|
20.79 lb (9.43 Kg)
|
26.12 lb (11.85 Kg)
|
|
Major Regulatory
|
FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CU
|
|
Environment
|
32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
|
|
Humidity
|
10-90% non-condensing.
|
