*** This is an upgrade model, used when upgrading from an Eligible SonicWall or Competitor Product ***
SonicWall latest mid-range next-gen firewalls, Network Security Appliance (NSa) 2800 and 3800 offer medium and large enterprises industry-leading threat prevention performance at the lowest total cost of ownership in their class. The firewalls are the cornerstones of the threat protection solution that includes simplified centralized firewall management, Zero Trust enablement, flexible licensing with an option of managed firewall services, and an embedded cyber warranty for risk mitigation.
The Gen 8 firewalls deliver comprehensive security features such as intrusion prevention, VPN, application control, malware analysis, URL filtering, DNS Security, Geo-IP and Bot-net services, protecting the perimeter from advanced threats without becoming a bottleneck.
Highlights:
- Form Factor: 1U Rackable Mounted
- Multi-gigabit Threat and Malware Analysis Throughput
- Superior TLS performance (sessions and throughput)
- Best-in-class price-performance
- Expandable storage
- Advanced DNS Filtering
- Reputation-based Content Filtering Service (CFS 5.0)
- Simplified Centralized SaaS and On-Premises management via Network Security Manager
- Wi-Fi 6 firewall management
- SonicPlatform Support
- Enterprise Internet Edge Ready
- Secure SD-WAN capability
- TLS 1.3 support
- Flexible licensing including Hardware Only, Advanced and Managed Protection Security Service
- Powered by SonicWall Capture Labs threat research team
- SonicWall Switch, SonicWave Access Point and Capture Client integration
- Cloud Secure Edge Connector Support
- Embedded Warranty up to USD$200K by Cysurance included in Service Suites
Hardware
NSa 2800 and 3800, built with the latest hardwarecomponents, deliver multi-gigabit threat preventionthroughput — even for encrypted traffic. Featuring a highport density, including multiple 10 GbE, the firewall solutionssupport network and hardware redundancy with highavailability and dual power supplies.
Architecture
The Gen 8 NSa Series runs on SonicOS 8, a new operating system that delivers a modern user interface, intuitive workflows and user-first design principles. SonicOS 8 provides multiple features designed to facilitate enterprise level workflows. It offers easy policy configuration, zero-touch deployment and flexible management — all of which allow enterprises to improve both their security and operational efficiency.
NSa 2800 and 3800 support advanced networking features,such as SD-WAN, dynamic routing, layer 4-7 high availabilityand high-speed VPN functionality. In addition to integratingfirewall and switch capabilities, the appliance provides asingle-pane-of-glass interface to manage both switchesand access points.
Advanced Protection Service Suite (APSS) includes:
- Gateway Anti-Malware, Intrusion Prevention, Application Control (inc. GW AV, Geo-IP Filter, Botnet Filter)
- Content Filtering Service
- 24x7 Support
- Capture ATP (Multi-Engine) Sandboxing
- Anti-Spam
- DNS Filtering Service
- NSM (Cloud) Management
- NSM (Cloud) Reporting – 7 Days Retention (can be extended to 30, 90 or 365 days)
Access points supported (maximum):
512
Anti-malware inspection throughput:
6 Gbps
Application inspection throughput:
7 Gbps
Capture ATP (Multi-Engine) Sandboxing:
2-Year Subscription Included
Comprehensive Anti-Spam Service:
2-Year Subscription Included
Connections per second:
50,000
Content & URL Filtering (CFS):
2-Year Subscription Included
Firewall inspection throughput:
8 Gbps
Gateway Anti-Virus, Intrusion Prevention and Application Control:
2-Year Subscription Included
Interfaces:
16 x 1GbE, 3 x 10GbE SFP+, 2 USB 3.0, 1 Console
IPSec VPN Client:
10 (1,000 Max)
IPSec VPN throughput:
5.5 Gbps
Maximum connections (DPI SSL):
150,000
Maximum connections (DPI):
1,000,000
Maximum connections (SPI):
2,000,000
NSM (Cloud) based Advanced Reporting & Analytics - 7 Days Retention:
2-Year Subscription Included
NSM (Cloud) Management:
2-Year Subscription Included
Site-to-Site VPN tunnels:
2,000
SSL VPN Client Licenses:
2 (500 Max)
Threat prevention throughput:
6 Gbps
TLS/SSL inspection and decryption throughput (DPI SSL):
1.8 Gbps
Support Cover:
24x7 Support
Warranty/Support:
2-Yr hardware/2-Yr support, firmware updates