NSa SERIES NEXT-
GENERATION
FIREWALL (NGFW)

Next-gen security for mid-sized networks without the big-time price tag.

Read the NetSecOPEN Report How to Buy

Overview

Defeating advanced threats requires an advanced firewall solution built for the needs of your business. The SonicWall Network Security appliance (NSa) Mid-Range Firewall is next-generation security designed specifically for businesses of 250 users and up. Work with the confidence of knowing you’re protected against the day-to-day incursions as well as against advanced threats like ransomware, attacks against non-standard ports, and breaches in firewalls, all at the speed of business.

With cloud-based and on-box capabilities like TLS/SSL decryption and inspection, application intelligence and control, secure SD-WAN, real-time visualization, and WLAN management, SonicWall provides flexible, fast and cost-effective security to keep the threats out and your business thriving.

Features

Blocks More Attacks With RTDMI™

Real-Time Deep Memory Inspection (RTDMI™) proactively detects and blocks unknown malware via deep memory inspection in real time, a revolutionary approach to defend against zero-day and side-channel attacks and other unrecognized threats.

Secure Remote Workers

SonicWall NetExtender provides an intuitive SSL-VPN connection client that’s easy to deploy and configure. Easily provide your remote workers with secure access to your corporate network from Linux, Mac and Windows devices.

Secure SD-WAN Technology

Leave MPLS behind for a more agile, more secure and more cost-effective network optimized for today’s broadband-driven, cloud-infused landscape. Secure SD-WAN technology is built in to NSa firewalls, so there’s no need to purchase additional SD-WAN appliances and licenses.

Built-in Wireless Controller

Implement high-speed wireless security by combining a NSa series next-generation firewall with a SonicWall SonicWave wireless access point. NSa series firewalls and SonicWave access points both feature 2.5 GbE ports that enable multi-gigabit wireless throughput offered in Wave 2 wireless technology.

Low Total Cost of Ownership

Make a SonicWall NSa firewall the start of enterprise savings. From reduced costs through zero-touch deployment to enabling SD-WAN and delivering NetSecOPEN-verified threat block rates on par or better than competitors at a fraction of the cost, SonicWall NSa firewalls are security you can’t afford to be without.

Cloud-based & On-Premises Centralized Management

Gain greater visibility into your enterprise even as it becomes more complex on- and off-prem. Tightly integrated into the SonicWall ecosystem, bring your firewalls into a single-pane-of-glass management, licensing, reporting and analytics.

High Performance and Port Density

Deploy next generation firewalls that are designed for mid-size and distributed enterprises to deliver much needed multi-gigabit threat prevention performance while providing high port density including 10 GbE ports for flexible network connectivity

NSa Series Models

NSa 6700

Firewall Inspection Throughput 36 Gbps
Application Inspection Throughput 20 Gbps
IPS Throughput 20 Gbps
Threat Prevention Throughput 19 Gbps
VPN Throughput 19 Gbps
Maximum Connections 8,000,000
New Connections/Sec 228,000
Interfaces 2x40-GbE QSFP+, 8x25/10/5/2.5-GbE SFP28, 4x10/5/2.5-GbE SFP+, 4x10/5/2.5/1-GbE Cu, 16x1-GbE
Built-in Storage 256 GB
Site-to-Site VPN Tunnels 6,000
IPSec VPN Clients (Maximum) 2000 (6000)
SSL VPN NetExtender Clients (Maximum) 2 (1500)
VLAN Interfaces 512
More specs

NSa 5700

Firewall Inspection Throughput 28 Gbps
Application Inspection Throughput 18 Gbps
IPS Throughput 17 Gbps
Threat Prevention Throughput 15 Gbps
VPN Throughput 15 Gbps
Maximum Connections 5,000,000
New Connections/Sec 228,000
Interfaces 6x10/5/2.5/1 GbE (SFP+), 2x10/5/2.5/1 GbE , 24x1GbE Cu
Built-in Storage 128 GB
Site-to-Site VPN Tunnels 6,000
IPSec VPN Clients (Maximum) 2000 (4000)
SSL VPN NetExtender Clients (Maximum) 2 (1500)
VLAN Interfaces 512
More specs

NSa 4700

Firewall Inspection Throughput 18 Gbps
Application Inspection Throughput 11 Gbps
IPS Throughput 10 Gbps
Threat Prevention Throughput 9.5 Gbps
VPN Throughput 11 Gbps
Maximum Connections 4,000,000
New Connections/Sec 115,000
Interfaces 6x10/5/2.5/1-GbE SFP+, 24x1-GbE
Built-in Storage 128 GB
Site-to-Site VPN Tunnels 4,000
IPSec VPN Clients (Maximum) 500 (3000)
SSL VPN NetExtender Clients (Maximum) 2 (1000)
VLAN Interfaces 512
More specs

NSa 3700

Firewall Inspection Throughput 5.5 Gbps
Application Inspection Throughput 4.2 Gbps
IPS Throughput 3.8 Gbps
Threat Prevention Throughput 3.5 Gbps
VPN Throughput 2.2 Gbps
Maximum Connections 2,000,000
New Connections/Sec 22,000
Interfaces 24x1GbE, 6x10G SFP+, 4x5G SFP+
Built-in Storage 128 GB
Site-to-Site VPN Tunnels 3,000
IPSec VPN Clients (Maximum) 50 (1000)
SSL VPN NetExtender Clients (Maximum) 2 (500)
VLAN Interfaces 256
More specs

NSa 2700

Firewall Inspection Throughput 5.2 Gbps
Application Inspection Throughput 3.6 Gbps
IPS Throughput 3.4 Gbps
Threat Prevention Throughput 3.0 Gbps
VPN Throughput 2.1 Gbps
Maximum Connections 1,500,000
New Connections/Sec 21,000
Interfaces 16 x 1GbE, SFP+ 3 x 10G
Built-in Storage 64 GB
Site-to-Site VPN Tunnels 1250
IPSec VPN Clients (Maximum) 50 (1000)
SSL VPN NetExtender Clients (Maximum) 2 (500)
VLAN Interfaces 256
More specs

NSa 9650

Firewall Inspection Throughput 17.1 Gbps
Application Inspection Throughput 11.5 Gbps
IPS Throughput 10.3 Gbps
Threat Prevention Throughput 9.4 Gbps
VPN Throughput 10.0 Gbps
Maximum Connections 12,500,000
New Connections/Sec 130,000
Interfaces 10 x 10-GbE SFP+
2 x 10-GbE
8 x 2.5-GbE
8 x 1-GbE
Built-in Storage 1TB, 128 GB
Site-to-Site VPN Tunnels 12,000
IPSec VPN Clients (Maximum) 2,000 (6,000)
SSL VPN NetExtender Clients (Maximum) 50 (3,000)
VLAN Interfaces 512
More specs

NSa 9450

Firewall Inspection Throughput 17.1 Gbps
Application Inspection Throughput 10.8 Gbps
IPS Throughput 10.2 Gbps
Threat Prevention Throughput 9.0 Gbps
VPN Throughput 10.0 Gbps
Maximum Connections 10,000,000
New Connections/Sec 130,000
Interfaces 10 x 10-GbE SFP+
2 x 10-GbE
8 x 2.5-GbE
8 x 1-GbE
Built-in Storage 1TB, 128 GB
Site-to-Site VPN Tunnels 12,000
IPSec VPN Clients (Maximum) 2,000 (6,000)
SSL VPN NetExtender Clients (Maximum) 2 (3,000)
VLAN Interfaces 512
More specs

NSa 9250

Firewall Inspection Throughput 12.0 Gbps
Application Inspection Throughput 7.75 Gbps
IPS Throughput 7.2 Gbps
Threat Prevention Throughput 6.5 Gbps
VPN Throughput 6.75 Gbps
Maximum Connections 7,500,000
New Connections/Sec 90,000
Interfaces 10 x 10-GbE SFP+
2 x 10-GbE
8 x 2.5-GbE
8 x 1-GbE
Built-in Storage 1TB, 128 GB
Site-to-Site VPN Tunnels 12,000
IPSec VPN Clients (Maximum) 2,000 (6,000)
SSL VPN NetExtender Clients (Maximum) 2 (3,000)
VLAN Interfaces 512
More specs

NSa 6650

Firewall Inspection Throughput 12.0 Gbps
Application Inspection Throughput 6.0 Gbps
IPS Throughput 6.0 Gbps
Threat Prevention Throughput 5.5 Gbps
VPN Throughput 6.0 Gbps
Maximum Connections 5,000,000
New Connections/Sec 90,000
Interfaces 6 x 10-GbE SFP+
2 x 10-GbE
4 x 2.5-GbE SFP
8 x 2.5-GbE
8 x 1-GbE
Built-in Storage 64 GB
Site-to-Site VPN Tunnels 8,000
IPSec VPN Clients (Maximum) 2,000 (6,000)
SSL VPN NetExtender Clients (Maximum) 2 (2,000)
VLAN Interfaces 512
More specs

NSa 5650

Firewall Inspection Throughput 6.25 Gbps
Application Inspection Throughput 4.25 Gbps
IPS Throughput 3.4 Gbps
Threat Prevention Throughput 3.4 Gbps
VPN Throughput 3.5 Gbps
Maximum Connections 4,000,000
New Connections/Sec 40,000
Interfaces 2 x 10-GbE SFP+
2 x 10-GbE
4 x 2.5-GbE SFP
4 x 2.5-GbE
16 x 1-GbE
Built-in Storage 64 GB
Site-to-Site VPN Tunnels 6,000
IPSec VPN Clients (Maximum) 2,000 (6,000)
SSL VPN NetExtender Clients (Maximum) 2 (1,500)
VLAN Interfaces 500
More specs

NSa 3650

Firewall Inspection Throughput 3.75 Gbps
Application Inspection Throughput 2.1 Gbps
IPS Throughput 1.8 Gbps
Threat Prevention Throughput 1.75 Gbps
VPN Throughput 1.5 Gbps
Maximum Connections 2,000,000
New Connections/Sec 14,000
Interfaces 2 x 10-GbE SFP+
8 x 2.5-GbE SFP
4 x 2.5-GbE
12 x 1-GbE
Built-in Storage 32 GB
Site-to-Site VPN Tunnels 3,000
IPSec VPN Clients (Maximum) 500 (3,000)
SSL VPN NetExtender Clients (Maximum) 2 (500)
VLAN Interfaces 256
More specs

NSa 2650

Firewall Inspection 3.0 Gbps
Application Inspection Throughput 1.4 Gbps
IPS Throughput 1.4 Gbps
Threat Prevention Throughput 1.25 Gbps
VPN Throughput 1.3 Gbps
Maximum Connections 1,000,000
New Connections/Sec 14,000
Interfaces 4 x 2.5-GbE
SFP 4 x 2.5-GbE
12 x 1-GbE
Built-in Storage 16 GB
Site-to-Site VPN Tunnels 1,000
IPSec VPN Clients (Maximum) 50 (1,000)
SSL VPN NetExtender Clients (Maximum) 2 (350)
VLAN Interfaces 256
More specs

NSa 4650

Firewall Inspection Throughput 6.0 Gbps
Application Inspection Throughput 3.0 Gbps
IPS Throughput 2.3 Gbps
Threat Prevention Throughput 2.5 Gbps
VPN Throughput 3.0 Gbps
Maximum Connections 3,000,000
New Connections/Sec 40,000
Interfaces 2 x 10-GbE SFP+
4 x 2.5-GbE SFP
4 x 2.5-GbE
16 x 1-GbE
Built-in Storage 32 GB
Site-to-Site VPN Tunnels 4,000
IPSec VPN Clients (Maximum) 2,000 (4,000)
SSL VPN NetExtender Clients (Maximum) 2 (1,000)
VLAN Interfaces 400
More specs

Security Services & Management

SonicWall Advanced Gateway Security Suite (AGSS)

SonicWall Advanced Gateway Security Suite (AGSS) integrates a wide range of network security services into a convenient, affordable package. AGSS is available as an add-on service for all physical and virtual SonicWall firewalls, including our NSsp, NSa, TZ and NSv Series to protect against the most advanced threats known, and unknown.


Learn More

SonicWall Capture Advanced Threat Protection (ATP) Service

Mitigate the risk of zero-day threats with SonicWall Capture Advanced Threat Protection (ATP) sandbox, a cloud-based service that detects and blocks unknown threats at the gateway until a verdict is rendered.


Learn More

Content Filtering Service (CFS)

SonicWall Content Filtering Service (CFS), running on SonicWall next-generation firewalls (NGFWs) is a powerful protection and productivity solution that delivers unequaled content filtering enforcement for educational institutions, businesses, libraries and government agencies. Using SonicWall CFS, organizations have control over the websites that students, faculty and employees can access.


Learn More

Accessories

Order replacement parts and upgrades, including power supplies and rack-mount kits, for your SonicWall NSa series firewall.

See all Accessories

Gen 7 Firewalls:
Our Platform-Ready
NGFW

SonicWall’s Gen 7 NGFWs offer vastly improved stability, performance, and threat protection regardless of encryption or file size. Features like stateful high-availability and power supply redundancy deliver ‘always-on’ continuity, while superior UX and simpler, single-pane-of-glass management ease complexity. These firewalls deliver superior UX and simpler, single-pane-of-glass management. And with SD-WAN and DPI-SSL included, they offer an industry-leading TCO.

Learn More

NetSecOPEN Certification

SonicWall delivers an unmatched combination of industry-leading performance and price. But you don’t have to take our word for it. Take our performance results. Read the NetSecOPEN report on the four largest certified firewall vendors and find why SonicWall comes out ahead.

Read the Report

Try a
Live Demo

Explore the features and interface of the SonicWall NSa series firewall in a functional live demo.

See for Yourself

Resources

On Demand Webcast

How to Cross-Shop Today's Modern Firewalls

Read More
Case Study

Apple Federal Credit Union

Read More
White Paper

Tolly Report - SonicWall vs. Fortinet

Read More

What Our Customers
Are Saying about us: