•   • 

NSA 2400MX Network Security Appliance

Model Spin
  • Performance
  • Interfaces
    Interfaces NSA 2400 NSA 2400MX NSA 3500
    10/100 Ethernet - 16 -
    10/100/1000 Ethernet 6 10 6
    Console Interface 1 1 1
    USB Ports 2 2 (plus 2 module slots) 2
  • Connectivity
    Connectivity NSA 2400 NSA 2400MX NSA 3500
    Global VPN Clients (max.) 10 (250) 10 (250) 50 (1,000)
    SSL VPN Clients (max.) 2 (25) 2 (25) 2 (30)
    Maximum Connections 225,000 225,000 325,000
    New Connections/sec 4,000 4,000 7,000
  • Wireless
    Wireless NSA 2400 NSA 2400MX NSA 3500
    SonicPoints Supported 32 32 32
    3G Modem Failover No Yes Yes
    Wireless Switch Yes Yes Yes
    Layer 2 Wireless Bridging Yes Yes Yes
  • Deployments
    NSA 2400

    Ideal for small- to medium-sized corporate and branch office environments concerned about throughput capacity and performance.

    NSA 2400MX

    Ideal for small- to medium-sized corporate and branch office environments concerned about throughput capacity and performance.

    NSA 3500

    Ideal for corporate, branch office and distributed environments needing significant throughput capacity and performance.

click to view demo+

Demos On Demand: Network Security Appliance Overview

Real-time protection and performance.

The unique SonicWALL® Network Security Appliance (NSA) 2400MX combines integrated high-performance Unified Threat Management with a powerful and versatile hardware platform for corporate and distributed environments.  The NSA 2400MX builds on the NSA 2400 by adding modularity and increased port density to an already successful product.

NSA 2400MX features.

The NSA 2400MX appliance offers an extensive array of advanced networking and configuration flexibility features in an accessible, affordable platform that is easy to deploy and manage in a wide variety of environments.

Unified Threat Management.

The NSA 2400MX provides application control, gateway anti-malware, intrusion prevention and Web content filtering on a high performance platform through its unified and simple management interface. This powerful combination ensures state-of-the-art security at a low total cost of ownership.
learn more

Application Intelligence.

SonicWALL provides real-time insight and control of network traffic broken down by applications, users and content through intuitive on-board visualization. The ability to prioritize important applications, throttle down unproductive applications and block unwanted application components ensures an efficient and safe network.
learn more

WAN Acceleration.

The WAN Acceleration Appliance (WXA) Series provides WAN Acceleration to reduce application latency, conserve bandwidth and significantly optimize WAN performance. The WXA Series appliances are provisioned, managed and controlled by existing SonicWALL E-Class Network Security Appliance (NSA), NSA and TZ Series appliances for optimal ease of use and simplified deployment.

Gateway Anti-Malware and Intrusion Prevention.

Gateway anti-virus, anti-spyware and intrusion prevention provide high performance protection against millions of unique pieces of malware with near zero latency and no file size limitation. This provides a first layer of defense and stops malware before it can reach systems on your network.
learn more

Virtual Private Networking.

High-performance Virtual Private Networks (VPNs) easily scale to thousands of end points and branch offices. And SonicWALL Clean VPN™ technology protects the integrity of both your IPSec and SSL VPN traffic, securing your remote access tunnels and decontaminating the traffic running over it.
learn more

High port density.

With 10 Gigabit Ethernet and 16 Fast Ethernet ports, the NSA 2400MX provides flexibility for installations requiring high port density coupled with robust security.  SonicWALL’s innovative PortShield technology allows all 26 ports to easily be segmented into discrete security zones allowing multiple WAN, LAN or DMZ configurations.

SonicWALL Mobile Connect™

SonicWALL® Mobile Connect™, a single unified client app for iOS, provides Apple® iPad®, iPhone®, and iPod touch® users full network-level access to corporate and academic resources over encrypted SSL VPN connections.
learn more

High performance.

SonicWALL’s patented Reassembly-Free Deep Packet Inspection engine combined with the NSA 2400MX’s dual-core security platform is capable of inspecting hundreds of thousands of connections simultaneously across all ports. With nearly zero latency and without file size limitations, the system provides 150 Mbps of Deep Packet Inspection.

Platform features.

SonicOS provides key features designed to ensure the security of your network with an intuitive graphical user interface for increased functionality and ease of use.

Deep Packet Inspection firewall.

SonicWALL Reassembly-Free Deep Packet Inspection™ technology scans against multiple application types and protocols to protect against internal and external threats at both the application layer and the network layer.2
learn more

SSL VPN remote access.

Integrated SSL VPN technology enables clientless, remote access to email, files, intranets, and applications from a variety of platforms. An SSL-VPN client can also be automatically pushed out to the client and auto-configured to provide secure layer 3 connectivity.
learn more

Secure wireless controller.

SonicWALL firewalls can be extended with secure wireless access points, SonicPoints, to provide seamless and secure 802.11 a/b/g/n wireless networks protected with the SonicWALL Clean Wireless technology.
learn more

Powerful reporting.

Historical reporting on user activity is available through SonicWALL Analyzer™ software and real-time application analysis through powerful visualization tools.
learn more

Business continuity.

Your network will continue to operate without interruption even if there is a hardware or software failure with Active/Passive failover. Stateful synchronization across the appliances enables failover without interruption to existing network traffic and VPN tunnels.
learn more

Secure Network Optimization.

Stay ahead of today’s constantly evolving landscape of threats and application-related issues with an advanced security platform that consolidates SonicWALL Next-Generation Firewall features for enterprises along with WAN acceleration for distributed offices to maximize security and control with minimum network latency.
learn more

Centralized Policy Management

The SonicWALL Global Management System (GMS ®) provides flexible, powerful and intuitive tools to manage configurations, view real-time monitoring metrics and integrate policy and compliance reporting, all from a central location.
learn more

Learn more about the Network Security Platform

Security Services.

Content filtering.

SonicWALL Content Filtering Service blocks multiple categories of objectionable Web content and provides the ideal combination of control and flexibility to ensure the highest levels of productivity and protection.
learn more

Gateway Security Services.

SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, and Application Intelligence and Control Service delivers intelligent, real-time network security protection against sophisticated application layer and content-based attacks, including viruses, spyware, worms, and more. Configurable tools prevent data leakage and enable visualization of network traffic.
learn more

Learn more about the Network Security Services
  1. The purchase of SonicWALL Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service is required to benefit from SonicWALL Deep Packet Inspection Technology.

With SonicWALL® M Series Modules, you can add more network interfaces to an existing deployment, consolidate hardware and even extend the functionality of SonicWALL firewalls that feature expandable module slots.

SonicWALL 2-Port SFP M1 Module

SonicWALL T1/E1 M1 Module

SonicWALL ADSL Annex A M1 Module

SonicWALL ADSL Annex B M1 Module

SonicWALL LAN Bypass GbE M1 Module

2-Port SFP M1 Module

2-Port SFP M1 Module

SonicWALL 2-Port SFP M1 Module

The SonicWALL 2-Port SFP M1 Module offers a fiber alternative to the 4-Port GbE M1 Module, enabling more flexible and scalable deployments in a wide range of environments.

Cost savings.

The 2-Port SFP M1 Module adds fiber connectivity over two SFP copper/fiber 1-Gbps Ethernet networking interfaces without additional third party equipment costs, eliminating potential points of failure.

Flexible deployments.

The 2-Port SFP M1 Module can use any SonicWALL-supported third-party SFP transceivers, whether using multi- or single-mode fiber, or regular copper GbE connectors.

Comprehensive security.

The 2-Port SFP M1 Module integrates SonicWALL RFDPI to added port interfaces, increasing your network security.

Comprehensive central management.

Administrators can manage the module using the SonicWALL Global Management System.

SonicWALL T1/E1 M1 Module

The SonicWALL T1/E1 M1 Module creates an edge-secure router that delivers high-performance routing, UTM Firewall and Next-Generation Firewall with Application Intelligence, Control and Visualization.

Deployment.

The T1/E1 M1 Module consolidates secure router and firewall solutions by enabling connection of a T1 or E1 digitally multiplexed telecommunications carrier system circuit via a RJ-45 jack to the SonicWALL Network Security Appliance (NSA) 2400MX.

Comprehensive security.

The T1/E1 M1 Module integrates SonicWALL Reassembly-Free Deep Packet Inspection™ (RFDPI) to added port interfaces, increasing network security.

Cost savings.

By consolidating solutions, the T1/E1 M1 Module significantly reduces hardware infrastructure costs, lowers administration overhead and eliminates potential points of failure associated with separate multiple-vendor solutions.

Ease of use.

As easy-to-implement plug-in components, the T1/E1 M1 Module adds new functionality immediately upon rebooting the firewall.

Comprehensive central management.

Administrators can manage the module using the SonicWALL Global Management System.

SonicWALL ADSL Annex A M1 Module

The SonicWALL ADSL Annex A M1 Module creates an edge-securer router that delivers high-performance routing, Unified Threat Management Firewall and Next-Generation Firewall with Application Intelligence, Control and Visualization.

Deployment.

The ADSL Annex A M1 Module consolidates secure router and firewall solutions by enabling connection an asynchronous digital subscriber line circuit via a RJ-45 jack to the SonicWALL NSA 2400MX.

Comprehensive security.

The ADSL Annex A M1 Module integrates SonicWALL Reassembly-Free Deep Packet Inspection™ (RFDPI) to added port interfaces, increasing network security.

Support for ADSL.

The Annex A module adheres to the ITU G.992.1 Annex A standard, which supports ADSL over POTS.

Cost savings.

By consolidating solutions, the ADSL Annex A M1 Module significantly reduces hardware infrastructure costs, lowers administration overhead and eliminates potential points of failure associated with separate multiple-vendor solutions.

Ease of use.

As easy-to-implement plug-in components, the ADSL Annex A M1 Module adds new functionality immediately upon rebooting the firewall.

Comprehensive central management.

Administrators can manage the module using the SonicWALL Global Management System.

SonicWALL ADSL Annex B M1 Module

The SonicWALL ADSL Annex B M1 Module creates an edge-securer router that delivers high-performance routing, Unified Threat Management Firewall and Next-Generation Firewall with Application Intelligence, Control and Visualization.

Deployment.

The ADSL Annex B M1 Module consolidates secure router and firewall solutions by enabling connection an asynchronous digital subscriber line circuit via a RJ-45 jack to the SonicWALL NSA 2400MX.

Comprehensive security.

The ADSL Annex B M1 Module integrates SonicWALL Reassembly-Free Deep Packet Inspection™ (RFDPI) to added port interfaces, increasing network security.

Support for ADSL.

The Annex B module adheres to the ITU G.992.1 Annex B standard, which supports ADSL over ISDN.

Cost savings.

By consolidating solutions, the ADSL Annex B M1 Module significantly reduces hardware infrastructure costs, lowers administration overhead and eliminates potential points of failure associated with separate multiple-vendor solutions.

Ease of use.

As easy-to-implement plug-in components, the ADSL Annex B M1 Module adds new functionality immediately upon rebooting the firewall.

Comprehensive central management.

Administrators can manage the module using the SonicWALL Global Management System.

SonicWALL LAN Bypass GbE M1 Module

The SonicWALL LAN Bypass GbE M1 Module provides a failsafe open-state switch for the NSA 2400MX that, in case of an unrecoverable firewall error, allows network traffic to continue to flow without firewall services.

Protects network traffic.

The SonicWALL LAN Bypass GbE M1 module is ideal in highly available networks where network shutdown due to a bump-in-wire firewall failure would be unacceptable. It is primarily useful in inline L2 Bridge or Transparent Mode deployments.

High end performance.

Designed for small- to medium-sized businesses (SMBs) and branch office networks, the LAN Bypass GbE M1 Module makes the high end enterprise features of SonicWALL E-Class Series solutions available on the mid-range NSA Series platform.

Firewall Overview

Security Services Included

Support Services

Firewall General

Performance

Features

Failover

  1. Services must be purchased separately.
  2. Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
  3. UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
  4. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
  5. Actual maximum connection counts are lower when UTM services are enabled.
  6. Only with the NSA 240 Series Stateful HA and Expansion Upgrade.
  7. USB 3G card and modem are not included. View all supported USB devices.

Each SonicWALL® security appliance can be customized for a business' particular needs by adding select support contracts, security services, and other options and accessories. Create and price the configuration that will best meet your security needs and budget by selecting individual items below. The cost breakdown for your custom configuration will appear at the bottom of the page. All prices shown are MSRP in US dollars.

Appliance

NSA 2400MX ApplianceNSA 2400MX Appliance
01-SSC-7100
$ 2995 2995

The NSA 2400MX combines high-performance Unified Threat Management with a powerful and versatile hardware platform for corporate and distributed environments learn more

Includes 16 10/100 Ethernet Interfaces; 10 10/100/1000 Ethernet Interfaces; 775 Mbps Stateful throughput; 2 USB Ports; and 2 Module Slots.
NSA 3500 ApplianceNSA 3500 Appliance  – Upgrade
01-SSC-7016 + $ 400 3395

The NSA 3500 is a Unified Threat Management firewall designed for small or mid-size central sites, branch offices and distributed environments needing significant capacity and performance. learn more

Includes 6 10/100/1000 Ethernet Interfaces; 1.5 Gbps Stateful throughput; and 2 USB Ports.

Appliance$2995

Product Support

Dynamic Support 8x5Dynamic Support 8x5
01-SSC-7245 1 Year
+ $ 335 335
01-SSC-7246 2 Years
+ $ 565 565
01-SSC-7247 3 Years
+ $ 805 805

Includes 8x5 telephone, email and Web-based support, software and firmware updates, Advance Exchange hardware replacement, access to electronic support tools and moderated discussion groups.

Dynamic Support 24x7Dynamic Support 24x7
01-SSC-7248 1 Year
+ $ 455 455
01-SSC-7249 2 Years
+ $ 775 775
01-SSC-7250 3 Years
+ $ 1095 1095

Includes 24x7 telephone, email and Web-based support, software and firmware updates, Advance Exchange hardware replacement, access to electronic support tools and moderated discussion groups.

Product Support$0

Security Services

Comprehensive Gateway Security Suite BundleComprehensive Gateway Security Suite Bundle
01-SSC-9225 1 Year
+ $ 1465 1465
01-SSC-9232 2 Years
+ $ 2160 2160
01-SSC-9239 3 Years
+ $ 3040 3040

BEST VALUE—Comprehensive Security Suite subscription includes: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence and Control Service; Content Filtering Premium Service; ViewPoint and 24x7 Support.

Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention & Application IntelligenceGateway Anti-Virus, Anti-Spyware, Intrusion Prevention & Application Intelligence
01-SSC-6135 1 Year
+ $ 680 680
01-SSC-6142 2 Years
+ $ 1150 1150
01-SSC-6158 3 Years
+ $ 1635 1635

Provides real-time network threat prevention with Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence and Control.

Content Filtering Service - Premium Business EditionContent Filtering Service - Premium Business Edition
01-SSC-7334 1 Year
+ $ 940 940
01-SSC-7341 2 Years
+ $ 1570 1570
01-SSC-7348 3 Years
+ $ 2265 2265

SonicWALL Content Filtering Service provides URL filtering to help businesses manage productivity and security of online activites.

ViewPoint Reporting SoftwareViewPoint Reporting Software
01-SSC-2902
+ $ 397 397

SonicWALL ViewPoint™ is an easy-to-use Web-based reporting tool that fully complements and extends SonicWALL's security products and services, and is flexibly deployable as software or a virtual appliance.

Comprehensive Anti-Spam ServiceComprehensive Anti-Spam Service
01-SSC-8997 1 Year
+ $ 975 975
01-SSC-8998 2 Years
+ $ 1655 1655
01-SSC-8999 3 Years
+ $ 2335 2335

SonicWALL Comprehensive Anti-Spam Service (CASS) offers small- to medium-sized businesses comprehensive SonicWALL Email Security protection, instantly deployed over existing SonicWALL firewall appliances.

Security Services$0

Options and Accessories

Enforced Client Anti-Virus & Anti-Spyware for 5 UsersEnforced Client Anti-Virus & Anti-Spyware for 5 Users
01-SSC-2743
+ $ 195 195
01-SSC-6954
+ $ 315 315
01-SSC-6965
+ $ 435 435

SonicWALL Enforced Client Anti-Virus and Anti-Spyware provides comprehensive gateway-enforced virus and spyware protection for desktops and laptops using a single integrated client.

Anti-Spam Desktop for 5 UsersAnti-Spam Desktop for 5 Users
01-SSC-7451
+ $ 145 145

Anti-Spam Desktop works with Outlook or Outlook Express on Microsoft Windows systems, Filters POP, Exchange, and IMAP email.

SSL VPN Remote Access for 5 UsersSSL VPN Remote Access for 5 Users
01-SSC-8630
+ $ 215 215

SonicWALL NetExtender for SSL VPN clients provides gateway enforcement, central management and the configuration flexibility to deliver comprehensive desktop security to mobile workers and corporate networks.

SonicWALL 4 Port GbE ModuleSonicWALL 4 Port GbE Module
01-SSC-8825
+ $ 495 495

The SonicWALL 4-Port GbE Module expands port density by adding four 1-Gbps Ethernet networking interfaces, without incurring costs of an additional switch. learn more

The SonicWALL 4-Port GbE Module expands port density by adding four 1-Gbps Ethernet networking interfaces, without incurring costs of an additional switch.
SonicWALL 2 Port SFP ModuleSonicWALL 2 Port SFP Module
01-SSC-8826
+ $ 380 380

The SonicWALL 2-Port SFP Module adds fiber connectivity to the NSA 2400MX over two SFP copper/fiber 1-Gbps Ethernet networking interfaces, without dditional third party equipment costs and points-of-failure. learn more

The SonicWALL 2-Port SFP Module adds fiber connectivity to the NSA 2400MX over two SFP copper/fiber 1-Gbps Ethernet networking interfaces, without dditional third party equipment costs and points-of-failure.

Options and Accessories$0

Configuration Cost Breakdown

Appliances $2995
Product Support $0
Security Services $0
Options and Accessories $0
Grand Total $0

Phone: +1 888.557.6642

United States and Canada(change)