NSA 2400MX Network Security Appliance
-
Performance
-
Interfaces
Interfaces NSA 2400 NSA 2400MX NSA 3500 10/100 Ethernet - 16 - 10/100/1000 Ethernet 6 10 6 Console Interface 1 1 1 USB Ports 2 2 (plus 2 module slots) 2 -
Connectivity
Connectivity NSA 2400 NSA 2400MX NSA 3500 Global VPN Clients (max.) 10 (250) 10 (250) 50 (1,000) SSL VPN Clients (max.) 2 (25) 2 (25) 2 (30) Maximum Connections 225,000 225,000 325,000 New Connections/sec 4,000 4,000 7,000 -
Wireless
Wireless NSA 2400 NSA 2400MX NSA 3500 SonicPoints Supported 32 32 32 3G Modem Failover No Yes Yes Wireless Switch Yes Yes Yes Layer 2 Wireless Bridging Yes Yes Yes -
Deployments
NSA 2400
Ideal for small- to medium-sized corporate and branch office environments concerned about throughput capacity and performance.
NSA 2400MX
Ideal for small- to medium-sized corporate and branch office environments concerned about throughput capacity and performance.
NSA 3500
Ideal for corporate, branch office and distributed environments needing significant throughput capacity and performance.
Real-time protection and performance.
The unique SonicWALL® Network Security Appliance (NSA) 2400MX combines integrated high-performance Unified Threat Management with a powerful and versatile hardware platform for corporate and distributed environments. The NSA 2400MX builds on the NSA 2400 by adding modularity and increased port density to an already successful product.
NSA 2400MX features.
The NSA 2400MX appliance offers an extensive array of advanced networking and configuration flexibility features in an accessible, affordable platform that is easy to deploy and manage in a wide variety of environments.
Unified Threat Management.
The NSA 2400MX provides application control, gateway anti-malware, intrusion prevention and Web content filtering on a high performance platform through its unified and simple management interface. This powerful combination ensures state-of-the-art security at a low total cost of ownership.
learn more
Application Intelligence.
SonicWALL provides real-time insight and control of network traffic broken down by applications, users and content through intuitive on-board visualization. The ability to prioritize important applications, throttle down unproductive applications and block unwanted application components ensures an efficient and safe network.
learn more
WAN Acceleration.
The WAN Acceleration Appliance (WXA) Series provides WAN Acceleration to reduce application latency, conserve bandwidth and significantly optimize WAN performance. The WXA Series appliances are provisioned, managed and controlled by existing SonicWALL E-Class Network Security Appliance (NSA), NSA and TZ Series appliances for optimal ease of use and simplified deployment.
Gateway Anti-Malware and Intrusion Prevention.
Gateway anti-virus, anti-spyware and intrusion prevention provide high performance protection against millions of unique pieces of malware with near zero latency and no file size limitation. This provides a first layer of defense and stops malware before it can reach systems on your network.
learn more
Virtual Private Networking.
High-performance Virtual Private Networks (VPNs) easily scale to thousands of end points and branch offices. And SonicWALL Clean VPN™ technology protects the integrity of both your IPSec and SSL VPN traffic, securing your remote access tunnels and decontaminating the traffic running over it.
learn more
High port density.
With 10 Gigabit Ethernet and 16 Fast Ethernet ports, the NSA 2400MX provides flexibility for installations requiring high port density coupled with robust security. SonicWALL’s innovative PortShield technology allows all 26 ports to easily be segmented into discrete security zones allowing multiple WAN, LAN or DMZ configurations.
SonicWALL Mobile Connect™
SonicWALL® Mobile Connect™, a single unified client app for iOS, provides Apple® iPad®, iPhone®, and iPod touch® users full network-level access to corporate and academic resources over encrypted SSL VPN connections.
learn more
High performance.
SonicWALL’s patented Reassembly-Free Deep Packet Inspection engine combined with the NSA 2400MX’s dual-core security platform is capable of inspecting hundreds of thousands of connections simultaneously across all ports. With nearly zero latency and without file size limitations, the system provides 150 Mbps of Deep Packet Inspection.
Platform features.
SonicOS provides key features designed to ensure the security of your network with an intuitive graphical user interface for increased functionality and ease of use.
Deep Packet Inspection firewall.
SonicWALL Reassembly-Free Deep Packet Inspection™ technology scans against multiple application types and protocols to protect against internal and external threats at both the application layer and the network layer.2
learn more
SSL VPN remote access.
Integrated SSL VPN technology enables clientless, remote access to email, files, intranets, and applications from a variety of platforms. An SSL-VPN client can also be automatically pushed out to the client and auto-configured to provide secure layer 3 connectivity.
learn more
Secure wireless controller.
SonicWALL firewalls can be extended with secure wireless access points, SonicPoints, to provide seamless and secure 802.11 a/b/g/n wireless networks protected with the SonicWALL Clean Wireless technology.
learn more
Powerful reporting.
Historical reporting on user activity is available through SonicWALL Analyzer™ software and real-time application analysis through powerful visualization tools.
learn more
Business continuity.
Your network will continue to operate without interruption even if there is a hardware or software failure with Active/Passive failover. Stateful synchronization across the appliances enables failover without interruption to existing network traffic and VPN tunnels.
learn more
Secure Network Optimization.
Stay ahead of today’s constantly evolving landscape of threats and application-related issues with an advanced security platform that consolidates SonicWALL Next-Generation Firewall features for enterprises along with WAN acceleration for distributed offices to maximize security and control with minimum network latency.
learn more
Centralized Policy Management
The SonicWALL Global Management System (GMS ®) provides flexible, powerful and intuitive tools to manage configurations, view real-time monitoring metrics and integrate policy and compliance reporting, all from a central location.
learn more
Security Services.
Content filtering.
SonicWALL Content Filtering Service blocks multiple categories of objectionable Web content and provides the ideal combination of control and flexibility to ensure the highest levels of productivity and protection.
learn more
Gateway Security Services.
SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, and Application Intelligence and Control Service delivers intelligent, real-time network security protection against sophisticated application layer and content-based attacks, including viruses, spyware, worms, and more. Configurable tools prevent data leakage and enable visualization of network traffic.
learn more
- The purchase of SonicWALL Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service is required to benefit from SonicWALL Deep Packet Inspection Technology.
With SonicWALL® M Series Modules, you can add more network interfaces to an existing deployment, consolidate hardware and even extend the functionality of SonicWALL firewalls that feature expandable module slots.
SonicWALL 2-Port SFP M1 Module
SonicWALL ADSL Annex A M1 Module
SonicWALL ADSL Annex B M1 Module
SonicWALL LAN Bypass GbE M1 Module
2-Port SFP M1 Module
SonicWALL 2-Port SFP M1 Module
The SonicWALL 2-Port SFP M1 Module offers a fiber alternative to the 4-Port GbE M1 Module, enabling more flexible and scalable deployments in a wide range of environments.
Cost savings.
The 2-Port SFP M1 Module adds fiber connectivity over two SFP copper/fiber 1-Gbps Ethernet networking interfaces without additional third party equipment costs, eliminating potential points of failure.
Flexible deployments.
The 2-Port SFP M1 Module can use any SonicWALL-supported third-party SFP transceivers, whether using multi- or single-mode fiber, or regular copper GbE connectors.
Comprehensive security.
The 2-Port SFP M1 Module integrates SonicWALL RFDPI to added port interfaces, increasing your network security.
Comprehensive central management.
Administrators can manage the module using the SonicWALL Global Management System.
SonicWALL T1/E1 M1 Module
The SonicWALL T1/E1 M1 Module creates an edge-secure router that delivers high-performance routing, UTM Firewall and Next-Generation Firewall with Application Intelligence, Control and Visualization.
Deployment.
The T1/E1 M1 Module consolidates secure router and firewall solutions by enabling connection of a T1 or E1 digitally multiplexed telecommunications carrier system circuit via a RJ-45 jack to the SonicWALL Network Security Appliance (NSA) 2400MX.
Comprehensive security.
The T1/E1 M1 Module integrates SonicWALL Reassembly-Free Deep Packet Inspection™ (RFDPI) to added port interfaces, increasing network security.
Cost savings.
By consolidating solutions, the T1/E1 M1 Module significantly reduces hardware infrastructure costs, lowers administration overhead and eliminates potential points of failure associated with separate multiple-vendor solutions.
Ease of use.
As easy-to-implement plug-in components, the T1/E1 M1 Module adds new functionality immediately upon rebooting the firewall.
Comprehensive central management.
Administrators can manage the module using the SonicWALL Global Management System.
SonicWALL ADSL Annex A M1 Module
The SonicWALL ADSL Annex A M1 Module creates an edge-securer router that delivers high-performance routing, Unified Threat Management Firewall and Next-Generation Firewall with Application Intelligence, Control and Visualization.
Deployment.
The ADSL Annex A M1 Module consolidates secure router and firewall solutions by enabling connection an asynchronous digital subscriber line circuit via a RJ-45 jack to the SonicWALL NSA 2400MX.
Comprehensive security.
The ADSL Annex A M1 Module integrates SonicWALL Reassembly-Free Deep Packet Inspection™ (RFDPI) to added port interfaces, increasing network security.
Support for ADSL.
The Annex A module adheres to the ITU G.992.1 Annex A standard, which supports ADSL over POTS.
Cost savings.
By consolidating solutions, the ADSL Annex A M1 Module significantly reduces hardware infrastructure costs, lowers administration overhead and eliminates potential points of failure associated with separate multiple-vendor solutions.
Ease of use.
As easy-to-implement plug-in components, the ADSL Annex A M1 Module adds new functionality immediately upon rebooting the firewall.
Comprehensive central management.
Administrators can manage the module using the SonicWALL Global Management System.
SonicWALL ADSL Annex B M1 Module
The SonicWALL ADSL Annex B M1 Module creates an edge-securer router that delivers high-performance routing, Unified Threat Management Firewall and Next-Generation Firewall with Application Intelligence, Control and Visualization.
Deployment.
The ADSL Annex B M1 Module consolidates secure router and firewall solutions by enabling connection an asynchronous digital subscriber line circuit via a RJ-45 jack to the SonicWALL NSA 2400MX.
Comprehensive security.
The ADSL Annex B M1 Module integrates SonicWALL Reassembly-Free Deep Packet Inspection™ (RFDPI) to added port interfaces, increasing network security.
Support for ADSL.
The Annex B module adheres to the ITU G.992.1 Annex B standard, which supports ADSL over ISDN.
Cost savings.
By consolidating solutions, the ADSL Annex B M1 Module significantly reduces hardware infrastructure costs, lowers administration overhead and eliminates potential points of failure associated with separate multiple-vendor solutions.
Ease of use.
As easy-to-implement plug-in components, the ADSL Annex B M1 Module adds new functionality immediately upon rebooting the firewall.
Comprehensive central management.
Administrators can manage the module using the SonicWALL Global Management System.
SonicWALL LAN Bypass GbE M1 Module
The SonicWALL LAN Bypass GbE M1 Module provides a failsafe open-state switch for the NSA 2400MX that, in case of an unrecoverable firewall error, allows network traffic to continue to flow without firewall services.
Protects network traffic.
The SonicWALL LAN Bypass GbE M1 module is ideal in highly available networks where network shutdown due to a bump-in-wire firewall failure would be unacceptable. It is primarily useful in inline L2 Bridge or Transparent Mode deployments.
High end performance.
Designed for small- to medium-sized businesses (SMBs) and branch office networks, the LAN Bypass GbE M1 Module makes the high end enterprise features of SonicWALL E-Class Series solutions available on the mid-range NSA Series platform.
Firewall Overview
Security Services Included
Support Services
Firewall General
Performance
Features
Failover
- Services must be purchased separately.
- Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
- UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
- VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
- Actual maximum connection counts are lower when UTM services are enabled.
- Only with the NSA 240 Series Stateful HA and Expansion Upgrade.
- USB 3G card and modem are not included. View all supported USB devices.
Each SonicWALL® security appliance can be customized for a business' particular needs by adding select support contracts, security services, and other options and accessories. Create and price the configuration that will best meet your security needs and budget by selecting individual items below. The cost breakdown for your custom configuration will appear at the bottom of the page. All prices shown are MSRP in US dollars.
Appliance
NSA 2400MX Appliance-
01-SSC-7100 $ 2995 2995 -
The NSA 2400MX combines high-performance Unified Threat Management with a powerful and versatile hardware platform for corporate and distributed environments learn more
- Includes 16 10/100 Ethernet Interfaces; 10 10/100/1000 Ethernet Interfaces; 775 Mbps Stateful throughput; 2 USB Ports; and 2 Module Slots.
NSA 3500 Appliance – Upgrade-
01-SSC-7016 + $ 400 3395 -
The NSA 3500 is a Unified Threat Management firewall designed for small or mid-size central sites, branch offices and distributed environments needing significant capacity and performance. learn more
- Includes 6 10/100/1000 Ethernet Interfaces; 1.5 Gbps Stateful throughput; and 2 USB Ports.
Appliance$2995
Product Support
Dynamic Support 8x5-
01-SSC-7245 1 Year + $ 335 33501-SSC-7246 2 Years + $ 565 56501-SSC-7247 3 Years + $ 805 805 -
Includes 8x5 telephone, email and Web-based support, software and firmware updates, Advance Exchange hardware replacement, access to electronic support tools and moderated discussion groups.
Dynamic Support 24x7-
01-SSC-7248 1 Year + $ 455 45501-SSC-7249 2 Years + $ 775 77501-SSC-7250 3 Years + $ 1095 1095 -
Includes 24x7 telephone, email and Web-based support, software and firmware updates, Advance Exchange hardware replacement, access to electronic support tools and moderated discussion groups.
Product Support$0
Security Services
Comprehensive Gateway Security Suite Bundle-
01-SSC-9225 1 Year + $ 1465 146501-SSC-9232 2 Years + $ 2160 216001-SSC-9239 3 Years + $ 3040 3040 -
BEST VALUE—Comprehensive Security Suite subscription includes: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence and Control Service; Content Filtering Premium Service; ViewPoint and 24x7 Support.
Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention & Application Intelligence-
01-SSC-6135 1 Year + $ 680 68001-SSC-6142 2 Years + $ 1150 115001-SSC-6158 3 Years + $ 1635 1635 -
Provides real-time network threat prevention with Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence and Control.
Content Filtering Service - Premium Business Edition-
01-SSC-7334 1 Year + $ 940 94001-SSC-7341 2 Years + $ 1570 157001-SSC-7348 3 Years + $ 2265 2265 -
SonicWALL Content Filtering Service provides URL filtering to help businesses manage productivity and security of online activites.
ViewPoint Reporting Software-
01-SSC-2902 + $ 397 397 -
SonicWALL ViewPoint™ is an easy-to-use Web-based reporting tool that fully complements and extends SonicWALL's security products and services, and is flexibly deployable as software or a virtual appliance.
Comprehensive Anti-Spam Service-
01-SSC-8997 1 Year + $ 975 97501-SSC-8998 2 Years + $ 1655 165501-SSC-8999 3 Years + $ 2335 2335 -
SonicWALL Comprehensive Anti-Spam Service (CASS) offers small- to medium-sized businesses comprehensive SonicWALL Email Security protection, instantly deployed over existing SonicWALL firewall appliances.
Security Services$0
Options and Accessories
Enforced Client Anti-Virus & Anti-Spyware for 5 Users-
01-SSC-2743 + $ 195 19501-SSC-6954 + $ 315 31501-SSC-6965 + $ 435 435 -
SonicWALL Enforced Client Anti-Virus and Anti-Spyware provides comprehensive gateway-enforced virus and spyware protection for desktops and laptops using a single integrated client.
Anti-Spam Desktop for 5 Users-
01-SSC-7451 + $ 145 145 -
Anti-Spam Desktop works with Outlook or Outlook Express on Microsoft Windows systems, Filters POP, Exchange, and IMAP email.
SSL VPN Remote Access for 5 Users-
01-SSC-8630 + $ 215 215 -
SonicWALL NetExtender for SSL VPN clients provides gateway enforcement, central management and the configuration flexibility to deliver comprehensive desktop security to mobile workers and corporate networks.
SonicWALL 4 Port GbE Module-
01-SSC-8825 + $ 495 495 -
The SonicWALL 4-Port GbE Module expands port density by adding four 1-Gbps Ethernet networking interfaces, without incurring costs of an additional switch. learn more
- The SonicWALL 4-Port GbE Module expands port density by adding four 1-Gbps Ethernet networking interfaces, without incurring costs of an additional switch.
SonicWALL 2 Port SFP Module-
01-SSC-8826 + $ 380 380 -
The SonicWALL 2-Port SFP Module adds fiber connectivity to the NSA 2400MX over two SFP copper/fiber 1-Gbps Ethernet networking interfaces, without dditional third party equipment costs and points-of-failure. learn more
- The SonicWALL 2-Port SFP Module adds fiber connectivity to the NSA 2400MX over two SFP copper/fiber 1-Gbps Ethernet networking interfaces, without dditional third party equipment costs and points-of-failure.
Configuration Cost Breakdown
| Appliances | $2995 |
|---|---|
| Product Support | $0 |
| Security Services | $0 |
| Options and Accessories | $0 |
| Grand Total | $0 |







