|
|
|
____________________________________________________________________________________
SonicWALL® NSA 4500 is a next generation Unified Threat Management firewall, utilizing a breakthrough multi-core hardware design with 8 cores and 6 Gigabit Ethernet interfaces to deliver real-time internal and external network protection without compromising network performance for corporate networks and distributed environments.
The NSA 4500 combines high-speed intrusion prevention, file & content inspection and powerful application firewall capabilities with an extensive array of advanced networking, high availability and configuration flexibility.
The NSA 4500 offers:
-
Deep Packet Inspection & Multi-Threat Protection
-
Powerful Performance
-
Networking & Complete Business Continuity
-
Integration & Simplified Management
-
Deployment Flexibility
_____________________________________________
You Can Purchase the NSA 4500 Series as:
-
A firewall appliance by itself,
-
A TotalSecure* firewall appliance, or
-
As an upgrade from a qualifying SonicWALL Legacy Unit to a 2 or 3 year TotalSecure* firewall unit.
-
And as a High Availbility unit for fail-over for a primary NSA 4500 appliance.
High Availability (HA) units are available for fail over protection for the NSA Series appliances at a lower price than the appliance by itself. An NSA 4500 High Availability unit must be paired with a standard NSA 4500. NOTE: Unlike the NSA 240, 2400, & 3500, you do not need the Stateful HA Upgrade for the NSA 4500. It is already included in the unit.
This optional HA unit is a wise choice when you cannot afford to be down while you wait for a replacement unit to arrive. This NSA 4500 HA unit will provide true failover if the primary appliance goes down and will allow you to continue on with business as usual while you wait for a replacement unit for the primary to arrive. SKUs and Pricing below.
* TotalSecure is the appliance bundled with 1 Year of Comprehensive Gateway Security Suit (CGSS) which includes:
-
Gateway Anti-Virus, Anti-Spyware,
-
Intrusion Prevention Service,
-
Application Firewall,
-
Content Filtering Premium Service,
-
24x7 Dynamic Support, and
-
ViewPoint License
Various other optional services can be added on to an NSA 3500 appliance. These services are listed below.
Not sure which version you need?
Give us a call at 800-880-4200.
One of our knowledgeable representatives will be more than happy to assist you!
Do you have customers with 10 or more TZ or NSA units that need managing?
Give us a call at 800-880-4200 and ask us about SonicWALL's GMS solution.
_____________________________________________________________________________________
_____________________________________________________________________________________
** CGSS = Comprehensive Gateway Security Suite and includes 1 Year of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall, Content Filtering Premium Service, 24x7 Dynamic Support, and ViewPoint License.
|
NSA 4500 – Firewall Appliances (See Below) |
To "Get Price" login to our online catalog will be required. |
|
NSA 4500 - Appliance Only |
01-SSC-7012 |
|
|
NSA 4500 GAV/IPS/Application Firewall Security Bundle - 1 YR |
01-SSC-9051 |
|
|
NSA 4500 TotalSecure
(1 Year CGSS**) |
01-SSC-7032 |
|
|
NSA 4500 Secure Upgrade Plus - 2 Yrs CGSS** |
01-SSC-8676 |
|
|
NSA 4500 Secure Upgrade Plus - 3 Yrs CGSS** |
01-SSC-8675 |
|
|
NSA 4500 High Availability (HA) Unit |
01-SSC-7050 |
|
_____________________________________________________________________________________
_____________________________________________________________________________________
|
NSA 4500 – Subscription Services & Renewals (See Below) |
|
SonicWALL Comprehensive Gateway Security Suite (CGSS)
BEST VALUE-Comprehensive Security Suite subscription includes- Gateway anti-virus, Anti-spyware, Application Firewall service, Intrusion Prevention Services, Content Filtering Premium Service, ViewPoint and 24x7 Dynamic Support.
|
|
1 Year CGSS |
01-SSC-9223 |
|
|
2 Years CGSS |
01-SSC-9230 |
|
|
3 Years CGSS |
01-SSC-9237 |
|
|
SonicWALL Gateway Anti-Virus, Spyware and Intrusion Prevention Service (GASIPS)
Provides real time network threat prevention with gateway anti-virus,anti-spyware and intrusion prevention service.
|
|
1 Year GASIPS |
01-SSC-6133 |
|
|
2 Years GASIPS |
01-SSC-6140 |
|
|
3 Years GASIPS |
01-SSC-6156 |
|
|
SonicWALL Content Filtering Service Premium Business Edition (CFSPB)
Provides URL filtering allowing organizations to manage productivity and security for online activities.
|
|
1 Year CFSPB |
01-SSC-7332 |
|
|
2 Years CFSPB |
01-SSC-7339 |
|
|
3 Years CFSPB |
01-SSC-7346 |
|
|
SonicWALL Dynamic Support (24x7 and 8x5 available)
24 x 7: Includes 24x7 telephone and Web-based support, software and firmware updates, Advance Exchange hardware replacement, access to electronic support tools and moderated discussion groups.
8 x 5: Includes 8x5 telephone and Web-based support, software and firmware updates, Advance Exchange hardware replacement, access to electronic support tools and moderated discussion groups.
|
|
1 Year 24x7 Dynamic Support |
01-SSC-7230 |
|
|
2 Years 24x7 Dynamic Support |
01-SSC-7231 |
|
|
3 Years 24x7 Dynamic Support |
01-SSC-7232 |
|
|
1 Year 8x5 Dynamic Support |
01-SSC-7227 |
|
|
2 Years 8x5 Dynamic Support |
01-SSC-7228 |
|
|
3 Years 8x5 Dynamic Support |
01-SSC-7229 |
|
|
SonicWALL Software and Firmware Updates
Includes software and firmware updates and return-to-factory hardware replacement.
|
|
1 Year Software and Firmware Updates |
01-SSC-7233 |
|
|
2 Years Software and Firmware Updates |
01-SSC-7234 |
|
|
3 Years Software and Firmware Updates |
01-SSC-7235 |
|
|
|
|
ViewPoint Software & Misc. Items |
|
SonicWALL ViewPoint Software for a single NSA appliance: Includes a license for SonicWALL ViewPoint Reporting Software for a single appliance. |
01-SSC-2902 |
|
|
|
|
With each SonicWALL UTM appliance running SonicOS5.2 or higher installed, you receive two SonicWALL UTM SSL VPN (NetExtender) clients. You can purchase additional clients in packages of 1, 5, 10, 25, and 50 clients, as noted below. The maximum number of clients on a given SonicWALL UTM system varies so please check the specifications before purchasing. When you purchase additional clients you will receive a perpetual license for those clients and as such no renewal is required. The SonicWALL UTM SSL VPN clients will be automatically updated as long as the SonicWALL UTM appliance on which they are installed is covered under product support. |
|
SonicWALL UTM SSL VPN
1 User License |
01-SSC-8629 |
|
|
SonicWALL UTM SSL VPN
5 User License |
01-SSC-8630 |
|
|
SonicWALL UTM SSL VPN
10 User License |
01-SSC-8631 |
|
|
SonicWALL UTM SSL VPN
25 User License |
01-SSC-8632 |
|
|
SonicWALL UTM SSL VPN
50 User License |
01-SSC-8633 |
|
_____________________________________________________________________________________
_____________________________________________________________________________________
Some of the features and benefits that you will receive with your NSA 3500 appliance are:
Deep Packet Inspection & Multi-Threat Protection
- Fully integrated deep packet inspection firewall, including gateway anti-virus, anti-spyware, intrusion prevention, and application firewall for perimeter and internal protection
- Application Firewall feature Set for Application Inspection and Control
- Automated and Dynamic Security Updates
_________________________________________
Powerful Performance
-
High-performance 8-core Multi-Core Architecture
-
2.75 Gbps Stateful Packet Inspection Firewall1
- 1 Gbps 3DES and AES VPN Throughput1
- 600 Mbps Full Unified Threat Management (UTM) Inspection
-
Six (6) 10/100/1000 Copper Gigabit Ethernet Interfaces
1Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. VPN throughput UDP traffic at 1418 byte packet size adhering to RFC 2544. UTM performance is based on HTTP tests run on the Spirent Avalanche/Reflector.
_________________________________________
Networking & Complete Business Continuity
-
Business application prioritization and QoS
-
Multi-WAN Support, ISP Failover and WAN Load Balancing
-
Stateful Hardware Failover
-
Integrated Server Load Balancing Feature Set
- IPSec VPN for Secure Site-to-Site Connectivity
- SSL VPN and IPSec VPN Clients for Secure Remote Access
_________________________________________
Integration & Simplified Management
Route-based VPN
Single Sign-On for Transparent User Authentication
Integrated Network Security Policy and Management
Next-Generation Streamlined GUI
Powerful Wizards - Set-up, Firewall Policies, VPN, NAT
_________________________________________
Deployment Flexibility
Data Center, Campus and Department Network Applications
Transparent Layer 2 Bridge Mode
Layer 2 Wireless Bridging
Integrated Secure Wireless Switch Deployment
_____________________________________________________________________________________
_____________________________________________________________________________________
Comparison & Specifications
|
Firewall Appliance |
NSA 240 |
NSA 2400 |
NSA 3500 |
NSA 4500 |
|
Nodes Supported |
Unrestricted |
|
SonicOS Version |
SonicOS Enhanced 5.0 (or higher) |
|
Stateful Throughput1 |
600 Mbps |
775 Mbps |
1.5 Gbps |
2.75 Gbps |
|
GAV Throughput1 |
115 Mbps |
160 Mbps |
350 Mbps |
690 Mbps |
|
IPS Throughput1 |
195 Mbps |
275 Mbps |
750 Mbps |
1.4 Gbps |
|
UTM Throughput1 |
110 Mbps |
150 Mbps |
240 Mbps |
600 Mbps |
|
IMIX Throughput |
195 Mbps |
235 Mbps |
580 Mbps |
700 Mbps |
|
Maximum Connections3 |
25,000/ 35,0002 |
48,000 |
128,000 |
45,000 |
|
New Connections/Sec |
2,000 |
4,000 |
7,000 |
10,000 |
|
Denial of Service Attack Prevention |
22 classes of DoS, DDoS and scanning attacks |
|
SonicPoints Supported (Maximum) |
16 |
32 |
32 |
64 |
|
VPN |
NSA 240 |
NSA 2400 |
NSA 3500 |
NSA 4500 |
|
3DES/AES Throughput1 |
150 Mbps |
300 Mbps |
625 Mbps |
1.0 Gbps |
|
Site-to-Site VPN Tunnels |
25/502 |
75 |
800 |
1,500 |
|
Bundled Global VPN Client Licenses (Maximum) |
2 (25) |
10(250) |
50 (1,000) |
500 (3,000) |
|
Bundled SSL VPN Client Licenses (Maximum) |
2 (15) |
2 (25) |
2 (30) |
2 (30) |
|
Encryption/Authentication |
DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1 |
|
Key Exchange |
IKE, IKEv2, Manual Key, PKI (X.509) |
|
L2TP/IPSec |
Yes |
|
Certificate Support |
Verisign, Thawte, Cybertrust, RSA Keon, Entrust, and Microsoft CA for SonicWALL-to-SonicWALL VPN |
|
Dead Peer Detection |
Yes |
|
DHCP Over VPN |
Yes |
|
IPSec NAT Traversal |
Yes |
|
Redundant VPN Gateway |
Yes |
|
Global VPN Client Platforms Supported |
Microsoft® Windows 2000, Windows XP, Microsoft® Vista 32-/64-bit |
|
SSL VPN Platforms |
Microsoft® Windows 2000/XP/Vista 32-/64-bit, MAC OSX 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE |
|
Optional Security Services |
NSA 240 |
NSA 2400 |
NSA 3500 |
NSA 4500 |
|
Deep Packet Inspection |
Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall |
|
Content Filtering Service Premium Edition |
(CFS) HTTP URL, HTTPS IP, keyword and content scanning, ActiveX, Java Applet, and cookie blocking |
|
Gateway-enforced Client Anti-Virus & Anti-Spyware |
HTTP/S, SMTP, POP3, IMAP and FTP, Enforced McAfee™ Client E-mail attachment blocking |
|
Comprehensive Anti-Spam Service |
Yes |
|
Application Firewall |
Provides application level enforcement and bandwidth control, regulate Web traffic, e-mail, e-mail attaches and file transfers, scan and restrict documents and files for key words and phrases |
|
Networking |
NSA 240 |
NSA 2400 |
NSA 3500 |
NSA 4500 |
|
IP Address Assignment |
Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
|
NAT Modes |
1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
|
VLAN Interfaces (802.1q) |
10/252 |
25 |
50 |
200 |
|
Routing |
OSPF, RIPv1/v2, static routes, policy-based routing, Multicast |
|
QoS |
Bandwidth priority, maximum bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
|
IPv6 |
IPv6 Ready |
|
Authentication |
XAUTH/RADIUS, Active Directory, SSO, LDAP, internal user database |
|
User Database |
100 users |
250 users |
500 users |
1,000 users |
|
VoIP |
Full H.323v1-5, SIP, gatekeeper support, outbound bandwidth management, VoIP over WLAN, deep inspection security, full interoperability with most VoIP gateway and communications devices |
|
System |
NSA 240 |
NSA 2400 |
NSA 3500 |
NSA 4500 |
|
Zone Security |
YES |
|
Schedules |
YES |
|
Object-Based / Group-based Management |
YES |
|
DDNS |
YES |
|
Management and Monitoring |
Web GUI (HTTP, HTTPS), Command Line (SSH, Console), SNMP v2: Global management with SonicWALL GMS |
|
Logging and Reporting |
ViewPoint,® Local Log, Syslog |
|
High Availability |
Optional Active/Passive w/State Sync2 |
Optional Active/Passive
w/State Sync |
Active/Passive with State Sync |
|
Load Balancing |
Yes, (Outgoing with percent-based, round robin and spill-over); (Incoming with round robin, random distribution, sticky IP, block remap and symmetrical remap) |
|
Standards |
TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
|
Wireless Standards |
802.11 a/b/g, WPAD, WPA, TKIP, 802.1x, EAP-PEAP, EAP-TTLS |
|
Hardware |
NSA 240 |
NSA 2400 |
NSA 3500 |
NSA 4500 |
|
Interfaces |
(3) GE Gigabit Ports+ (6) 10/100, 2 USB Future Use, PC Card Slot (Optional 3G/Analog Modem), 1 Console Interface |
(6) 10/100/1000 Copper Gigabit Ports,
1 Console Interface, 2 USB (Future Use |
|
Memory/RAM |
256 MB |
512 MB |
|
Flash Memory |
32 MB Compact Flash |
512 MB Compact Flash |
|
Power Supply |
36W External |
Single 180W ATX Power Supply |
|
Fans |
No Fan |
2 |
|
Power Input |
10-240V, 50-60Hz |
100-240Vac, 60-50Hz |
|
Max Power Consumption |
15W |
42W |
64W |
66W |
|
Total Heat Dissipation |
51.1 BTU |
144 BTU |
219 BTU |
225 BTU |
|
Certifications |
VPNC |
EAL4+, FIPS 140-2 Level 2, VPNC |
|
Certifications (Pending) |
ICSA Firewall 4.1, EAL-4+, FIPS 140-2 |
ICSA Firewall 4.1 |
|
Form Factor & Dimensions |
7.125 x 1.5 x 10.5 in
(18.10 x 3.81 x 26.67 cm) |
1U rack-mountable
17 x 10.25 x 1.75 in
(43.18 x 26 x 4.44 cm) |
1U rack-mountable
17 x 13.25 x 1.75 in
(43.18 x 33.65 x 4.44 cm) |
|
Weight
(WEEE Weight) |
2.55 lbs/1.16 kg
(3.15 lbs/1.43 kg) |
8.05 lbs/3.65 kg
(8.05 lbs/3.65 kg) |
8.05 lbs/3.65 kg
(8.05 lbs/3.65 kg) |
11.30 lbs/5.14 kg
(11.30 lbs/5.14 kg) |
|
Major Regulatory |
FCC Class A, CES Class A, CE, C-Tick, VCCI, MIC,
UL, cUL, TUV/GS, CB, NOM, WEEE, RoHS |
|
Environment |
32-105° F, 0-40° C |
40-105° F, 5-40° C |
|
MTBF |
9.5 Years |
16.0 Years |
14.3 Years |
14.1 Years |
|
Humidity |
0-95% non-condensing |
10-95% non-condensing |
1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. VPN throughput UDP traffic at 1418 byte packet size adhering to RFC 2544. UTM performance is based on HTTP tests run on the Spirent Avalanche/Reflector. Testing done with multiple flows through multiple port pairs.
2 Only with the NSA 240 Series Stateful HA and Expansion Upgrade.
3 Actual maximum connection counts are lower when UTM services are enabled.
|
|
|
|
|
APC
