Discontinued - Dell SonicWALL NSA 240 TotalSecure (1 Year) - Discontinued 01/04/12
*** The NSA 240 is now discontinued and replaced by the NSA 220
Click here for replacement NSA 220 Series
Dell SonicWALL NSA 240 is a next-generation United Threat Management platform, utilizing a breakthrough multi-core hardware design with 2 cores and 6 GbE interfaces to deliver real-time network protection and application control, reducing complexity without compromising performance, The NSA 240 is well-suited for branch office and distributed environments requiring threat prevention, rapid deployment and lowered total cost of ownership.
The NSA 240 combines high-speed intrusion prevention, file and content inspection and powerful application firewall capabilities with an extensive array of advanced networking and configuration flexibility features that increase the performance and productivity of the network. With its intuitive Web management interface, easy-to-use wizards, and simplified access with SSL-VPN the NSA 240 simplifies deployment and management. The NSA 240 also supports virtual local area networks (VLANs), seamless high availability and QoS features, further extending functionality and reliability throughout the network.
FEATURES AND BENEFITS
SonicWALL’s next generation security incorporates a new level of UTM that integrates intrusion prevention, gateway anti-virus and anti-spyware and features the Application Firewall suite of confi gurable tools to prevent data leakage and off er granular application control.
Scalable multi-core hardware and reassembly-free deep packet inspection scans and eliminates threats of unlimited fi le sizes, and provides virtually unrestricted concurrent connections with uncompromising speed.
Stateful high availability and load balancing features in SonicOS 5.0 Enhanced maximize total network band-width and maintain seamless network uptime, delivering uninterrupted access to missioncritical resources, and ensuring that VPN tunnels and other network traffi c will not be interrupted in the event of a failover.
Advanced state-of-the-art performance and lowered TCO are achieved by using the processing power of multiple cores in unison to dramatically increase throughput and provide simultaneous inspection capabilities, while lowering power consumption.
Advanced routing services and networking features incorporate advanced networking and security technology including 802.1q VLANs, WAN/WAN failover, zone and object-based management, load balancing, advanced NAT modes and more, providing granular confi guration fl exibility and comprehensive protection at the administrator’s discretion.
Standards-based Voice over IP (VoIP) capabilities provide the highest levels of security for every element of the VoIP infrastructure, from communications equipment to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Servers.
Secure distributed wireless LAN services enable the appliance to function as a secure wireless switch and controller that automatically detects and confi gures SonicPoints,™ SonicWALL wireless access points, for secure remote access in distributed network environments.
Onboard Quality of Service (QoS) features use industry standard 802.1p and Diff erentiated Services Code Points (DSCP) Class of Service (CoS) designators to provide power-ful and fl exible bandwidth management that is vital for Voice over IP, multimedia content and business-critical applications.
Firewall
|
|
SonicOS Version |
SonicOS Enhanced 5.0 (or higher) |
Stateful Throughput* |
600 Mbps |
GAV Performance* |
115 Mbps |
IPS Performance* |
195 Mbps |
UTM Performance Throughput* |
110 Mbps |
IMIX Performance* |
195 Mbps |
Maximum Connections |
25,000/35,000** |
New Connections/Sec |
2,000 |
Nodes Supported |
Unrestricted |
Denial of Service Attack Prevention |
22 classes of DoS, DDoS and scanning attacks |
| SonicPoints Supported (Maximum) | 16 |
VPN
|
|
3DES/AES Throughput* |
150 Mbps |
Site-to-Site VPN Tunnels |
25/50** |
Bundled Global VPN Client Licenses for Remote Access |
2 (25) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1 |
Key Exchange |
IKE, IKEv2, Manual Key, PKI (X.509) |
L2TP/IPSec |
Yes |
Certificate Support |
Verisign, Thawte, Baltimore, RSA Keon, Entrust, and Microsoft CA for SonicWALL-to-SonicWALL VPN |
Dead Peer Detection |
Yes |
DHCP Over VPN |
Yes |
IPSec NAT Traversal |
Yes, NAT_Tv00 and v03 |
Redundant VPN Gateway |
Yes |
Global VPN Client Platform Supported |
Microsoft® Windows 2000, Windows XP, Microsoft® Vista 32-bit |
Deep Packet Inspection Security Services
|
|
Deep Packet Inspection Signature Service |
Comprehensive signature database. Peer- to-peer and instant messaging control and signature updates through Distributed Enforcement Architecture |
Content Filtering Service (CFS) Premium Edition |
HTTP URL,HTTPS IP, keyword and content scanning ActiveX, Java Applet, and cookie blocking |
Gateway-enforced Client Anti-Virus and Anti-Spyware |
HTTP/S, SMTP, POP3, IMAP and FTP, Enforced McAfee™ Clients E-mail attachment blocking |
Application Firewall |
Provides application level enforcement and bandwidth control, regulate Web traffic, e-mail, e-mail attaches and file transfers, scan and restrict documents and files for key words and phrases |
Networking
|
|
IP Address Assignment |
Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
| NAT Modes |
1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
VLAN Interfaces (802.1q) |
10/25** |
Routing |
OSPF, RIPv1/v2, static routes, policy-based routing, Multicast |
QoS |
Bandwidth priority, maximum bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
IPv6 |
IPv6 Ready |
Authentication |
XAUTH/RADIUS, Active Directory, SSO, LDAP, internal user database |
User Database |
100 Users |
VoIP |
Full H.323v1-5, SIP, gatekeeper support, outbound bandwidth management, VoIP over WLAN, deep inspection security, full interoperability with most VoIP gateway and communications devices |
System
|
|
Zone Security |
Yes |
Schedules |
Yes |
Object-based/Group-based Management |
Yes |
DDNS |
Yes |
Management and Monitoring |
Web GUI (HTTP, HTTPS), Command Line (SSH, Console), SNMP v2: Global management with SonicWALL GMS |
Logging and Reporting |
ViewPoint®, Local Log, Syslog |
High Availability |
Optional Active/Passive with State Sync** |
Load Balancing |
Yes, (Outgoing with percent-based, round robin and spill-over); (Incoming with round robin, random distribution, sticky IP, block remap and symmetrical remap) |
Standards |
TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS |
Wireless Standards |
802.11 a/b/g, WEP, WPA, TKIP, 802.1x, EAP-PEAP, EAP-TTLS |
Hardware
|
|
Interfaces |
(3) GE Gigabit Ports+ (6) 10/100,
2 USB Future Use, PC Card Slot
(Optional 3G/Analog Modem),
1 Console Interface |
Memory (RAM) |
256 MB |
Flash Memory |
32 MB Compact Flash |
Power Supply |
36W External |
Fans |
No Fan |
Power Input |
100-240Vac, 50-60Hz |
Max Power Consumption |
15 W |
Total Heat Dissipation |
51.1BTU |
Certifications Pending |
ICSA Firewall 4.1, Common Criteria EAL-4+, FIPS 140-2 |
Form Factor and Dimensions |
7.125 x 1.5 x 10.5 in/ 18.10 x 3.81 x 26.67 cm |
Weight |
2.55 lbs/ 1.16 kg |
WEEE Weight |
3.15 lbs/ 1.43 kg |
Major Regulatory |
FCC Class A, CES Class A, CE, C-Tick, VCCI, Compliance MIC, UL, cUL, TUV/GS, CB, NOM, RoHS, WEEE |
Environment |
32-105° F, 0-40° C |
| MTBF | TBD |
Humidity |
10-90% non-condensing |
* Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. VPN throughput UDP traffic at 1418 byte packet size adhering to RFC 2544. UTM performance is based on HTTP tests run on the Spirent Avalanche/Reflector.
** Only with the NSA 240 Series Stateful HA and Expansion Upgrade.
GSM Wireless Carriers (except AT&T Wireless)
- Option GlobeTrotter GT MAX (Model GTmax World)
- Option GlobeTrotter GT MAX 7.2 Ready (Models GX 201/GX202)
- Option GlobeTrotter HSDPA (Model GT 3G+ EMEA)
- Sierra Wireless AirCard 860
- Sierra Wireless AirCard 875
- Sierra Wireless AirCard 880E Express Card (requires SonicWALL PC Card to ExpressCard Adapter [01-SSC-2887])
- Sierra Wireless AirCard 880
CDMA Wireless Carriers (with the exception of Sprint and Verizon)
- Novatel Wireless Merlin 620
- Novatel Wireless Merlin PC720
- Sierra Wireless AirCard 595
AT&T Wireless
- Option GT Max (Model GTmax World)
- Option GT Max 3.6
- Sierra Wireless AirCard 860
- Sierra Wireless AirCard 875
- Sierra Wireless AirCard 881
Sprint
- Novatel Wireless Merlin S620 (Sprint Mobile Broadband Card)
- Novatel Wireless Merlin S720 (Sprint Mobile Broadband Card)
- Sprint Mobile Broadband Card by Sierra Wireless-AirCard 595
Verizon Wireless
- Novatel Wireless Merlin V620
- Sierra Wireless AirCard 595
- Verizon Wireless V740 ExpressCard (requires SonicWALL PC Card to ExpressCard Adapter [01-SSC-2887])
Analog Modem
- Zoom Model 3075 56K V.92 PC Card Modem
Note: PC Cards sold separately - click here
Current list: http://www.sonicwall.com/us/products/cardsupport.html
PLEASE NOTE: Support for all of the cards listed above is available in the latest SonicWALL firmware. For customers outside of the 90-day product warranty period, an active SonicWALL 8x5 or 24x7 Dynamic Support agreement allows you to keep your network security up-to-date by providing access to the latest firmware updates. You can manage all services including Dynamic Support and firmware downloads on any of your registered appliances at www.mysonicwall.com/.





