HomeFIREWALLSNSa 2650 (Gen6)SonicWall NSa 2650

Products & services Menu

SonicWall NSa 2650

Firewall inspection throughput: 3.0 Gbps,
Threat prevention throughput: 300 - 600 Mbps,
Interfaces: 12 x 1 GbE, 4 x 2.5 GbE SFP,
Max. SSL VPN Clients: 250

Write a review

£1,630.00

(£1,956.00 inc VAT)

SKU: 01-SSC-1936

Availability: 2 item(s) *

Qty.:

+ −

Add to Wishlist

Add to Compare

Description
Features
NSa 2650 Specs
All NSa 2650 versions
Tags
Reviews

As a Next-Generation Firewall for growing small to medium businesses, the SonicWall Network Security Appliance (NSa) 2650 delivers security and performance without compromise. Coupled with SonicWall's patented1 Reassembly-Free Deep Packet Inspection (RFDPI) single-pass threat prevention engine, all SonicWall Next-Generation Firewalls provide industry leading protection, performance, and scalability with the highest number of concurrent connections, lowest latency, no file size limitations and superior connections per second in their class.

*** This particular NSa 2650 product does not include any subscriptions to either support or security, but can be added later if required.

Firewall Product Features

Interfaces:

12 x 1 GbE, 4 x 2.5 GbE SFP

Recommended Users:

1 - 100

VLAN interfaces:

256

Access points supported (maximum):

IMIX Throughput:

700 Mbps

Firewall inspection throughput:

3.0 Gbps

Threat prevention throughput:

300 - 600 Mbps

TLS/SSL inspection and decryption throughput (DPI SSL):

300 Mbps

IPSec VPN throughput:

1.5 Gbps

Maximum connections (SPI/DPI):

1,000,000 (500,000 with DPI)

Site-to-Site VPN tunnels:

1,000

IPSec VPN Client:

10 (250)

SSL VPN Client Licenses:

2 (250)

Content & URL Filtering (CFS):

30-Day FREE Trial

Application Intelligence & Control:

30-Day FREE Trial

Intrusion Prevention:

30-Day FREE Trial

Gateway Anti-Virus:

30-Day FREE Trial

Gateway Anti-Spyware:

30-Day FREE Trial

Analyzer Reporting:

30-Day FREE Trial

Upgrade Model:

Warranty & Support

Warranty/Support:

1-Yr hardware/no support or firmware updates

Support Cover:

None, optional 24x7 or 8x5

Hardware overview	NSa 2650
Operating system	SonicOS 6.5.x
Security processing cores	4
Interfaces	4 x 2.5-GbE SFP, 4 x 2.5-GbE, 12 x 1-GbE, 1 GbE Management, 1 Console
Expansion	1 Expasion Slot (Rear) *
Built-in storage	16 GB
Management	CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs
Single Sign On (SSO) Users	40,000
Access points supported (max)	48
Logging	Analyzer, Local Log, Syslog, IPFIX, NetFlow
Firewall/VPN performance
Firewall inspection throughput¹	3.0 Gbps
Threat Prevention throughput² (Max Security)	1.25 Gbps
Application inspection throughput²	1.4 Gbps
IPS throughput²	1.4 Gbps
Anti-malware inspection throughput²	1.3 Gbps
IMIX throughput³	700 Mbps
TLS/SSL inspection and decryption throughput (DPI SSL)²	250 Mbps
VPN throughput²	1.3 Gbps
Connections per second	14,000
Maximum connections (SPI)	1,000,000
Maximum connections (DPI)	500,000
Maximum connections (DPI SSL)	18,000
Default connections (DPI/DPI SSL)⁴	500,000/12,000
VPN
Site-to-site VPN tunnels	1,000
IPSec VPN clients (maximum)	50 (1,000)
SSL VPN licenses (maximum)	2 (350)
Encryption/authentication	DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange	Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN	RIP, OSPF, BGP
Networking
IP address assignment	Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay
NAT modes	1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode
VLAN interfaces	256
Routing protocols	BGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoS	Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
Authentication	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
VoIP	Full H.323-v1-5, SIP
Standards	TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications(in progress)	ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC
High Availability	Active/Passive with State Sync
Hardware
Power supply	Dual, redundant 120W (one included)
Fans	Dual, Fixed
Input power	100-240 VAC, 50-60 Hz
Maximum power consumption (W)	37.2
MTBF @25ºC in hours	162,231
MTBF @25ºC in years	18.5
Form factor	1U Rack Mountable
Dimensions	16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm)
Weight	11.5 lb (5.2 kg)
WEEE weight	12.1 lb (5.5 kg)
Shipping weight	17.0 lb (7.7 kg)
Major regulatory	FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI
Environment(Operatin/Storage)	32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity	10-90% non-condensing

¹Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

²Threat Prevention/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled. DPI SSL performance measured on HTTPS traffic with IPS enabled.

³VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

⁴For every 125,000 DPI connections reduced, the number of available DPI SSL connections increases by 3,000 except for NSa 9250 and above.

⁵Active/Active Clustering and Active/Active DPI with State Sync require purchase of Expanded License.

*Future use. All specifications, features and availability are subject to change.