As a Next-Generation Firewall for growing small to medium businesses, the SonicWall Network Security Appliance (NSa) 2650 delivers security and performance without compromise. Coupled with SonicWall's patented1 Reassembly-Free Deep Packet Inspection (RFDPI) single-pass threat prevention engine, all SonicWall Next-Generation Firewalls provide industry leading protection, performance, and scalability with the highest number of concurrent connections, lowest latency, no file size limitations and superior connections per second in their class.
*** This particular NSa 2650 product does not include any subscriptions to either support or security, but can be added later if required.
Firewall Product Features
Warranty & Support
Hardware overview | NSa 2650 |
Operating system | SonicOS 6.5.x |
Security processing cores | 4 |
Interfaces | 4 x 2.5-GbE SFP, 4 x 2.5-GbE, 12 x 1-GbE, 1 GbE Management, 1 Console |
Expansion | 1 Expasion Slot (Rear) * |
Built-in storage |
16 GB |
Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs |
Single Sign On (SSO) Users | 40,000 |
Access points supported (max) | 48 |
Logging | Analyzer, Local Log, Syslog, IPFIX, NetFlow |
Firewall/VPN performance | |
Firewall inspection throughput1 | 3.0 Gbps |
Threat Prevention throughput2 (Max Security) | 1.25 Gbps |
Application inspection throughput2 | 1.4 Gbps |
IPS throughput2 | 1.4 Gbps |
Anti-malware inspection throughput2 | 1.3 Gbps |
IMIX throughput3 | 700 Mbps |
TLS/SSL inspection and decryption throughput (DPI SSL)2 | 250 Mbps |
VPN throughput2 | 1.3 Gbps |
Connections per second | 14,000 |
Maximum connections (SPI) | 1,000,000 |
Maximum connections (DPI) | 500,000 |
Maximum connections (DPI SSL) | 18,000 |
Default connections (DPI/DPI SSL)4 | 500,000/12,000 |
VPN | |
Site-to-site VPN tunnels | 1,000 |
IPSec VPN clients (maximum) | 50 (1,000) |
SSL VPN licenses (maximum) | 2 (350) |
Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography |
Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
Route-based VPN | RIP, OSPF, BGP |
Networking | |
IP address assignment | Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay |
NAT modes | 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode |
VLAN interfaces |
256 |
Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
VoIP | Full H.323-v1-5, SIP |
Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
Certifications(in progress) |
ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC |
High Availability | Active/Passive with State Sync |
Hardware | |
Power supply | Dual, redundant 120W (one included) |
Fans | Dual, Fixed |
Input power |
100-240 VAC, 50-60 Hz |
Maximum power consumption (W) | 37.2 |
MTBF @25ºC in hours | 162,231 |
MTBF @25ºC in years | 18.5 |
Form factor |
1U Rack Mountable |
Dimensions | 16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm) |
Weight | 11.5 lb (5.2 kg) |
WEEE weight | 12.1 lb (5.5 kg) |
Shipping weight | 17.0 lb (7.7 kg) |
Major regulatory | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI |
Environment(Operatin/Storage) | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C) |
Humidity | 10-90% non-condensing |
1Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2Threat Prevention/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled. DPI SSL performance measured on HTTPS traffic with IPS enabled.
3VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4For every 125,000 DPI connections reduced, the number of available DPI SSL connections increases by 3,000 except for NSa 9250 and above.
5Active/Active Clustering and Active/Active DPI with State Sync require purchase of Expanded License.
*Future use. All specifications, features and availability are subject to change.
- SonicWall NSa 2650 [01-SSC-1936] £1693.00
- SonicWall NSa 2650 TotalSecure - Advanced Edition (1 Year) [01-SSC-1988] £3028.00
- SonicWall NSa 2650 Secure Upgrade Plus - Advanced Edition (2 Years) [01-SSC-1995] £3028.00
- SonicWall NSa 2650 Secure Upgrade Plus - Advanced Edition (3 Years) [01-SSC-1997] £4042.00
- SonicWall NSa 2650 High Availability (HA) Unit [01-SSC-2007] £1349.00
No posts found
Product Info
Include security & support bundles
SonicWall support subscriptions & renewals
- SonicWall Standard Support for NSA 2650 (1 Year) [01-SSC-1982] £255.00
- SonicWall 24x7 Support for NSa 2650 (1 Year) [01-SSC-1541] £357.00
SonicWall security subscriptions & renewals
- Advanced Gateway Security Suite for NSA 2650 (1 Year) [01-SSC-1783] £1438.00
- Gateway Anti-Malware, Intrusion Prevention and Application Control for NSA 2650 (1 Year) [01-SSC-1976] £506.00
- SonicWall Capture Advanced Threat Protection Service for NSA 2650 (1 Year) [01-SSC-1935] £336.00
- Content Filtering Service Premium Business Edition for NSA 2650 (1 Year) [01-SSC-1970] £675.00
- SonicWall Comprehensive Anti-Spam Service for NSA 2650 (1 Year) [01-SSC-2001] £675.00
SonicWall remote access client licences
- SonicWall Firewall SSL VPN 1 User License [01-SSC-8629] £34.00
- SonicWall Global VPN Client 1 License [01-SSC-5310] £34.00
SonicWall add-ons & replacements
- NSa 2650 High Availability Conversion License to Standalone Unit [01-SSC-2317] £509.00
SonicWall centralised management & reporting
- SonicWall GMS 5 Node Software License [01-SSC-7680] £1286.00