Model

 SonicWall NSA 2650 (01-SSC-1936)

Operating system

SonicOS 6.5.2

Security processing cores

4

Interfaces

4 x 2.5-GbE SFP,
4 x 2.5-GbE,
12 x 1-GbE,
1 GbE Management,
1 Console

Expansion

1 Expansion Slot (Rear)*

Built-in storage

16 GB

Management

CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs

SSO users

40,000

Maximum access points supported

48

Logging

Analyzer, Local Log, Syslog

Firewall/VPN Performance

NSA 2650

Firewall inspection throughput¹

3.0 Gbps

Threat Prevention throughput² (Max Security)

600 Mbps

Threat Prevention throughput^2,6 (Performance Optimized)

1.20 Gbps

Application inspection throughput²

1.4 Gbps

IPS throughput²

1.4 Gbps

Anti-malware inspection throughput²

600 Mbps

IMIX throughput

700 Mbps

TLS/SSL decryption and inspection throughput (DPI SSL)²

250 Mbps

VPN throughput³

1.3 Gbps

Connections per second

14,000/sec

Maximum connections (SPI)

1,000,000

Maximum connections (DPI)

500,000

Maximum connections (DPI SSL)

18,000

Default connections (DPI/DPI SSL)⁴

500,000/12,000

VPN

NSA 2650

Site-to-site tunnels

1,000

IPSec VPN clients (max)

50 (1,000)

SSL VPN NetExtender clients (max)

2 (350)

Encryption/Authentication

DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography

Key exchange

Diffie Hellman Groups 1, 2, 5, 14v

Route-based VPN

RIP, OSPF, BGP

Networking

NSA 2650

IP address assignment

Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay

NAT modes

1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode

VLAN interfaces

256

Routing protocols

BGP, OSPF, RIPv1/v2, static routes, policy-based routing

QoS

Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p

Authentication

LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)

VoIP

Full H323-v1-5, SIP

Standards

TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3

Certifications (in progress)

ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC

High availability

Active/Passive with State Sync

Hardware

NSA 2650

Power supply

Dual, redundant 120W (one included)

Fans

Dual, Fixed

Input power

100-240 VAC, 50-60 Hz

Maximum power consumption (W)

37.2

MTBF @25ºC in hours

162,231

MTBF @25ºC in years

18.5

Form factor

1U Rack Mountable

Dimensions

16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm)

Weight

11.5 lb (5.2 kg)

WEEE weight

12.1 lb (5.5 kg)

Shipping weight

17.0 lb (7.7 kg)

Major regulatory

FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI

Environment (Operating/Storage)

32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)

Humidity

10-90% non-condensing