Model

SonicWall NSA 3650 (01-SSC-4081)

Operating system

SonicOS 6.5.2

Security processing cores

4

Interfaces

2 x 10-GbE SFP+,
8 x 2.5-GbE SFP,
4 x 2.5-GbE,
12 x 1-GbE,
1 GbE Management,
1 Console

Expansion

1 Expansion Slot (Rear)*

Built-in storage

32 GB

Management

CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs

SSO users

50,000

Maximum access points supported

96

Logging

Analyzer, Local Log, Syslog

Firewall/VPN Performance

NSA 3650

Firewall inspection throughput¹

3.75 Gbps

Threat Prevention throughput² (Max Security)

730 Mbps

Threat Prevention throughput^2,6 (Performance Optimized)

1.75 Gbps

Application inspection throughput²

2.1 Gbps

IPS throughput²

1.8 Gbps

Anti-malware inspection throughput²

800 Mbps

IMIX throughput

900 Mbps

TLS/SSL decryption and inspection throughput (DPI SSL)²

300 Mbps

VPN throughput³

1.5 Gbps

Connections per second

14,000/sec

Maximum connections (SPI)

2,000,000

Maximum connections (DPI)

750,000

Maximum connections (DPI SSL)

24,000

Default connections (DPI/DPI SSL)⁴

625,000/15,000

VPN

NSA 3650

Site-to-site tunnels

3,000

IPSec VPN clients (max)

500 (3,000)

SSL VPN NetExtender clients (max)

2 (500)

Encryption/Authentication

DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography

Key exchange

Diffie Hellman Groups 1, 2, 5, 14v

Route-based VPN

RIP, OSPF, BGP

Networking

NSA 3650

IP address assignment

Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay

NAT modes

1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode

VLAN interfaces

256

Routing protocols

BGP, OSPF, RIPv1/v2, static routes, policy-based routing

QoS

Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p

Authentication

LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)

VoIP

Full H323-v1-5, SIP

Standards

TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3

Certifications (in progress)

ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC

High availability⁵

Active/Passive with State Sync
Active/Active Clustering

Hardware

NSA 3650

Power supply

Dual, redundant 120W (one included)

Fans

Dual, Fixed

Input power

100-240 VAC, 50-60 Hz

Maximum power consumption (W)

46

MTBF @25ºC in hours

156,681

MTBF @25ºC in years

17.9

Form factor

1U Rack Mountable

Dimensions

16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm)

Weight

11.7 lb (5.3 kg)

WEEE weight

12.3 lb (5.6 kg)

Shipping weight

17.2 lb (7.8 kg)

Major regulatory

FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI

Environment (Operating/Storage)

32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)

Humidity

10-90% non-condensing