Model

SonicWall NSA 4650 (01-SSC-4094)

Operating system

SonicOS 6.5.2

Security processing cores

10

Interfaces

2 x 10-GbE SFP+,
4 x 2.5-GbE SFP,
4 x 2.5-GbE,
16 x 1-GbE,
1 GbE Management,
1 Console

Expansion

1 Expansion Slot (Rear)*

Built-in storage

32 GB

Management

CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs

SSO users

60,000

Maximum access points supported

128

Logging

Analyzer, Local Log, Syslog

Firewall/VPN Performance

NSA 4650

Firewall inspection throughput¹

6.0 Gbps

Threat Prevention throughput² (Max Security)

1.2 Gbps

Threat Prevention throughput^2,6 (Performance Optimized)

2.50 Gbps

Application inspection throughput²

3.0 Gbps

IPS throughput²

2.3 Gbps

Anti-malware inspection throughput²

1.25 Gbps

IMIX throughput

1.3 Gbps

TLS/SSL decryption and inspection throughput (DPI SSL)²

500 Mbps

VPN throughput³

3.0 Gbps

Connections per second

40,000/sec

Maximum connections (SPI)

3,000,000

Maximum connections (DPI)

1,000,000

Maximum connections (DPI SSL)

30,000

Default connections (DPI/DPI SSL)⁴

750,000/18,000

VPN

NSA 4650

Site-to-site tunnels

4,000

IPSec VPN clients (max)

2,000 (4,000)

SSL VPN NetExtender clients (max)

2 (1,000)

Encryption/Authentication

DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography

Key exchange

Diffie Hellman Groups 1, 2, 5, 14v

Route-based VPN

RIP, OSPF, BGP

Networking

NSA 4650

IP address assignment

Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay

NAT modes

1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode

VLAN interfaces

400

Routing protocols

BGP, OSPF, RIPv1/v2, static routes, policy-based routing

QoS

Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p

Authentication

LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)

VoIP

Full H323-v1-5, SIP

Standards

TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3

Certifications (in progress)

ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC

High availability⁵

Active/Passive with State Sync

Active/Active Clustering

Hardware

NSA 4650

Power supply

Dual, redundant 350W (one included)

Fans

Dual, Removable

Input power

100-240 VAC, 50-60 Hz

Maximum power consumption (W)

93.6

MTBF @25ºC in hours

154,529

MTBF @25ºC in years

17.6

Form factor

1U Rack Mountable

Dimensions

16.9 x 16.3 x 1.8 in (43 x 41.5 x 4.5 cm)

Weight

15.2 lb (6.9 kg)

WEEE weight

19.6 lb (8.9 kg)

Shipping weight

24.9 lb (11.3 kg)

Major regulatory

FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI

Environment (Operating/Storage)

32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)

Humidity

10-90% non-condensing