SonicWall NSA 5650

Model

SonicWal NSA 5650 (01-SSC-1939)

Operating system

SonicOS 6.5.2

Security processing cores

10

Interfaces

2 x 10-GbE SFP+,
2 x 10-GbE,
4 x 2.5-GbE SFP,
4 x 2.5-GbE,
16 x 1-GbE,
1 GbE Management,
1 Console

Expansion

1 Expansion Slot (Rear)*

Built-in storage

64 GB

Management

CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs

SSO users

70,000

Maximum access points supported

192

Logging

Analyzer, Local Log, Syslog

Firewall/VPN Performance

NSA 5650

Firewall inspection throughput¹

6.25 Gbps

Threat Prevention throughput² (Max Security)

1.7 Gbps

Threat Prevention throughput^2,6 (Performance Optimized)

3.40 Gbps

Application inspection throughput²

4.25 Gbps

IPS throughput²

3.4 Gbps

Anti-malware inspection throughput²

1.7 Gbps

IMIX throughput

1.45 Gbps

TLS/SSL decryption and inspection throughput (DPI SSL)²

800 Mbps

VPN throughput³

3.5 Gbps

Connections per second

40,000/sec

Maximum connections (SPI)

4,000,000

Maximum connections (DPI)

1,500,000

Maximum connections (DPI SSL)

37,000

Default connections (DPI/DPI SSL)⁴

1,000,000/19,000

VPN

NSA 5650

Site-to-site tunnels

6,000

IPSec VPN clients (max)

2,000 (6,000)

SSL VPN NetExtender clients (max)

2 (1,500)

Encryption/Authentication

DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography

Key exchange

Diffie Hellman Groups 1, 2, 5, 14v

Route-based VPN

RIP, OSPF, BGP

Networking

NSA 5650

IP address assignment

Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay

NAT modes

1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode

VLAN interfaces

500

Routing protocols

BGP, OSPF, RIPv1/v2, static routes, policy-based routing

QoS

Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p

Authentication

LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)

VoIP

Full H323-v1-5, SIP

Standards

TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3

Certifications (in progress)

ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC

High availability⁵

Active/Passive with State

Sync, Active/Active DPI with

State Sync, Active/Active

Clustering

Hardware

NSA 5650

Power supply

Dual, redundant 350W (one included)

Fans

Dual, Removable

Input power

100-240 VAC, 50-60 Hz

Maximum power consumption (W)

103.6

MTBF @25ºC in hours

153,243

MTBF @25ºC in years

17.5

Form factor

1U Rack Mountable

Dimensions

16.9 x 16.3 x 1.8 in (43 x 41.5 x 4.5 cm)

Weight

15.2 lb (6.9 kg)

WEEE weight

19.6 lb (8.9 kg)

Shipping weight

24.9 lb (11.3 kg)

Major regulatory

FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI

Environment (Operating/Storage)

32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)

Humidity

10-90% non-condensing