Skip to content

SonicWall NSa Series

SonicWall Authorised Partner

We don't just sell them, we know them!

Qualified Team

A team you can trust with the experience you need

20+ Years Experience

1000's of installs across AU, NZ and UK


HomeFirewalls / SonicWall / SonicWall NSa Series

If you can't find the item you are after in stock, please chat to us. Supply chain issues mean these are often ordered directly from SonicWall for each customer with a lead time of around 14 days.

subscriptions & Accessories

SonicWall Parts & Accessories


  • Which Model?
  • Which Subscription?
  • More protection?
  • Thinking  Wireless?

The SonicWall NSa Series Appliance range is currently made up of 5 models.  These are ideal for growing organizations looking for strong throughput and enterprise-grade security.  The table below highlights the main features of each model.


Options

Redundant Fans

NSa 4700/5700 (2), NSa 6700 (3)

Storage

NSa 2700 (64 GB M.2), NSa 3700/4700/5700 (128 GB M.2), NSa 6700 (256 GB M.2)

Storage Expansion

Optional up to 256Gb on NSa 2700/3700, up to 1TB on NSa 4700/5700/6700

Redundant Power Supply

Optional on all models

Throughput

Firewall Inspection

NSa 2700 (5.2 Gbps), NSa 3700 (5.5 Gbps) NSa 4700 (18 Gbps), NSa 5700 (28 Gbps), NSa 6700 (36 Gbps)

Threat Prevention

NSa 2700 (3 Gbps), NSa 3700 (3.5 Gbps) NSa 4700 (9.5 Gbps), NSa 5700 (15 Gbps), NSa 6700 (19 Gbps)

Application Control

NSa 2700 (3.6 Gbps), NSa 3700 (4.2 Gbps) NSa 4700 (11 Gbps), NSa 5700 (18 Gbps), NSa 6700 (20 Gbps)

Intrusion Prevention

NSa 2700 (3.4 Gbps), NSa 3700 (3.8 Gbps) NSa 4700 (10 Gbps), NSa 5700 (17 Gbps), NSa 6700 (20 Gbps)

Anti-Malware

NSa 2700 (2.9 Gbps), NSa 3700 (3.5 Gbps) NSa 4700 (9.5 Gbps), NSa 5700 (16 Gbps), NSa 6700 (18.5 Gbps)

Deep Pack Inspection (DPI) TLS/SSL

NSa 2700 (800 Mbps), NSa 3700 (850 Mbps) NSa 4700 (5 Gbps), NSa 5700 (7 Gbps), NSa 6700 (9 Gbps)

IPSec VPN

NSa 2700 (2.1 Gbps), NSa 3700 (2.2 Gbps) NSa 4700 (11 Gbps), NSa 5700 (15 Gbps), NSa 6700 (19 Gbps)

Connections Per Second

NSa 2700 (21,000), NSa 3700 (22,000) NSa 4700 (115,000), NSa 5700 (228,000), NSa 6700 (228,000)

capacity

Interfaces

NSa 2700 (16 x 1 GbE, 3 x 10G SFP+),  NSa 3700 (24 x  1 GbE, 6 x 10G SFP+, 4 x 5G SFP+)
NSa 4700 (24 x 1 GbE Cu, 6 x 10G/5G/2.5G/1G SFP+)
NSa 5700 (24 x 1 GbE Cu, 6 x 10G/5G/2.5G/1G SFP+, 2 x 10G/5G/2.5G/1G Cu)
NSa 6700 (16 x 1 GbE Cu, 2 x 40G, 8 x 25G, 4 x 10G/5G/2.5G/1G SFP+, 4 x 10G/5G/2.5G/1G Cu)

Access Points Supported

All models support a maximum of 512

VLANs

NSa 2700/3700 - 256,  NSa 4700/5700/6700 - 512

Local User Database

NSa 2700/3700 - 1000,  NSa 4700/5700 - 2500, NSa 6700 - 3200

VPN Tunnels & Licenses

Site to Site VPN Tunnels

NSa 2700 - 2000,  NSa3700 - 3000,  NSa4700 - 4000,  NSa 5700/6700 - 6000

IPSec VPN Clients (Maximum)

NSa 2700/3700 - 50 Included (1000),  NSa 4700 - 500 Included (3000)

NSa 5700 - 2000 Included (4000),  NSa 6700 - 2000 Included (6000)

SSL VPN Licenses (Maximum)

NSa 2700/3700 - 2 Included (500),  NSa 4700 - 2 Included (1000)

NSa 5700 - 2 Included (1500),  NSa 6700 - 2 Included (1500)

Our Serving suggestion

Internet Speed

<  250 Mbps
NSa 2700/3700

<  1500 Mbps
NSa 4700/5700

<  3000 Mbps
NSa 6700

Number of Users

< 200

< 500

< 500

Paul's Quick Tip

So here's my quick tip for selecting a SonicWall NSa Series firewall to meet your needs.  Having sold and managed literally thousands of firewalls across the world since I started in 1999, I have noticed one thing - Our browsing and data consuming habits effect a firewall's throughput.  All the tests above were preformed in labs and under controlled conditions.  


I would always recommend taking the slowest speed published - in this instance something like the TLS/HTTPS value and then dividing it by three.   This will give you, from our experience, the worst speed you will get under the heaviest load conditions, will full protection turned on.   Make sure this speed is faster than your internet connection and you will be good to go.


Example using a NSa 2700

TLS/HTTPS speed is 800 Mbps, divide this by 3 which gives you about 270 Mbps.  This is the slowest we believe this firewall will run under the heaviest of loads.  Obviously if you want to turn some of the security services off, then you will make it run faster.  Don't just take me word for it.  Have a look at the performance test we did on the NSa 2700 below.


The Tech Geeks - Paul Sillars

Gio's Advice

Your firewall is nothing without a live and updating subscription.  Viruses, Malware and network threats, change almost hourly.  Purchasing a security subscription means that your firewall will always be receiving the latest threat signatures, virus protection updates and filter block lists.


The best bit is that an active security subscription also gives you free firmware updates, technical support from SonicWall and hardware warranty for the duration of the subscription.


Never view a security subscription like the warranty for a car.   It is not there just in case something goes wrong, it is actually needed to make sure nothing goes wrong.  You are only truly being protected if your firewall is auto updating and has an active subscription.


Support

In addition to stateful firewalling, the Support license includes firmware updates, hardware warranty and telephone / email support from SonicWall

Essential protection

The Essential Protection Suite provides all

essential security services needed to protect against known & unknown threats, as well as firmware updates, hardware warranty and 24x7 support

advanced protection

The Advanced Protection Suite includes all services offered with the Essential Protection Suite plus additional reporting and analytic tools hosted in the cloud - extending your devices management and visibility.

support ONLY

ESSential

advanced

24x7 Support

Telephone and email support, when you need it most, along with hardware replacement warranty.

Fimware Updates

Keep your SonicWall patched and up to date with regular firmware updates.

Stateful Firewall

A stateful firewall is simply not enough anymore, but is a start.  It allows source, destination, port and protocol blocking.

VPN

A VPN enables secure, encrypted connections between networks and devices at geographically separated locations.  Each SonicWall has a limitation on the number of Site to Site VPNs it supports and also comes pre-loaded with a number of end user VPN Licenses - License upgrades are sold separately.

Intrusion Prevention Service

Cutting-edge IPS technology protects against worms, trojans, software vulnerabilities and other intrusions by scanning all network traffic for malicious or anomalous patterns, thereby increasing network reliability and performance.

Application Control

Application intelligence and control is a set of granular, application-specific policies providing application classification and policy enforcement to help administrators control and manage both business and non-business related applications.

Content Filtering Service

Content Filtering Services (CFS) lets you enforce Internet use policies and control internal access to inappropriate, unproductive and potentially illegal web content with comprehensive content filtering. Website ratings cached locally on SonicWall firewalls make response time to frequently visited sites virtually instantaneous. Dynamically updated rating architecture cross-references all requested websites against a database in the cloud containing millions of URLs, IP addresses and domains and then compares each rating to the local policy setting. 

DNS Security - Basic

DNS Security provides better TTD(Time to Detect) and improving TCO(Total cost of ownership). DNS security inspects DNS fields to identify malicious domains and thus block connection at very early stage of connection establishment. SonicWall has petabytes of threat data that helps classify domain as malicious, reducing

false positives

Gateway Anti-Malware

ICSA-certified gateway anti-virus and anti-spyware protection combines

network-based anti-malware with a dynamically updated cloud database of

tens of millions of malware signatures. This adds deep security protection

against advanced modern threats continuously in real time. Dynamic spyware protection blocks the installation of malicious spyware and disrupts existing spyware communications. 

GeoIP Updates

Identifies and controls network traffic going to or coming from specific countries to either protect against attacks from known or suspected origins of threat activity, or to investigate suspicious traffic originating from the network. Ability to create custom country and Botnet lists to override an incorrect country or Botnet tag associated with an IP address. Eliminates unwanted filtering of IP addresses due to misclassification.

Botnet Service

Identifies and blocks command and control traffic originating from bots on the local network to IPs and domains that are identified as propagating malware or are known CnC points. 

Comprehensive Anti-Spam Service

CASS offers Small- to medium sized businesses comprehensive protection from spam and viruses, with instant deployment over existing SonicWall firewalls. CASS speeds deployment, eases administration and reduces overhead by consolidating solutions, providing one-click anti-spam services, with advanced configuration in just ten minutes.

Capture ATP – Sandboxing (Static, RTDMI, Memory, Hypervisor, Emulation)

Capture Advanced Threat Protection (ATP) Service revolutionizes advanced

threat detection and sandboxing with a cloud-based, multi-engine solution for stopping unknown and zero-day attacks at the gateway.

Security Rating Tool

SonicWall Risk Meters is a personalized threat information and risk scoring service that reveals gaps in defensive layers, fosters decisive security planning and facilitates actions needed for an optimal cyber defense.

NSM (Cloud) Management

SonicWall Network Security Manager (NSM) allows you to centrally orchestrate all firewall operations error-free, see and manage threats and risks across your firewall ecosystem from one place, and stay connected and compliant. 

NSM (Cloud) Reporting - 7 Days Retention

Increase your network visibility by retaining 7 days of analytic data, allowing you to review and report on network incidents, issues and usage.

Sonicwall NSa series - further information

SonicWall Gen 7 NSa Series Overview

Enterprise security without complexity

SonicWall Generation 7 (Gen 7) Network Security Appliance (NSa) next generation firewalls (NGFWs) offers medium- to large-sized enterprises industry-leading performance at the lowest total cost of ownership in their class. With comprehensive security features such as intrusion prevention, VPN, application control, malware analysis, URL filtering, DNS Security, Geo-IP and Bot-net services, it protects the perimeter from advanced threats without becoming a bottleneck.


Built from the ground up with the latest hardware components, all designed to deliver multi-gigabit threat prevention throughput — even for encrypted traffic. Featuring a high port density including multiple 40 GbE and 10 GbE ports, the solution supports network and hardware redundancy with high availability, and dual power supplies.

SonicWall Network Security Manager (NSM)

Centralized Management - Elevated Security

As the number of firewalls in your distributed enterprise grows, so too does the challenge of managing them. SonicWall Network Security Manager scales with your business and your security needs. 


From a single console, orchestrate all firewall operations, see hidden risks, discover misconfigured policies, and make compliance easier with a full audit trail. With a SonicWall NSM, centralize firewall management and gain more capability, not more complexity.

SonicWall Secure SD-Branch

Protect your remote networks with ease

SonicWall Secure Software-Defined Branch (SD-Branch) improves user experience and secures connectivity at branch offices. 


This integrated solution combines SD-LAN, SD-WAN and security for distributed enterprises, allowing you to take advantage of cheaper connectivity between HQ and branches, safeguard BYOD and SaaS applications, and scale easily with the rise in mobile devices.

information hub

What happens if I don't renew my SonicWall Subscription?

For the best protection a firewall will always need an active and configured security subscription.   If this has lapsed or your are thinking about not renewing it, then the following will happen.


1 - You will loose the option to get free support from the Manufacturer

2 - You will loose all hardware warranty and if your physical unit fails, you will no longer be able to get a free replacement

3 - Any firewall polices that use subscription services will need to be updated to remove them, otherwise they will often switch in to blocking mode.

Is support included in the subscription?

Support is included as standard in the 3 main subscription offerings - Standard Support, Essential Protection and Advanced Protection Suites.   This support includes telephone and email support direct with SonicWall, Firmware Updates and Hardware Warranty.

Is hardware warranty included?

If you have a current Standard Support, Essential or Advanced subscription then hardware replacement is included for the length of time you keep that subscription current.  Please do note that in the case of hardware failure, SonicWall will ship you a replacement from outside of Australia.   You may like to consider additional next business day hardware warranty services to supplement this, to get you back and running as quickly as possible.

What options do I have to get additional support if I get stuck?

We know that sometimes we just need that extra little bit of help and support.   The Tech Geeks have a team that are qualified to assist you and get your back on track as quickly as possible.   We offer rates from $150 + GST per hour and would be happy to quote for any work that you need help with.

Real world performance tests

The below tests have been conducted on a dedicated 1:1 uncontended 1Gb/s fibre connection