|
NSA 240 |
NSA 2400 |
NSA 3500 |
NSA 4500 |
| Application Layer Inspection |
Full Layer 7 |
Full Layer 7 |
Full Layer 7 |
Full Layer 7 |
| Stateful Packet Inspection Firewall |
 |
 |
 |
 |
| Unlimited File Size Protection |
 |
 |
 |
 |
| ICSA Firewall Certified |
 |
 |
 |
 |
| Application Firewall 2 |
 |
 |
 |
 |
Gateway Anti-Virus,
Anti-Spyware, Intrusion
Prevention Service |
 |
 |
 |
 |
| Enforced Client Anti-Virus & Anti-Spyware 2 |
 |
 |
 |
 |
| Content & URL Filtering (CFS)2 |
 |
 |
 |
 |
| ViewPoint Reporting 2 |
 |
 |
 |
 |
| Anti-Spam (RBL Filtering) |
 |
 |
 |
 |
| Dynamic Support 8x5 |
90 Days |
90 Days |
90 Days |
90 Days |
| Dynamic Support 24x7 2 |
 |
 |
 |
 |
| Interfaces |
3GbE, 6FE |
6 Gbe |
6 Gbe |
6 Gbe |
| Console Interface |
 |
 |
 |
 |
| USB Ports |
2 |
2 |
2 |
2 |
| Management |
CLI, SSH, GUI, GMS |
CLI, SSH, GUI, GMS |
CLI, SSH, GUI, GMS |
CLI, SSH, GUI, GMS |
| Nodes Supported |
Unrestricted |
Unrestricted |
Unrestricted |
Unrestricted |
| Included SonicOS Version |
Enhanced |
Enhanced |
Enhanced |
Enhanced |
| Memory |
256Mb |
512Mb |
512Mb |
512Mb |
Site-to-Site VPN Tunnels
(w/ Expansion Upgrade) |
25 (50) |
75 |
800 |
1,500 |
| Global VPN Clients (Bundled) |
2 |
10 |
50 |
500 |
| SSL VPN NetExtender Clients (Bundled) |
2 |
2 |
2 |
2 |
| SSL VPN NetExtender Clients (Maximum) |
15 |
25 |
30 |
30 |
| Threat Signatures Capable |
25,000 |
25,000 |
25,000 |
25,000 |
VLAN Interfaces
(w/ Expansion Upgrade) |
10 (25) |
25 |
30 |
200 |
| Stateful Throughput 3 |
600 Mbps |
775 Mbps |
1.5 Gbps |
2.75 Gbps |
| UTM Performance |
110 Mbps |
150 Mbps |
240 Mbps |
600 Mbps |
| Gateway Anti-Virus Throughput 4 |
115 Mbps |
160 Mbps |
350 Mbps |
690 Mbps |
| Intrusion Prevention Throughput 4 |
195 Mbps |
275 Mbps |
750 Mbps |
1.4 Gbps |
| IMIX Performance |
195 Mbps |
235 Mbps |
580 Mbps |
700 Mbps |
| 3DES/AES VPN Throughput 3 |
150 Mbps |
300 Mbps |
625 Mbps |
1.0 Gbps |
Connections
(w/ Expansion Upgrade) |
25,000
(35,000) |
32,000 |
128,000 |
450,000 |
| Connections / sec |
2,000 |
4,000 |
7,000 |
12,000 |
| Logging |
ViewPoint®, Local Log, Syslog |
ViewPoint®, Local Log, Syslog |
ViewPoint®, Local Log, Syslog |
ViewPoint®, Local Log, Syslog |
| SNMP |
 |
 |
 |
 |
| Authentication |
XAUTH/ RADIUS Active Directory SSO LDAP Internal User Database |
XAUTH/ RADIUS Active Directory SSO LDAP Internal User Database |
XAUTH/ RADIUS Active Directory SSO LDAP Internal User Database |
XAUTH/ RADIUS Active Directory SSO LDAP Internal User Database |
| Voice over IP (VoIP) Security |
 |
 |
 |
 |
| Zone Security |
 |
 |
 |
 |
| Single Sign On |
 |
 |
 |
 |
| Dynamic Routing |
OSPF, RIP |
OSPF, RIP |
OSPF, RIP |
OSPF, RIP |
| Policy-based Routing |
 |
 |
 |
 |
| Dynamic Bandwidth Management |
 |
 |
 |
 |
| Integrated Wireless Switch & Controller |
 |
 |
 |
 |
| Stateful High Availability 5 |
 |
 |
 |
 |
| WAN/WAN Failover |
 |
 |
 |
 |
| Load Balancing |
 |
 |
 |
 |
| Object-based Management |
 |
 |
 |
 |
| Policy-based NAT |
 |
 |
 |
 |
| Inbound Load Balancing |
 |
 |
 |
 |
| IKEv2 VPN |
 |
 |
 |
 |
| Quality of Service (QoS) |
 |
 |
 |
 |
| SSL Control |
 |
 |
 |
 |
| IPv6 Ready |
 |
 |
 |
 |