| |
|
Categories |
|
Hardware
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Support |
|
|
|
|
|
|
 |
SonicWALL NSA E5500 / E6500 /
E7500 Appliance

SonicWall does
not allow discounted prices to be advertised on this item.
Please call
800-671-5569 or email
sales@e-itstore.com
to request your actual low cost from E-ITstore.com
SonicWALL E-Class NSA
for Enterprise-NETWORK SECURITY class Deployments:
- Multi-core Performance Architecture
- Unified Threat Management Security
Platform
- Deployment Flexibility
- Application Firewall and Custom
Control
- Dynamic Protection
Protection and Performance:
The SonicWALL® E-Class Network Security
Appliance (NSA) Series is the industry’s first multi-core
Unified Threat Management (UTM) solution, delivering
enterprise-class deep packet inspection without significantly
impacting network throughput. Combining a powerful deep packet
inspection firewall with multiple layers of protection
technology and a suite of high availability features, the
E-Class NSA E7500, E6500 and E5500 appliances off er a broad
range of scalable solutions for enterprise deployments in
distributed environments, campus networks and data centers.
SonicWALL E-Class NSAs are engineered to
be the most scalable, reliable and highest performing
multifunction threat appliances in their class. The NSA Series
prevents against a vast spectrum of network attacks with
unprecedented speed. This speed of protection is enabled through
the NSA multi-core architecture, a parallel performance design
for ultra-high-speed threat protection and deployment
scalability. Taking protection to new levels of control is
Application Firewall, a set of customizable protection tools
that empowers administrators with precise control over network
traffic. Operational reliability is delivered through a high
availability suite of features at the hardware and system level
to optimize uptime and improve security coverage.
The NSA Series is a key part of
SonicWALL’s portfolio of enterprise-class products and services
for network security, e-mail protection and secure remote
access. All E-Class solutions offer outstanding protection and
performance while delivering elegant simplicity and unparalleled
value. SonicWALL’s E-Class delivers the high performance
protection required by enterprise-class networks in a solution
that is engineered to drive the cost and complexity out of
running a secure network.
Features and Benefits:
- Multi-core Performance
Architecture. At the heart of the E-Class NSA is the
SonicWALL multi-core performance architecture designed to
provide breakthrough deep packet inspection and granular
network intelligence over real-time network traffic without
impacting network performance. The SonicWALL E-Class NSA can
effectively deliver ultra-high-speed performance through the
concurrent use of specialized security processing cores.
Using the processing power of multiple cores in unison
dramatically increases throughput and simultaneous
inspection capabilities while lowering overhead impact.
- Unified Threat Management Security
Platform. The E-Class NSA Series delivers a highly
redundant security and connectivity platform that is
purpose-built for highspeed internal and external network
protection, consolidating and extending security
functionality throughout the network. E-Class NSAs integrate
realtime gateway anti-virus, spyware and intrusion
prevention to secure networks and VPNs against an extensive
array of dynamic threats including worms, Trojans, viruses,
malware and software vulnerabilities.
- Deployment Flexibility.
Designed for highly redundant operations, the E-Class NSA
appliances are an ideal solution for wired or wireless
applications requiring high-speed access and heavy workgroup
segmentation. With integrated support for standards-based
VoIP, virtual local area networks (VLANs), enterprise-class
routing and quality of service (QoS) E-Class NSAs increase
deployment flexibility and enhance productivity.
- Application Firewall and Custom
Control. Application Firewall is a configurable set of
granular, application specific policies that allow custom
access control per network user, application, schedule or IP
subnet level. These policies can restrict transfer of
specific files and documents, scan e-mail attachments using
user configurable criteria, automate bandwidth, control
inspect internal and external Web access, and support custom
signatures.
- Dynamic Protection. Dynamic
threat protection, content filtering and application control
services are continually updated on a 24x7 basis to maximize
security and decrease cost. IT productivity is increased by
eliminating ad-hoc patch management for servers and
workstations, automating the application of new protection
signatures and removing the necessity to manually update
security policies.
E-Class Network Security Appliance
Architecture:
Comprehensive, Integrated
Best-of-Breed Threat Protection:
Unified Threat Management Load
Balancing Single processor designs that include multiple
protection technologies are severely limited by a single
centralized processor. SonicWALL UTM load balancing
integrates a high-speed deep packet inspection and traffic
classification engine onto multiple security cores
inspecting applications, files and content-based traffic in
real time without significantly impacting performance or
scalability. This enables the scanning and control of
threats for enterprise-class networks that carry bandwidth
intensive and latency sensitive applications.


Unified Threat Management Engine:
The SonicWALL E-Class NSA UTM engine
delivers the first scalable application layer inspection
engine that can analyze files and content of any size in
real time without reassembling packets or application
content. This means of inspection is designed specifically
for real-time applications and latency sensitive traffic,
delivering complete control and inspection without having to
proxy connections. Using this engine design, high-speed
network traffic is inspected more efficiently and reliably
for an improved end user experience.


Flexible, Customizable Deployment
Options:
Central-site Gateway: Deployed
as a Central-site Gateway the NSA Series provides a
high-speed scalable platform, providing network segmentation
and security using VLAN’s and security zones. Redundancy
features include WAN Load balancing, ISP fail-over and
stateful high availability.
Layer 2 Bridge: Mode Layer 2
bridge mode provides inline intrusion detection and
prevention, adds an additional level of zone-based security
to network segments or business units and simplifies layered
security. Additionally, this enables administrators to limit
access to sensitive data by specific business unit or
database server.

Multi-layer Protection:
- Remote Site Protection: The
E-Class NSA Series incorporates ultra-high performance
Virtual Private Networks (VPNs) that easily scales to
thousands of end points and branch offices. Innovative
SonicWALL Clean VPN™ technology prevents vulnerabilities and
malicious code by decontaminating traffic before it enters
the corporate network, in real time and without user
intervention.

- Gateway Protection: Easily
integrated into existing environments, E-Class NSAs
centralize gateway-level protection across all incoming and
outgoing applications, files and content-based traffic,
while controlling bandwidth and applications, without
significantly impacting performance or scalability.
- Internal Protection: The
highly-configurable E-Class NSA Series extends protection
over the internal network by inspecting traffic over LAN
interfaces and VLANs. Specifically designed for LAN network
threats, the E-Class NSA Series monitors and responds to
internally spreading malware, denial of service attacks,
exploited software vulnerabilities, confidential documents,
policy violations and network misuse.
- Desktop and Server Protection:
In addition to network and gateway based protection, the
E-Class NSA Series provides additional end point protection
for workstations and servers through an enforced anti-virus
and antispyware client with advanced heuristics. This
enforced client solution delivers network access control by
restricting Internet access on end points that do not have
the latest signature or engine updates. When enforcement is
enabled on the appliance, each end point is directed to
download the enforced anti-virus and anti-spyware client
without any administrator intervention, automating the
deployment of end point security.
- Centralized Policy Management:
The SonicWALL Global Management System (GMS) provides
flexible, powerful and intuitive tools to centrally manage
E-Class NSA configurations across distributed enterprises,
view real-time monitoring metrics and integrate policy and
compliance reporting.
|
Model Comparison |
|
Appliance: |
NSA E5500 |
NSA E6500 |
NSA E7500 |
|
Firewall |
|
SonicOS Version |
SonicOS Enhanced 5.0 (or higher) |
|
Stateful Throughput1 |
2 Gbps |
3 Gbps |
5.5 Gbps |
|
GAV Performance2 |
750 Mbps |
900 Mbps |
1.8 Gbps |
|
IPS Performance2 |
550 Mbps |
850 Mbps |
1.2 Gbps |
|
UTM Performance Throughput |
400 Mbps |
750 Mbps |
1 Gbps |
|
Maximum Connections |
700,000 |
750,000 |
1,000,000 |
|
New Connections/Sec |
10,000 |
19,000 |
25,000 |
|
Nodes Supported |
Unrestricted |
|
Denial of Service Attack
Prevention |
22 classes of DoS, DDoS and
scanning attacks |
|
VPN |
|
3DES/AES Throughput1 |
1.5 Gbps |
2.5 Gbps |
4 Gbps |
|
Site-to-Site VPN Tunnels |
4,000 |
6,000 |
10,000 |
|
Bundled Global VPN Client
Licenses for Remote Access |
2,000 |
2,000 |
2,000 |
|
Encryption/Authentication |
DES, 3DES, AES (128, 192,
256-bit)/MD5, SHA-1 |
|
Key Exchange |
IKE, IKEv2, Manual Key, PKI
(X.509) |
|
L2TP/IPSec |
Yes |
|
Certificate Support |
Verisign, Thawte, Baltimore, RSA
Keon, Entrust, and Microsoft CA for
SonicWALL-to-SonicWALL VPN |
|
Redundant VPN Gateway |
Yes |
|
Global VPN Client Platforms
Supported |
Microsoft® Windows 2000, Windows
XP, Microsoft® Vista 32-bit |
|
Deep Packet
Inspection Security Services |
|
Deep Packet Inspection
Signature Service |
Comprehensive signature database.
Peer- to-peer and instant messaging control and
signature updates through Distributed Enforcement
Architecture |
|
Content Filtering Service (CFS)
Premium Edition |
HTTP URL, HTTPS IP, keyword and
content scanning ActiveX, Java Applet, and Cookie
blocking |
|
Gateway-enforced Client
Anti-Virus and Anti-Spyware |
HTTP/S, SMTP, POP3, IMAP and FTP,
Enforced McAfee™ Clients E-mail attachment blocking |
|
Application Firewall |
Provides application level
enforcement and bandwidth control, regulate Web
traffic, e-mail, e-mail attaches and file transfers,
scan and restrict documents and files for key words
and phrase |
|
Networking |
|
IP Address Assignment |
Static, (DHCP, PPPoE, L2TP and
PPTP client), Internal DHCP server, DHCP relay |
|
NAT Modes |
1:1, 1:many, many:1, many:many,
flexible NAT (overlapping IPs), PAT, transparent
mode |
|
VLAN Interfaces (802.1q) |
256 |
256 |
512 |
|
Routing |
OSPF, RIPv1/v2, static routes,
policy-based routing, Multicast |
|
QoS |
Bandwidth priority. maximum
bandwidth, guaranteed bandwidth, DSCP marking,
802.1p |
|
Authentication |
XAUTH/RADIUS, Active Directory,
SSO, LDAP, internal user database |
|
User Database |
1,500 Users |
2,500 Users |
2,500 Users |
|
VoIP |
Full H.323v1-5, SIP, gatekeeper
support, outbound bandwidth management, VoIP over
WLAN, deep inspection security, full
interoperability with most VoIP gateway and
communications devices |
|
System |
|
Management and Monitoring |
Web GUI (HTTP, HTTPS), Command
Line (SSH, Console), SNMP v2: Global management with
SonicWALL GMS |
|
Logging and Reporting |
ViewPoint®, Local Log, Syslog |
|
High Availability |
Active/Passive with State Sync |
|
Load Balancing |
Yes, (Outgoing with
percent-based, round robin and spill-over) (Incoming
with round robin, random distribution, sticky IP,
block remap and symmetrical remap) |
|
Standards |
TCP/IP, UDP, ICMP, HTTP, HTTPS,
IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP,
RADIUS |
|
Wireless Standards |
802.11 a/b/g, WEP, WPA, TKIP,
802.1x, EAP-PEAP, EAP-TTLS |
|
Hardware |
|
Interfaces |
(8) 10/100/1000 Copper Gigabit
Ports
1Gbe HA Interface, 1 Console Interface
2 USB (future Use) |
(8) 10/100/1000 Copper Gigabit
Ports
1Gbe HA Interface, 1 Console Interface
2 USB (future Use) |
1 Console Interface
(4) Gigabit Ethernet, (4) SFP (SX, LX or TX)
1 Gbe HA Interface
2 USB (Future Use) |
|
Memory (RAM) |
1 GB |
1 GB |
2 GB |
|
Flash Memory |
512 MB Compact Flash |
512 MB Compact Flash |
16 MB, 512 MB Compact Flash |
|
Power Supply |
Single 250W ATX Power Supplies |
Single 250W ATX Power Supplies |
Dual 250W ATX, Hot Swappable |
|
Fans |
Dual Fans, Hot Swappable |
|
Display |
Front LCD Display |
|
Power Input |
100-240Vac, 60-50Hz |
|
Max Power Consumption |
81 W |
90 W |
150 W |
|
Total Heat Dissipation |
276 BTU |
307 BTU |
511.5 BTU |
|
Certifications Pending |
ICSA IPSec VPN 1.0d, ICSA
Firewall 4.1, FIPS 140-2 Level 2, EAL-4+ |
|
Form Factor |
1U rack-mountable |
|
Dimensions |
17 x 16.75 x 1.75 in/43.18 x
42.54 x 4.44 cm |
|
Weight: |
15.00 lbs
6.8 kg |
15.10 lbs
6.85 kg |
17.30 lbs
7.9 kg |
|
WEEE Weight: |
15.00 lbs
6.8 kg |
15.10 lbs
6.85 kg |
17.30 lbs
7.9 kg |
|
Major Regulatory |
FCC Class A, CES Class A, CE,
C-Tick, VCCI, Compliance MIC, UL, cUL, TUV/GS, CB,
NOM, RoHS, WEEE |
|
Environment |
40-105° F, 5-40° C Humidity
10-90% non-condensing |
|
Humidity |
10-90% non-condensing |
Notes:
1 Firewall and VPN throughput measured using UPD
traffic adhering to RFC 2544.
2 Gateway AV/Anti-Spyware/IPS throughput
measured using industry standard Spirent WebAvalanche
HTTP Performance test.
|
|