Operating system

SonicOS 5.9

Security Processor

2x 700 MHz

Memory (RAM)

512 MB

10 GbE SFP+ interfaces

n/a

1 GbE SFP interfaces

n/a

1 GbE Copper interfaces

5

1 GbE Copper Management interfaces

n/a

Expansion

Expansion Slot (Rear), SD Card, USB

Firewall inspection throughput

750 Mbps

Full DPI throughput

130 Mbps

Application inspection throughput

250 Mbps

IPS throughput

250 Mbps

Anti-malware inspection throughput

140 Mbps

IMIX throughput

210 Mbps

SSL Inspection and Decryption (DPI SSL)

Available

VPN throughput

200 Mbps

Connections per second

3,000/sec

Maximum connections (SPI)

110,000

Maximum connections (DPI)

64,000

Single Sign On (SSO) Users

250

VLAN interfaces

35

SonicPoints supported (Maximum)

16

Site-to-Site VPN Tunnels

50

IPSec VPN clients (Maximum)

2(25)

SSL VPN licenses (Maximum)

2(15)

Encryption/Authentication

DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1

Key exchange

Diffie Hellman Groups 1, 2, 5, 14

Route-based VPN

RIP, OSPF 

Regulatory Model

Regulatory Model APL25-090

Compliance / Regulatory

FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, CU 

IP address assignment

Static, (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay

NAT modes

1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode

Routing protocols

BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast

QoS

Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p

Authentication

XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix

VoIP

Full H323-v1-5, SIP

Standards

TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3

Certifications

VPNC, ICSA Firwall, ICSA Anti-Virus

Certifications pending

FIPS 140-2, Common Criteria EAL1+

Common Access Card (CAC)

SonicOS 5.9

High Availability

Stateful HA (License Required) 

Form factor

Desktop (1U Rack Mountable Kit Available)

Fans

2 Internal fans

Power Supply (W)

36

Maximum power consumption (W)

12 / 16

Input power

100-240 VAC, 60-50 Hz

Dimensions

1.4 x 7.1 x 10.7 (3.5 x 18 x 27cm)

Weight

3.05 lbs/1.38 kg/3.15 lbs/1.43 kg

WEEE weight

Firewall Overview

NSA 220

NSA 250M

NSA 2400

Application Layer Inspection

Fully Layer 7

Fully Layer 7

Fully Layer 7

Stateful Packet Inspection Firewall

Unlimited File Size Protection

Protocols Scanned

50+

50+

50+

ICSA Firewall Certified

Firewall General

NSA 220

NSA 250M

NSA 2400

Interfaces

7 Gbe

5 Gbe

6 Gbe

Console Interface

Included SonicOS Version

SonicOS 5.9

SonicOS 5.9

SonicOS 5.9

Memory

512 MB

512 MB

512Mb

Site-to-Site VPN Tunnels (w/ Expansion Upgrade)

25

50

75

Global VPN Clients Bundle (Maximum)

2 (25)

2 (25)

10 (250)

SSL VPN NetExtender Clients (Bundled)

2

2

2

SSL VPN NetExtender Clients (Maximum)

15

15

25

Threat Signatures Capable

25000

25000

25000

VLAN Interfaces (w/ Expansion Upgrade)

25

35

25

SonicPoints

16

24

32

Performance

NSA 220

NSA 250M

NSA 2400

Stateful Throughput

600 Mbps

750 Mbps

775 Mbps

UTM Performance

110 Mbps

130 Mbps

150 Mbps

Gateway Anti-Virus Throughput

115 Mbps

140 Mbps

160 Mbps

Intrusion Prevention Throughput

195 Mbps

250 Mbps

275 Mbps

IMIX Performance

180 Mbps

210 Mbps

235 Mbps

3DES/AES VPN Throughput

150 Mbps

200 Mbps

300 Mbps

Connections (w/ Expansion Upgrade)

85,000

110,000

32,000

Connections/sec

2,200

3,000

4,000

Features

NSA 220

NSA 250M

NSA 2400

Logging

ViewPoint®, Local Log, Syslog

ViewPoint®, Local Log, Syslog

ViewPoint®, Local Log, Syslog

SNMP

Authentication

XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix

Single Sign-On

Voice over IP (VoIP) Security

Zone Security

Routing protocols

BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast

Policy-based Routing

Route-based VPN