Hardware overview | NSa 4650 |
Operating system | SonicOS 6.5.x |
Security processing cores | 10 |
Interfaces | 2 x 10-GbE SFP+, 4 x 2.5-GbE SFP, 4 x 2.5-GbE, 16 x 1-GbE, 1 GbE Management, 1 Console |
Expansion | 1 Expasion Slot (Rear) * |
Built-in storage | 32 GB |
Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs |
Single Sign On (SSO) Users | 60,000 |
Access points supported (max) | 128 |
Logging | Analyzer, Local Log, Syslog, IPFIX, NetFlow |
Firewall/VPN performance | |
Firewall inspection throughput1 | 6.0 Gbps |
Threat Prevention throughput2(Max Security) | 2.5 Gbps |
Application inspection throughput2 | 3.0 Gbps |
IPS throughput2 | 2.3 Gbps |
Anti-malware inspection throughput2 | 2.45 Gbps |
IMIX throughput3 | 1.3 Gbps |
TLS/SSL inspection and decryption throughput (DPI SSL)2 | 675 Mbps |
VPN throughput2 | 3.0 Gbps |
Connections per second | 40,000 |
Maximum connections (SPI) | 3,000,000 |
Maximum connections (DPI) | 1,000,000 |
Maximum connections (DPI SSL) | 30,000 |
Default connections (DPI/DPI SSL)4 | 750,000/18,000 |
VPN | |
Site-to-site VPN tunnels | 4,000 |
IPSec VPN clients (maximum) | 2,000 (4,000) |
SSL VPN licenses (maximum) | 2 (1,000) |
Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography |
Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
Route-based VPN | RIP, OSPF, BGP |
Networking | |
IP address assignment | Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay |
NAT modes | 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode |
VLAN interfaces | 400 |
Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
VoIP | Full H.323-v1-5, SIP |
Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
Certifications(in progress) | ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC |
High Availability | Active/Passive with State Sync, Active/Active Clustering |
Hardware | |
Power supply | Dual, redundant 350W (one included) |
Fans | Dual, Removable |
Input power | 100-240 VAC, 50-60 Hz |
Maximum power consumption (W) | 93.6 |
MTBF at25ºC in hours | 154,529 |
MTBF at25ºC in years | 17.6 |
Form factor | 1U Rack Mountable |
Dimensions | 16.9 x 16.3 x 1.8 in (43 x 41.5 x 4.5 cm) |
Weight | 15.2 lb (6.9 kg) |
WEEE weight | 19.6 lb (8.9 kg) |
Shipping weight | 24.9 lb (11.3 kg) |
Major regulatory | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI |
Environment(Operatin/Storage) | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C) |
Humidity | 10-90% non-condensing |