Hardware overview | NSa 3650 |
Operating system | SonicOS 6.5.x |
Security processing cores | 4 |
Interfaces | 2 x 10-GbE SFP+, 8 x 2.5-GbE SFP, 4 x 2.5-GbE, 12 x 1-GbE, 1 GbE Management, 1 Console |
Expansion | 1 Expasion Slot (Rear) * |
Built-in storage | 32 GB |
Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs |
Single Sign On (SSO) Users | 50,000 |
Access points supported (max) | 96 |
Logging | Analyzer, Local Log, Syslog, IPFIX, NetFlow |
Firewall/VPN performance | |
Firewall inspection throughput1 | 3.75 Gbps |
Threat Prevention throughput2(Max Security) | 1.75 Gbps |
Application inspection throughput2 | 2.1 Gbps |
IPS throughput2 | 1.8 Gbps |
Anti-malware inspection throughput2 | 1.5 Gbps |
IMIX throughput3 | 900 Mbps |
TLS/SSL inspection and decryption throughput (DPI SSL)2 | 320 Mbps |
VPN throughput2 | 1.5 Gbps |
Connections per second | 14,000 |
Maximum connections (SPI) | 2,000,000 |
Maximum connections (DPI) | 750,000 |
Maximum connections (DPI SSL) | 24,000 |
Default connections (DPI/DPI SSL)4 | 625,000/15,000 |
VPN | |
Site-to-site VPN tunnels | 3,000 |
IPSec VPN clients (maximum) | 500 (3,000) |
SSL VPN licenses (maximum) | 2 (500) |
Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography |
Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
Route-based VPN | RIP, OSPF, BGP |
Networking | |
IP address assignment | Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay |
NAT modes | 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode |
VLAN interfaces | 256 |
Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p |
Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
VoIP | Full H.323-v1-5, SIP |
Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
Certifications(in progress) | ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC |
High Availability | Active/Passive with State Sync, Active/Active Clustering |
Hardware | |
Power supply | Dual, redundant 120W (one included) |
Fans | Dual, Fixed |
Input power | 100-240 VAC, 50-60 Hz |
Maximum power consumption (W) | 46 |
MTBF at25ºC in hours | 156,681 |
MTBF at25ºC in years | 17.9 |
Form factor | 1U Rack Mountable |
Dimensions | 16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm) |
Weight | 11.7 lb (5.3 kg) |
WEEE weight | 12.3 lb (5.6 kg) |
Shipping weight | 17.2 lb (7.8 kg) |
Major regulatory | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI |
Environment(Operatin/Storage) | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C) |
Humidity | 10-90% non-condensing |