The SonicWALL® E-Class Network Security Appliance (NSA) Series is an industry first—using a re-assembly free deep packet inspection engine in combination with multi-core specialized security microprocessors to deliver gateway anti-virus, anti-spyware and intrusion prevention at high-speed so you don’t have to sacrifice network performance.
Legend
S Standard Feature
O Optional Feature
- Feature Not Available
S Standard Feature
O Optional Feature
- Feature Not Available| Firewall Overview | NSA E5500 | NSA E6500 | NSA E7500 | NSA E8500 |
| Deep Packet Inspection Firewall | O | O | O | O |
| Stateful Packet Inspection Firewall | S | S | S | S |
| Unlimited File Size Protection | S | S | S | S |
| Protocols Scanned | 50+ | 50+ | 50+ | 50+ |
| ICSA Firewall Certified | S | S | S | Pending |
| Security Services | NSA E5500 | NSA E6500 | NSA E7500 | NSA E8500 |
| Application Intelligence1 | O | O | O | S |
| Gateway Anti-Virus and Anti-Spyware1 | O | O | O | O |
| Intrusion Prevention Service1 | O | O | O | S |
| Enforced Client Anti-Virus & Anti-Spyware1 | O | O | O | O |
| Content & URL Filtering (CFS)1 | O | O | O | O |
| ViewPoint Reporting1 | O | O | O | O |
| Comprehensive Anti-Spam Service1 | O | O | O | O |
| SSL Inspection (DPI SSL)1 | O | O | O | S |
| E-Class 24x7 Support | Required | Required | Required | Required |
| Firewall General | NSA E5500 | NSA E6500 | NSA E7500 | NSA E8500 |
| Interfaces | 8 GbE, 1 HA, 2 USB | 8 GbE, 1 HA, 2 USB | 4 GbE, 4 SFP, 1 HA, 2 USB | 4 GbE, 4 SFP, 1 HA, 2 USB |
| Management | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS |
| Certifications | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | VPNC AES, Pending: EAL4+, FIPS 140-2 Level 2, ICSA Firewall 4.1 |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| Included SonicOS Version | Enhanced | Enhanced | Enhanced | Enhanced |
| RAM | 1 GB | 1 GB | 2 GB | 4 GB |
| Flash Memory | 512 MB | 512 MB | 512 MB | 512 MB |
| Visual Information Display (LCD Display) | S | S | S | S |
| Site-to-Site VPN Tunnels | 4,000 | 6,000 | 10,000 | 10,000 |
| Global VPN Clients (Maximum) | 2,000 (4,000) | 2,000 (6,000) | 2,000 (10,000) | 2,000 (10,000) |
| SSL VPN NetExtender Clients (Maximum) | 2 (50) | 2 (50) | 2 (50) | 2 (50) |
| Virtual Assist Technicians (Maximum) | 1 (25) | 1 (25) | 1 (25) | 1 (25) |
| Unique Malware Threats Blocked | 1,000,000+ | 1,000,000+ | 1,000,000+ | 1,000,000+ |
| VLAN Interfaces | 256 | 256 | 512 | 512 |
| SonicPoints Supported (Maximum) | 96 | 128 | 128 | 128 |
| Firewall/VPN Performance | NSA E5500 | NSA E6500 | NSA E7500 | NSA E85007 |
| Stateful Throughput2 | 3.9 Gbps | 5.0 Gbps | 5.6 Gbps | 8.0 Gbps |
| UTM Performance3 | 850 Mbps | 1.59 Gbps | 1.7 Gbps | 2.2 Gbps |
| Gateway Anti-Virus Throughput3 | 1.0 Gbps | 1.69 Gbps | 1.84 Gbps | 2.25 Gbps |
| Intrusion Prevention Throughput3 | 2.0 Gbps | 2.3 Gbps | 2.58 Gbps | 3.7 Gbps |
| IMIX Performance3 | 1.1 Gbps | 1.4 Gbps | 1.6 Gbps | 2.0 Gbps |
| 3DES/AES VPN Throughput4 | 1.7 Gbps | 2.7 Gbps | 3.0 Gbps | 4.0 Gbps |
| Maximum Connections5 | 750,000 | 1,000,000 | 1,500,000 | 1,500,000 |
| Maximum UTM Connections | 500,000 | 600,000 | 1,000,000 | 1,250,000 |
| New Connections/Sec | 15,000 | 20,000 | 25,000 | 80,000 |
| Features | NSA E5500 | NSA E6500 | NSA E7500 | NSA E8500 |
| Logging | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog |
| SNMP | S | S | S | S |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database |
| Dynamic Routing | OSPF, RIP | OSPF, RIP | OSPF, RIP | OSPF, RIP |
| Single Sign-On | S | S | S | S |
| Voice over IP (VoIP) Security | S | S | S | S |
| Interface to Interface Scanning | S | S | S | S |
| PortShield Security | S | S | S | S |
| Failover | ||||
| Hardware Failover | Active/Passive with State Sync, Active/Active UTM with State Sync | Active/Passive with State Sync, Active/Active UTM with State Sync | Active/Passive with State Sync, Active/Active UTM with State Sync | Active/Passive with State Sync, Active/Active UTM with State Sync |
| Multi-WAN Failover | S | S | S | S |
| Automated Failover/Failback | S | S | S | S |
| Analog Modem Failover | S | S | S | S |
| 3G Cellular Modem Failover6 | S | S | S | S |
| Policy-based Routing | S | S | S | S |
| Route-based VPN | S | S | S | S |
| Dynamic Bandwidth Management | S | S | S | S |
| 802.11n Wireless Support via SonicPoints | S | S | S | S |
| Integrated Wireless Switch & Controller | S | S | S | S |
| Layer 2 Wireless Bridging | S | S | S | S |
| Stateful High Availability | S | S | S | S |
| Multi-WAN | S | S | S | S |
| Load Balancing | S | S | S | S |
| Object-based Management | S | S | S | S |
| Policy-based NAT | S | S | S | S |
| Inbound Load Balancing | S | S | S | S |
| IKEv2 VPN | S | S | S | S |
| Active/Active UTM | S | S | S | S |
| Terminal Services Authentication/Citrix Support | S | S | S | S |
| Onboard Quality of Service (QoS) | S | S | S | S |
| SSL Control | S | S | S | S |
| Firewall Overview | NSA E5500 TS | NSA E6500 TS | NSA E7500 TS | |
| Hardware Platform | NSA E5500 | NSA E6500 | NSA E7500 | |
| Deep Packet Inspection Firewall | S | S | S | |
| Stateful Packet Inspection | S | S | S | |
| Unlimited File Size Protection | S | S | S | |
| Protocols Scanned | 50+ | 50+ | 50+ | |
| SonicPoints Supported (Max) | 96 | 128 | 128 | |
| ICSA Firewall Certified | S | S | S | |
| Security Services | NSA E5500 TS | NSA E6500 TS | NSA E7500 TS | |
| Gateway Anti-Virus, Anti-Spyware & IPS | S | S | S | |
| Application Intelligence | S | S | S | |
| Content Filtering Service (CFS) Edition | S | S | S | |
| ViewPoint Reporting | S | S | S | |
| E-Class Support 24x7 | S | S | S | |
| Comprehensive Anti-Spam Service1 | O | O | O | |
| Enforced Client Anti-Virus & Anti-Spyware1 | O | O | O | |
| SSL Inspection (DPI SSL)1 | O | O | O | |
| Firewall General | NSA E5500 TS | NSA E6500 TS | NSA E7500 TS | |
| Interfaces | (8) 10/100/1000 Copper Gigabit Ports, 1 GbE HA Interface, 2 USB | (8) 10/100/1000 Copper Gigabit Ports, 1 GbE HA Interface, 2 USB | (4) GbE Ports, 4 SFP (SX, LX or TX), 1 GbE HA Interface, 2 USB | |
| Management | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | |
| Certifications | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | EAL4+, FIPS 140-2 Level 2, VPNC AES, ICSA Firewall 4.1 | |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | |
| Included SonicOS Version | Enhanced | Enhanced | Enhanced | |
| RAM | 1 GB | 1 GB | 2 GB | |
| Flash Memory | 512 MB | 512 MB | 512 MB | |
| Visual Information Display (LCD Display) | S | S | S | |
| Site-to-Site VPN Tunnels | 4,000 | 6,000 | 10,000 | |
| Bundled GVC Licenses (Max) | 2,000 (4,000) | 2,000 (6,000) | 2,000 (10,000) | |
| Bundled SSL VPN Licenses (Max) | 2 (50) | 2 (50) | 2 (50) | |
| Virtual Assist Technicians (Max) | 1 (25) | 1 (25) | 1 (25) | |
| Unique Malware Threats Blocked | 1,000,000+ | 1,000,000+ | 1,000,000+ | |
| VLAN Interfaces | 256 | 256 | 512 | |
| Firewall/VPN/Performance | NSA E5500 TS | NSA E6500 TS | NSA E7500 TS | |
| Stateful Throughput2 | 3.9 Gbps | 5.0 Gbps | 5.6 Gbps | |
| UTM Performance3 | 850 Mbps | 1.59 Gbps | 1.7 Gbps | |
| Gateway Anti-Virus Throughput3 | 1.0 Gbps | 1.69 Gbps | 1.84 Gbps | |
| Intrusion Prevention Throughput3 | 2.0 Gbps | 2.3 Gbps | 2.58 Gbps | |
| IMIX Performance3 | 1.1 Gbps | 1.4 Gbps | 1.6 Gbps | |
| 3DES/AES VPN Throughput4 | 1.7 Gbps | 2.7 Gbps | 3.0 Gbps | |
| Maximum Connections5 | 750,000 | 1,000,000 | 1,500,000 | |
| Maximum UTM Connections | 500,000 | 600,000 | 1,000,000 | |
| New Connections/Sec | 15,000 | 20,000 | 25,000 | |
| Features | NSA E5500 TS | NSA E6500 TS | NSA E7500 TS | |
| Logging | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | ViewPoint, Local Log, Syslog | |
| SNMP | S | S | S | |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database | |
| Dynamic Routing | OSPF, RIP | OSPF, RIP | OSPF, RIP | |
| Single Sign-On | S | S | S | |
| Voice over IP (VoIP) Security | S | S | S | |
| Interface to Interface Scanning | S | S | S | |
| PortShield Security | S | S | S | |
| Failover | ||||
| Hardware Failover | Active/ Passive with State Sync, Active/Active UTM with State Sync | Active/ Passive with State Sync, Active/Active UTM with State Sync | Active/ Passive with State Sync, Active/Active UTM with State Sync | |
| Multi-WAN Failover | S | S | S | |
| Automated Failover/Failback | S | S | S | |
| Analog Modem Failover | S | S | S | |
| 3G Cellular Modem Failover6 | S | S | S | |
| Policy-based Routing | S | S | S | |
| Route-based VPN | S | S | S | |
| Dynamic Bandwidth Management | S | S | S | |
| 802.11n Wireless Support via SonicPoints | S | S | S | |
| Integrated Wireless Switch & Controller | S | S | S | |
| Layer 2 Wireless Bridging | S | S | S | |
| Stateful High Availability | S | S | S | |
| Multi-WAN | S | S | S | |
| Load Balancing | S | S | S | |
| Object-based Management | S | S | S | |
| Policy-based NAT | S | S | S | |
| Inbound Load Balancing | S | S | S | |
| IKEv2 VPN | S | S | S | |
| Active/Active UTM | S | S | S | |
| Terminal Services Authentication/Citrix Support | S | S | S | |
| Onboard Quality of Service (QoS) | S | S | S | |
| SSL Control | S | S | S | |
| IPv6 Ready | S | S | S |
1Services must be purchased separately.
2Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
3UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
4VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
5Actual maximum connection counts are lower when UTM services are enabled.
6USB 3G card and modem are not included. View supported USB devices.
7Performance metrics and product capacities for the E8500 are subject to change prior to product availability.
SonicWALL® E-Class NSA Series
