Network & Communication

SonicWall Network Security appliance (NSa) series

Industry-validated security effectiveness and performance for mid-sized networks and distributed enterprises

The SonicWall Network Security appliance (NSa) series provides midsized networks, branch offices and distributed enterprises with advanced threat prevention in a high-performance security platform. Utilizing innovative deep learning technologies in the SonicWall Capture Cloud Platform, the NSa series delivers the automated realtime breach detection and prevention organizations need.

Cutting-edge threat prevention with superior performance

Today's network threats are highly evasive and increasingly difficult to identify using traditional methods of detection. Staying ahead of sophisticated attacks requires a more modern approach that heavily leverages security intelligence in the cloud. Without that cloud intelligence, gateway security solutions can't keep pace with today's complex threats. NSa series nextgeneration firewalls (NGFWs) integrate two advanced security technologies to deliver cutting-edge threat prevention that keeps your network one step ahead. Enhancing SonicWall's multi-engine Capture Advanced Threat Protection (ATP) service is our patent-pending Real-Time Deep Memory Inspection (RTDMI™) technology. The RTDMI engine proactively detects and blocks mass market, zero-day threats and unknown malware by inspecting directly in memory. Because of the real-time architecture, SonicWall RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks where the malware's weaponry is exposed for less than 100 nanoseconds. In combination, SonicWall's patented* single-pass Reassembly-Free Deep Packet Inspection (RFDPI) engine examines every byte of every packet, inspecting both inbound and outbound traffic simultaneously on the firewall. By leveraging the SonicWall Capture Cloud Platform in addition to on-box capabilities including intrusion prevention, antimalware and web/URL filtering, the NSa series blocks even the most insidious threats at the gateway.

Further, SonicWall firewalls provide complete protection by performing full decryption and inspection of TLS/SSL and SSH encrypted connections as well as non-proxyable applications regardless of transport or protocol. The firewall looks deep inside every packet (the header and data) searching for protocol non-compliance, threats, zero-days, intrusions, and even defined criteria. The deep packet inspection engine detects and prevents hidden attacks that leverage cryptography, blocks encrypted malware downloads, ceases the spread of infections, and thwarts command and control (C&C) communications and data exfiltration. Inclusion and exclusion rules allow total control to customize which traffic is subjected to decryption and inspection based on specific organizational compliance and/or legal requirements.

When organizations activate deep packet inspection functions such as IPS, antivirus, anti-spyware, TLS/SSL decryption/ inspection and others on their firewalls,network performance often slows down, sometimes dramatically. NSa series firewalls, however, feature a multi-core hardware architecture that utilizes specialized security microprocessors. Combined with our RTDMI and RFDPI engines, this unique design eliminates the performance degradation networks experience with other firewalls.

The SonicWall Network Security services platform™ (NSsp) series has next-generation firewalls with high port density and multi-gig speed interfaces, that can process several million connections for zero-day and advanced threats. Designed for large enterprise, higher education, government agencies and MSSPs, it eliminates attacks in real time without slowing performance. It is designed to be highly reliable and deliver uninterrupted services to organizations.

Enterprise-Class Firewalls

As businesses evolve along with an increase in managed and unmanaged devices, networks, cloud workloads, SaaS applications, users, Internet speeds, and encrypted connections, a firewall that can't support any one of these becomes a bottleneck. A firewall should be a source of strength and not a point of weakness.

The SonicWall NSsp firewall's multiple 100G/40G/25G/10G interfaces allow you to process several million simultaneous encrypted and unencrypted connections with unparallel threat prevention technology. With more than 70% of all sessions being encrypted, having a firewall that can process and examine this trafc without impacting the end user experience is critical to productivity and information security.

The NSsp's unifed policy enables organizations to simply and intuitively create access and security policies in a single interface.

Simplified management and reporting

Ongoing management, monitoring and reporting of network activities are handled through the SonicWall Network Security Manager. This provides an intuitive dashboard for managing firewall operations as well as provide historical reports - from a single source. Together, the simplified deployment and setup along with the ease of management enable organizations to lower their total cost of ownership and realize a high return on investment.

Deployment | Next-Generation Firewall (NGFW)

• Managed through a single pane of glass
• NSsp integrates with the rest of the SonicWall ecosystem of solutions
• Gain full visibility into your network to see what applications, devices, and users are doing to enforce policies as well as eliminate threats and bandwidth bottlenecks
• Integrate with Capture ATP with RTDMI for cloud-based sandboxing or Capture Security appliance for on-premise malware detection

• The NSsp provides inspection for over millions of simultaneous TLS/SSL and SSH encrypted connections regardless of port or protocol
• Inclusion and exclusion rules allow customization based on specifc organizational compliance and/or legal requirements
• Support for TLS cipher suites up to TLS 1.3

Protect your infrastructure from advanced email threats and compliance violations with powerful, easy-to-use solutions.

Email is crucial for your business communication, but it can also expose your business to sabotage and productivity drains if email-based threats such as ransomware, phishing, business email compromise (BEC), spoofing, spam and viruses flood your mail servers and user inboxes. What's more, government regulations now hold your business accountable for protecting confidential data and ensuring it is not leaked and that email containing sensitive customer data or confidential information is securely exchanged. Whether your organization is a growing small-to medium-sized business (SMB), a large, distributed enterprise or a managed service provider (MSP), you need a cost-effective way to deploy email security and encryption, and the scalability to easily grow capacity for - and delegate management across - organizational units and domains.

SonicWall Email Security appliances and software provide superior protection from inbound and outbound email threats and compliance violations by scanning all inbound and outbound email content and attachments for sensitive data, delivering real-time protection ransomware, advanced phishing attacks, spoofing, viruses, malicious URLs, zombies, directory harvest (DHA), Denial of Service (DoS) and other attacks. The solution leverages multiple, patented SonicWall threat detection techniques and a unique, worldwide attack identification and monitoring network.

SonicWall Email Security now integrates with the Capture Advance Threat Protection service, to deliver fine-grained and user-transparent inspection of SMTP-based traffic. The cloud-based Capture ATP service can scan a broad range of email attachment types, analyze them in a multi-engine sandbox, and block dangerous files or emails before they reach your network. Email Security with Capture ATP gives you a highly effective and responsive defense against ransomware and zero-day attacks.

The solution also includes Domain-based Message Authentication, DKIM (Domain Keys Identified Mail), SPF (Sender Policy Framework), Reporting and Conformance (DMARC), a powerful email authentication method that helps identify spoofed mail, reducing spam and advanced phishing attacks such as spear-phishing, whaling, CEO fraud and business email compromise, It also reports on sources and senders of email, so you can identify and shut down unauthorized senders falsifying email with your address and protect your brand. In addition, it prevents confidential data leaks and regulatory violations with advanced compliance scanning and management, including integrated email encryption cloud service to ensure secure exchange of sensitive data.

Administration of the Email Security solution is intuitive, quick and simple. You can safely delegate spam management to end users, while still retaining ultimate control over security enforcement. You can also easily manage user and group accounts with seamless multi-LDAP synchronization. For large, distributed environments, multi-tenancy support lets you delegate sub-administrators to manage settings at multiple organizational units (such as enterprise divisions or MSP customers) within a single Email Security deployment.

The SonicWall Network Security services platform™ (NSsp) series has next-generation firewalls with high port density and multi-gig speed interfaces, that can process several million connections for zero-day and advanced threats. Designed for large enterprise, higher education, government agencies and MSSPs, it eliminates attacks in real time without slowing performance. It is designed to be highly reliable and deliver uninterrupted services to organizations.

Enterprise-Class Firewalls

As businesses evolve along with an increase in managed and unmanaged devices, networks, cloud workloads, SaaS applications, users, Internet speeds, and encrypted connections, a firewall that can't support any one of these becomes a bottleneck. A firewall should be a source of strength and not a point of weakness.

The SonicWall NSsp firewall's multiple 100G/40G/25G/10G interfaces allow you to process several million simultaneous encrypted and unencrypted connections with unparallel threat prevention technology. With more than 70% of all sessions being encrypted, having a firewall that can process and examine this trafc without impacting the end user experience is critical to productivity and information security.

The NSsp's unifed policy enables organizations to simply and intuitively create access and security policies in a single interface.

Simplified management and reporting

Ongoing management, monitoring and reporting of network activities are handled through the SonicWall Network Security Manager. This provides an intuitive dashboard for managing firewall operations as well as provide historical reports - from a single source. Together, the simplified deployment and setup along with the ease of management enable organizations to lower their total cost of ownership and realize a high return on investment.

Deployment | Next-Generation Firewall (NGFW)

• Managed through a single pane of glass
• NSsp integrates with the rest of the SonicWall ecosystem of solutions
• Gain full visibility into your network to see what applications, devices, and users are doing to enforce policies as well as eliminate threats and bandwidth bottlenecks
• Integrate with Capture ATP with RTDMI for cloud-based sandboxing or Capture Security appliance for on-premise malware detection

• The NSsp provides inspection for over millions of simultaneous TLS/SSL and SSH encrypted connections regardless of port or protocol
• Inclusion and exclusion rules allow customization based on specifc organizational compliance and/or legal requirements
• Support for TLS cipher suites up to TLS 1.3

Protect your infrastructure from advanced email threats and compliance violations with powerful, easy-to-use solutions.

Email is crucial for your business communication, but it can also expose your business to sabotage and productivity drains if email-based threats such as ransomware, phishing, business email compromise (BEC), spoofing, spam and viruses flood your mail servers and user inboxes. What's more, government regulations now hold your business accountable for protecting confidential data and ensuring it is not leaked and that email containing sensitive customer data or confidential information is securely exchanged. Whether your organization is a growing small-to medium-sized business (SMB), a large, distributed enterprise or a managed service provider (MSP), you need a cost-effective way to deploy email security and encryption, and the scalability to easily grow capacity for - and delegate management across - organizational units and domains.

SonicWall Email Security appliances and software provide superior protection from inbound and outbound email threats and compliance violations by scanning all inbound and outbound email content and attachments for sensitive data, delivering real-time protection ransomware, advanced phishing attacks, spoofing, viruses, malicious URLs, zombies, directory harvest (DHA), Denial of Service (DoS) and other attacks. The solution leverages multiple, patented SonicWall threat detection techniques and a unique, worldwide attack identification and monitoring network.

SonicWall Email Security now integrates with the Capture Advance Threat Protection service, to deliver fine-grained and user-transparent inspection of SMTP-based traffic. The cloud-based Capture ATP service can scan a broad range of email attachment types, analyze them in a multi-engine sandbox, and block dangerous files or emails before they reach your network. Email Security with Capture ATP gives you a highly effective and responsive defense against ransomware and zero-day attacks.

The solution also includes Domain-based Message Authentication, DKIM (Domain Keys Identified Mail), SPF (Sender Policy Framework), Reporting and Conformance (DMARC), a powerful email authentication method that helps identify spoofed mail, reducing spam and advanced phishing attacks such as spear-phishing, whaling, CEO fraud and business email compromise, It also reports on sources and senders of email, so you can identify and shut down unauthorized senders falsifying email with your address and protect your brand. In addition, it prevents confidential data leaks and regulatory violations with advanced compliance scanning and management, including integrated email encryption cloud service to ensure secure exchange of sensitive data.

Administration of the Email Security solution is intuitive, quick and simple. You can safely delegate spam management to end users, while still retaining ultimate control over security enforcement. You can also easily manage user and group accounts with seamless multi-LDAP synchronization. For large, distributed environments, multi-tenancy support lets you delegate sub-administrators to manage settings at multiple organizational units (such as enterprise divisions or MSP customers) within a single Email Security deployment.