Network & Communication

Featuring a high port density including multiple 40 GbE and 10 GbE ports, the solution supports network and hardware redundancy with high availability, and dual power supplies.

SonicWall Generation 7 (Gen 7) Network Security Appliance (NSa) next-generation firewalls (NGFWs) offers medium- to large-sized enterprises industry-leading performance at the lowest total cost of ownership in their class.

With comprehensive security features such as intrusion prevention, VPN, application control, malware analysis, URL filtering, DNS Security, Geo-IP and Bot-net services, it protects the perimeter from advanced threats without becoming a bottleneck.

The Gen 7 NSa Series has been built from the ground up with the latest hardware components, all designed to deliver multi-gigabit threat prevention throughput - even for encrypted traffic. Featuring a high port density including multiple 40 GbE and 10 GbE ports, the solution supports network and hardware redundancy with high availability, and dual power supplies.

Generation 7 - SonicOS 7.0 and Security Services

The Gen 7 NSa Series runs on SonicOS 7.0, a new operating system built from the ground up to deliver a modern user interface, intuitive workflows and user-first design principles. SonicOS 7.0 provides multiple features designed to facilitate enterprise-level workflows. It offers easy policy configuration, zero-touch deployment and flexible management - all of which allow enterprises to improve both their security and operational efficiency.

The Gen 7 NSa Series supports advanced networking features, such as SD-WAN, dynamic routing, layer 4-7 high-availability and high-speed VPN functionality. In addition to integrating firewall and switch capabilities, the appliance provides a single-pane-of-glass interface to manage both switches and access points.

Built to mitigate the advanced cyberattacks of today and tomorrow, the Gen 7 NSa Series offers access to SonicWall's advanced firewall security services, allowing you to protect your entire IT infrastructure. Solutions and services such as Cloud Application Security, Capture Advanced Threat Protection (ATP) cloud-based sandboxing, Real-Time Deep Memory Inspection (RTDMI™) and Reassembly-Free Deep Packet Inspection (RFDPI) - for all traffic including TLS 1.3 - offer comprehensive gateway protection from most stealthy and dangerous malware, including zero-day and encrypted threats.

SonicWall Network Security appliance (NSa) series

Industry-validated security effectiveness and performance for mid-sized networks and distributed enterprises and data centers

The SonicWall Network Security appliance (NSa) series provides midsized networks, branch offices and distributed enterprises with advanced threat prevention in a high-performance security platform. Utilizing innovative deep learning technologies in the SonicWall Capture Cloud Platform, the NSa series delivers the automated realtime breach detection and prevention organizations need.

Cutting-edge threat prevention with superior performance

Today's network threats are highly evasive and increasingly difficult to identify using traditional methods of detection. Staying ahead of sophisticated attacks requires a more modern approach that heavily leverages security intelligence in the cloud. Without that cloud intelligence, gateway security solutions can't keep pace with today's complex threats. NSa series nextgeneration firewalls (NGFWs) integrate two advanced security technologies to deliver cutting-edge threat prevention that keeps your network one step ahead. Enhancing SonicWall's multi-engine Capture Advanced Threat Protection (ATP) service is our patent-pending Real-Time Deep Memory Inspection (RTDMI™) technology. The RTDMI engine proactively detects and blocks mass market, zero-day threats and unknown malware by inspecting directly in memory. Because of the real-time architecture, SonicWall RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks where the malware's weaponry is exposed for less than 100 nanoseconds. In combination, SonicWall's patented* single-pass Reassembly-Free Deep Packet Inspection (RFDPI) engine examines every byte of every packet, inspecting both inbound and outbound traffic simultaneously on the firewall. By leveraging the SonicWall Capture Cloud Platform in addition to on-box capabilities including intrusion prevention, antimalware and web/URL filtering, the NSa series blocks even the most insidious threats at the gateway.

Further, SonicWall firewalls provide complete protection by performing full decryption and inspection of TLS/SSL and SSH encrypted connections as well as non-proxyable applications regardless of transport or protocol. The firewall looks deep inside every packet (the header and data) searching for protocol non-compliance, threats, zero-days, intrusions, and even defined criteria. The deep packet inspection engine detects and prevents hidden attacks that leverage cryptography, blocks encrypted malware downloads, ceases the spread of infections, and thwarts command and control (C&C) communications and data exfiltration. Inclusion and exclusion rules allow total control to customize which traffic is subjected to decryption and inspection based on specific organizational compliance and/or legal requirements.

When organizations activate deep packet inspection functions such as IPS, antivirus, anti-spyware, TLS/SSL decryption/ inspection and others on their firewalls,network performance often slows down, sometimes dramatically. NSa series firewalls, however, feature a multi-core hardware architecture that utilizes specialized security microprocessors. Combined with our RTDMI and RFDPI engines, this unique design eliminates the performance degradation networks experience with other firewalls.

The SonicWall Network Security services platform™ (NSsp) series has next-generation firewalls with high port density and multi-gig speed interfaces, that can process several million connections for zero-day and advanced threats. Designed for large enterprise, higher education, government agencies and MSSPs, it eliminates attacks in real time without slowing performance. It is designed to be highly reliable and deliver uninterrupted services to organizations.

Enterprise-Class Firewalls

As businesses evolve along with an increase in managed and unmanaged devices, networks, cloud workloads, SaaS applications, users, Internet speeds, and encrypted connections, a firewall that can't support any one of these becomes a bottleneck. A firewall should be a source of strength and not a point of weakness.

The SonicWall NSsp firewall's multiple 100G/40G/25G/10G interfaces allow you to process several million simultaneous encrypted and unencrypted connections with unparallel threat prevention technology. With more than 70% of all sessions being encrypted, having a firewall that can process and examine this trafc without impacting the end user experience is critical to productivity and information security.

The NSsp's unifed policy enables organizations to simply and intuitively create access and security policies in a single interface.

Simplified management and reporting

Ongoing management, monitoring and reporting of network activities are handled through the SonicWall Network Security Manager. This provides an intuitive dashboard for managing firewall operations as well as provide historical reports - from a single source. Together, the simplified deployment and setup along with the ease of management enable organizations to lower their total cost of ownership and realize a high return on investment.

Deployment | Next-Generation Firewall (NGFW)

• Managed through a single pane of glass
• NSsp integrates with the rest of the SonicWall ecosystem of solutions
• Gain full visibility into your network to see what applications, devices, and users are doing to enforce policies as well as eliminate threats and bandwidth bottlenecks
• Integrate with Capture ATP with RTDMI for cloud-based sandboxing or Capture Security appliance for on-premise malware detection

• The NSsp provides inspection for over millions of simultaneous TLS/SSL and SSH encrypted connections regardless of port or protocol
• Inclusion and exclusion rules allow customization based on specifc organizational compliance and/or legal requirements
• Support for TLS cipher suites up to TLS 1.3

Easy-to-use, affordable secure remote access ssl-vpn.

Easy, affordable secure mobile access for small- to medium-sized businesses. Maintain a business edge by keeping workers productive, with access to resources from anywhere. Simple to deploy, use and manage, requiring no pre-installed client software.

Maintain a business edge by keeping workers productive, with access to resources from anywhere with the SonicWALL™ Secure Mobile Access (SMA) 200 Appliance. For organizations with less than 50 employees, the SMA 200 appliance provides these businesses with a scalable and cost-effective SMA solution that requires no pre-installed client software and is easy to deploy and manage.

Extended mobility

Provide a single, secure mobility gateway for all platforms - including Windows®, Mac OS® and Linux®-from almost any device, whether for browser-based access or an "in-office" experience. Extend access to iOS, Mac OSX, Windows, Google® Android™ and Kindle Fire devices with the SonicWALL Mobile Connect™ app.

Protection from malware and rogue access

Protect organizational networks from mobile malware and rogue access with context-aware authentication that grants access only to trusted devices and authorized users. Configure policies to interrogate mobile devices for essential security information such as jailbreak or root status, device ID, certificate status and OS versions prior to granting access. Laptops and PCs are also interrogated for the presence or absence of security software, client certificates, and device ID. Devices that do not meet policy requirements are not allowed network access and the user is notified of non-compliance.

One-click security and data protection

Protect company data at rest on mobile devices. Authenticated users can securely browse and view allowed intranet file shares and files from within the Mobile Connect app. Administrators can establish and enforce mobile application management policy for the Mobile Connect app to control whether files viewed can be opened in other apps, copied to the clipboard, printed or cached securely within the Mobile Connect app. This allows administrators to isolate business data from personal data stored on the device and reduces the risk of data loss. In addition, if the user's credentials are revoked, content stored in the Mobile Connect app is locked and can no longer be accessed or viewed.

Web traffic protection and data loss prevention

Protect against common attacks such as cross-site scripting, cookie tampering, injection attacks and cross-site request forgery (CSRF) with the optional Web Application Firewall (WAF) Service. Plus, stop theft of credit card and Social Security numbers with Data Leak Protection (DLP).

Multilayer security

Two-factor authentication provides tokenless, enhanced protection for your small business SSL VPN against keyloggers by generating a unique, one-time password that is sent to a remote user's mobile device or email address.

Simplified management

Granular unified policy eases administration by displaying bookmarks and policies in one centralized page. Multiple and custom LDAP policies can restrict unauthorized access to specific applications or resources.

Explore the Switch Series

Your network is under more pressure than ever. As the number of connected devices expands, bandwidth demands continue to soar, making it difficult to consistently provide the secure, high-speed connection your business depends on.

SonicWall's feature-rich switches answer the challenge delivering high-speed switching, so you can add more devices, keep up with SaaS proliferation and gain more control, all while protecting your network and your budget.

Its unified security posture makes it ideal for small and medium-sized businesses and Software Defined Branch (SD-Branch) deployments. Keep pace with the changing network and security landscape.