SonicWall NSA2700
SonicWall NSA 2700 (250 คน)
จุดเด่น SonicWall Next Generation Firewall Gen7.0
- มี Multi-engine Capture Advanced Threat Protection (ATP) ทางานร่วมกับ Real-Time Deep Memory Inspection (RTDMI™) technology
- มี Throughput และ Connection Performance ที่สูงมากกว่า 1.5x จาก Generation เดิมและใช้งานได้จริง
- รองรับการใช้งาน Secure SD-WAN บนตัวอุปกรณ์ โดยไม่มีค่าใช้จ่าย
- รองรับการเก็บ Log, Report และบริการจัดการผ่าน Cloud หรือ On-premise
- รองรับการทางานแบบ HA (Active / Standby) โดยไม่มีค่าใช้จ่ายสาหรับการเพิ่ม security service licenses
- ลดต้นทุนในการลงทุนอุปกรณ์ Next Generation Firewall ให้กับองค์กร
- มีโปรแกรมสาหรับการทดแทนอุปกรณ์ Firewall เก่า โดยให้ security service และ support ฟรีอีก 1 ปี
Specifications:
|
FIREWALL GENERAL |
NSA2700 SERIES |
|---|---|
| Operating system | SonicOS 7.0 |
| Interfaces | 16x1GbE, 3x10G SFP+, 2 USB 3.0, 1 Console, 1 Management port |
| Storage | 64GB M.2 |
| Expansion | Storage Expansion Slot (Up to 256GB) |
| VLAN interfaces | 256 |
| Access points supported (maximum) | 32 |
|
FIREWALL/VPN PERFORMANCE |
NSA2700 |
| Firewall inspection throughput1 | 5.5 Gbps |
| Threat Prevention throughput2 | 3.0 Gbps |
| Application inspection throughput2 | 3.6 Gbps |
| IPS throughput2 | 3.4 Gbps |
| Anti-malware inspection throughput2 | 2.9 Gbps |
| TLS/SSL inspection and decryption throughput (DPI SSL)2 | 800 Mbps |
| IPSec VPN throughput3 | 2.10 Gbps |
| Connections per second | 21,500 |
| Maximum connections (DPI) | 500,000 |
|
VPN |
NSA2700 |
| Site-to-site VPN tunnels | 250 |
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography |
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-based VPN | RIP, OSPF, BGP |
| VPN features | Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN client platforms supported | Microsoft® Windows 10 |
| NetExtender | Microsoft Windows 10, Linux |
| Mobile Connect | Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10 |
|
SECURITY SERVICES |
NSA 2700 |
| Deep Packet Inspection services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL |
| Content Filtering Service (CFS) | HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists |
| Comprehensive Anti-Spam Service | Supported |
| Application Visualization | Yes |
| Application Control | Yes |
| Capture Advanced Threat Protection | Yes |
| DNS Security | Yes |
|
NETWORKING |
NSA 2700 |
| IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
| NAT modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
| Routing protocols4 | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| VoIP | Full H.323v1-5, SIP |
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Certifications | FIPS 140-2 (with Suite B) Level 2, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS) |
|
HARDWARE |
NSA 2700 |
| Form factor | 1U Rack Mountable |
| Power supply | 60W |
| Maximum power consumption (W) | 21.5 |
| Input power | 100-240 VAC, 50-60 Hz |
| Total heat dissipation (BTU) | 73.32 BTU |
| Dimensions | 43 x 32.5 x 4.5 (cm) 16.9 x 12.8 x 1.8 in |
| Weight | 4.0 kg / 8.8 lbs |
| WEEE weight | 4.2 kg / 9.3 lbs |
| Shipping weight | 6.4 kg / 14.1 lbs |
| Environment (Operating/Storage) | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C) |
| Humidity | 5-95% non-condensing |
|
REGULATORY |
NSA 2700 |
| Major regulatory compliance (wired models) | FCC Class B, FCC , ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL |
*Future use.
1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4 BGP is available only on SonicWall TZ400, TZ500 and TZ470.
5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products