Nsa4800
Nsa4800 Series latest mid-range next-gen firewalls, Network
Security Appliance (NSa) Series
Our Price: Request a Quote
Only for upgrades: NSA 4800 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering, cloud management & 7-day alerting, 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr
Our Price: Request a Quote
Only for upgrades: NSA 4800 hardware with advanced protection security suite
Our Price: Request a Quote
SonicWall NSA 4800 appliance with 1yr of Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering, 24x7 support with firmware updates and cloud management with 7-day alerting, advanced reporting & analytics.
Our Price: Request a Quote
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
Gen 8 NSa firewalls drives strong security with a comprehensive solution encompassing of threat protection, centralized management, reporting and analytics, security and managed service options, Secure Service Edge (SSE) integration, and cyber warranty.
SonicWall latest mid-range next-gen firewalls, Network Security Appliance (NSa) Series offer medium and large enterprises industry-leading threat prevention performance at the lowest total cost of ownership in their class. The firewalls are the cornerstones of the threat protection solution that includes simplified centralized firewall management, Zero Trust enablement, flexible licensing with an option of managed firewall services, and an embedded cyber warranty for risk mitigation.
The Gen 8 firewalls deliver comprehensive security features such as intrusion prevention, VPN, application control, malware analysis, URL filtering, DNS Security, Geo-IP and Bot-net services, protecting the perimeter from advanced threats without becoming a bottleneck.
| Gen 8 NSa Spec Preview | ||
|---|---|---|
| Up to 40 Gbps | Up to 55 Gbps | Up to 20 Million |
| Threat Prevention Throughput | Firewall Throughput | Connections |
Highlights
- Form Factor: 1U Rackable Mounted
- Support for 40G/25G/10G/5G/2.5G/1G ports
- Multi-gigabit Threat and Malware Analysis Throughput
- Superior TLS performance (sessions and throughput)
- Best-in-class price-performance
- Expandable storage
- Advanced DNS Filtering
- Reputation-based Content Filtering Service (CFS 5.0)
- Simplified Centralized SaaS and On-Premises management via Network Security Manager
- Wi-Fi 6 firewall management
- SonicWall Unified Management Support
- Enterprise Internet Edge Ready
- Secure SD-WAN capability
- TLS 1.3 support
- Simplified licensing including Hardware Only, Advanced, and Managed Protection Security Suites
- Powered by SonicWall Capture Labs threat research team
- SonicWall Switch, SonicWave Access Point, and Capture Client integration
- Cloud Secure Edge Connector Support
- Embedded Warranty up to USD $200K by Cysurance included in Service Suites
Hardware
Gen 8 NSa Series, built with the latest hardware components, deliver multi-gigabit threat prevention throughput — even for encrypted traffic. Featuring a high port density, the firewall solutions support network and hardware redundancy with high availability and dual power adapters including one for redundancy
Architecture
The Gen 8 NSa Series runs on SonicOS 8, a new operating system that delivers a modern user interface, intuitive workflows and user-first design principles. SonicOS 8 provides multiple features designed to facilitate enterpriselevel workflows. It offers easy policy configuration, zero-touch deployment and flexible management — all of which allow enterprises to improve both their security and operational efficiency.
The NSa Series supports advanced networking features, such as SD-WAN, dynamic routing, layer 4-7 high availability and high-speed VPN functionality. In addition to integrating firewall and switch capabilities, the appliances provide a single-paneof-glass interface to manage both switches and access points.
Threat Protection and Security Services
Built to mitigate the advanced cyberattacks of today and tomorrow, the Gen 8 NSa Series offers access to SonicWall’s advanced firewall security services, allowing you to protect your entire IT infrastructure. Solutions and services such as Cloud Application Security, Capture Advanced Threat Protection (ATP) cloud-based sandboxing, patented Real-Time Deep Memory Inspection (RTDMI™) and Reassembly-Free Deep Packet Inspection (RFDPI) — for all traffic including TLS 1.3 — offer comprehensive gateway protection from most stealthy and dangerous malware, including zero-day and encrypted threats.
Simplified licensing includes Hardware Only, Advanced (APSS) and Managed Protection Security Suite (MPSS) to meet your unique needs. MPSS augments resources with managed services for firewalls.
A Cloud Secure Edge Connector integration provides secure access to their private applications behind the firewalls. Users and devices can adhere to a Zero-Trust framework for application access.
Cyber Warranty
An embedded cyber warranty is offered as part of your security suite to mitigate costs of security breach, meet compliance requirements and promote peace of mind.
Features:
- High Performance and Flexible Network Connectivity - Deploy next generation firewalls that are designed for mid-size and distributed enterprises to deliver much needed multi-gigabit threat prevention performance while providing high port density including 10 GbE ports for flexible network connectivity.
- Blocks More Attacks with RTDMI™ - Real-Time Deep Memory Inspection (RTDMI™) proactively detects and blocks unknown malware via deep memory inspection in real time, a revolutionary approach to defend against zero-day and side-channel attacks and other unrecognized threats.
- Low Total Cost of Ownership - Make a SonicWall NSa firewall the start of enterprise savings. From reduced costs through zero-touch deployment to enabling SD-WAN and delivering threat block rates on par or better than competitors at a fraction of the cost, SonicWall NSa firewalls are security you can’t afford to be without.
- Simplified Centralized Management - Increase efficiencies in deploying and managing distributed firewalls via configuration administration enhancements and bulk deployment capabilities included in all licensing tiers.
- Advanced Reporting & Analytics - Increase insights via customizable reports, schedule report capability, and tenant-based analytics.
- Managed Protection Security Suite - Extend your team with SonicSentry NOC Team 24x7 for managed firewall services that include monitoring, firmware updates, vulnerability reporting, and an embedded warranty of up to $200K warranty.
- Secure SD-WAN Technology - Leave MPLS behind for a more agile, secure, and cost-effective network optimized for today’s broadband-driven, cloud-infused landscape. Eliminate costs on SD-WAN appliances and licenses by leveraging the built-in secure SD-WAN technology in NSa firewalls.
- Integrates with Wireless Access Points - Implement high-speed wireless security by combining a NSa series next-generation firewall with a SonicWall SonicWave wireless access point. NSa series firewalls and SonicWave access points both feature 2.5/5 GbE ports that enable multi-gigabit wireless throughput offered in Wi-Fi 6 wireless technology.
- Built-in ZTNA Connector - Increase secure access to private applications behind the firewalls using a built-in connector to Cloud Secure Edge, enabling compliance with a Zero-Trust framework.
Deployment:
The Gen 8 NSa Series has two main deployment options for medium and distributed enterprises:
In this standard deployment option, the Gen 8 NSa Series NGFW protects private networks from malicious traffic coming from the internet, allowing you to:
- Deploy a proven NGFW solution with highest performance in its class
- Gain visibility and inspect encrypted traffic, including TLS 1.3, to block evasive threats coming from the Internet — all without compromising performance
- Protect your enterprise with integrated security, including malware analysis, cloud app security, URL filtering and reputation services
- Save space and money with an integrated NGFW solution that includes advanced security and networking capabilities
- Reduce complexity and maximize efficiency using a central management system delivered through an intuitive single-paneof-glass user interface
Medium and Distributed Enterprises
The SonicWall Gen 8 NSa Series supports SD-WAN and can be centrally managed, making it an ideal fit for medium and distributed enterprises. This deployment allows organizations to:
- Future-proof against an ever-changing threat landscape by investing in a NGFW with multi-gigabit threat analysis performance
- Provide direct and secure internet access to distributed branch offices instead of back-hauling through corporate headquarters
- Allow distributed branch offices to securely access internal resources in corporate headquarters or in a public cloud, significantly improving application latency
- Automatically block threats that use encrypted protocols such as TLS 1.3, securing networks from the most advanced attacks.
- Reduce complexity and maximize efficiency using a central management system delivered through an intuitive single pane of glass user interface
- Leverage high port density that includes 40 GbE and 10 GbE connectivity to support a distributed enterprise and wide area networks
Specifications:
| Firewall | NSa 2800 | NSa 3800 | NSa 4800 | NSa 5800 | NSa 6800 |
|---|---|---|---|---|---|
| Operating System | SonicOS 8 | ||||
| Interfaces | 16x 1GbE, 3x 10/5/2.5/1G SFP/SFP+, 2x USB (Type-A), 1 Console, 1 Mgmt | 24x 1GbE, 10x 10/5/2.5/1G SFP/SFP+, 2x USB (Type-A), 1 Console, 1 Mgmt | 24x 1GbE, 8x 10/5/2.5/1G SFP/SFP+, 2x USB (Type-A), 1 Console, 1 Mgmt | 24x 1GbE, 8x 10/5/2.5/1G SFP/SFP+, 2x USB (Type-A), 1 Console, 1 Mgmt | 16x 1GbE, 12x 10/5/2.5/1G SFP/SFP+, 4x 40G QSFP, 2x USB (Type-A), 1 Console, 1 Mgmt |
| Storage (Expansion) | 128 GB (Up to 512 GB) | 256 GB (Up to 512 GB) | 256 GB (Up to 1 TB) | 256 GB (Up to 1 TB) | 512 GB (Up to 1 TB) |
| Centralized Management | Network Security Manager (NSM) 3.0+, CLI, SSH, Web UI, REST APIs | ||||
| Logical VLAN & Tunnel Interfaces (Max) | 256 | 256 | 512 | 512 | 512 |
| SAML Single Sign-On Users (Max) | 40,000 | 40,000 | 50,000 | 50,000 | 70,000 |
| Access Points Supported (Max) | 512 | 512 | 512 | 512 | 512 |
| Firewall/VPN Performance | |||||
| Firewall Inspection Throughput | 8 Gbps | 12 Gbps | 20 Gbps | 30 Gbps | 55 Gbps |
| Threat Prevention Throughput | 6 Gbps | 8 Gbps | 13 Gbps | 24 Gbps | 40 Gbps |
| Application Inspection Throughput | 7 Gbps | 9 Gbps | 13 Gbps | 24 Gbps | 40 Gbps |
| IPS Throughput | 7 Gbps | 8 Gbps | 13 Gbps | 24 Gbps | 40 Gbps |
| Anti-Malware Inspection Throughput | 6 Gbps | 8 Gbps | 13 Gbps | 24 Gbps | 40 Gbps |
| TLS/SSL Inspection & Decryption | 1.8 Gbps | 3 Gbps | 4.2 Gbps | 8 Gbps | 10.5 Gbps |
| IPSec VPN Throughput | 5.5 Gbps | 8 Gbps | 11 Gbps | 21 Gbps | 27 Gbps |
| Connections per Second | 50,000 | 90,000 | 140,000 | 240,000 | 280,000 |
| Maximum Connections (SPI) | 2,000,000 | 3,000,000 | 6,000,000 | 8,000,000 | 20,000,000 |
| Maximum Connections (DPI) | 1,000,000 | 1,200,000 | 3,000,000 | 5,000,000 | 15,000,000 |
| Maximum Connections (TLS) | 150,000 | 300,000 | 600,000 | 750,000 | 1,500,000 |
| VPN and ZTNA | |||||
| Site-to-Site VPN Tunnels | 2,000 | 3,000 | 4,000 | 6,000 | 6,000 |
| IPSec VPN Clients (Max) | 50 (1,000) | 50 (1,000) | 500 (3,000) | 2,000 (4,000) | 2,000 (6,000) |
| SSL-VPN Licenses (Max) | 2 (500) | 2 (500) | 2 (1,000) | 2 (1,500) | 2 (1,500) |
| Encryption / Authentication | DES, 3DES, AES (128/192/256-bit), MD5, SHA-1, Suite B Cryptography | ||||
| Key Exchange | Diffie-Hellman Groups 1, 2, 5, 14v | ||||
| Route-Based VPN | RIP, OSPF, BGP | ||||
| Certificate Support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust, Microsoft CA, SCEP | ||||
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway | ||||
| Client Platforms Supported | Windows 7/8/8.1/10/11, Linux, macOS, iOS, Android, Chrome OS | ||||
| SonicWall Private Access | Included in 3&Free Loyalty Program | ||||
| Security services | |||||
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption | ||||
| Content Filtering Service (CFS) | Reputation-based URL filtering, HTTP/HTTPS inspection, keyword & content scanning, file-type filtering (ActiveX, Java, Cookies), allow/deny lists | ||||
| Comprehensive Anti-Spam Service | |||||
| Application Visualization | |||||
| Application Control | |||||
| Capture Advanced Threat Protection | |||||
| DNS Filtering | |||||
| Networking | |||||
| IP Address Assignment | Static (DHCP, PPPoE, L2TP, PPTP client), Internal DHCP server, DHCP relay | ||||
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode | ||||
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | ||||
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) | ||||
| Authentication Methods | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, Radius accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC | ||||
| Local User Database | 1,000 | 1,000 | 2,500 | 2,500 | 3,200 |
| VoIP Support | Full H.323 v1-5, SIP | ||||
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 | ||||
| Certifications | IPv6 / USGv6 | ||||
| High Availability | Active/Passive with stateful synchronization | ||||
| Hardware | |||||
| Form Factor | 1U Rack-mountable | ||||
| Power Supply (W) | 90 | 150 | 450 | 450 | 450 |
| Max Power Consumption (W) | 52.8 | 102.3 | 110.4 | 119.4 | 201.7 |
| Input Power (AC) | 100-240 VAC, 50-60 Hz | ||||
| Redundant Power Supply | N/A | 1 (Optional) | 1 (Optional) | 1 (Optional) | 1 (Optional) |
| Total Heat Dissipation (BTU) | 180.01 | 341 | 377.4 | 407.5 | 461.32 |
| Dimensions (Unit: cm) | 43 x 32.5 x 4.5 (Shipping: 57.5 x 47.5 x 18.5) | 43 x 32.5 x 4.5 (Shipping: 57.5 x 47.5 x 18.5) | 43 x 46 x 4.5 (Shipping: 69.5 x 59.5 x 21) | 43 x 46 x 4.5 (Shipping: 69.5 x 59.5 x 21) | 43 x 46 x 4.5 (Shipping: 69.5 x 59.5 x 21) |
| Weight (kg) | 4.6 | 4.6 | 7.4 | 7.4 | 7.4 |
| WEEE Weight (kg) | 4.8 | 4.8 | 9.3 | 9.3 | 9.3 |
| Shipping Weight (kg) | 7.2 | 7.2 | 13.2 | 13.2 | 13.2 |
| Operating / Storage Environment | 0°C to +40°C / -40°C to +70°C | ||||
| Humidity | 5-95% non-condensing | ||||
| Regulatory | |||||
| Regulatory Compliance | FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class A, KCC/MSIP, BSMI, MTCTE/TEC, CB | ||||
Documentation:
Download the Nsa4800 (.PDF)
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing and product availability subject to change without notice.
Custom Configurations
Looking for more configuration options or custom setups? Our team can help you find the right solution based on your requirements.
Contact UsBulk Purchase Support
Need multiple devices for your business or project? Contact us to discuss bulk pricing, availability, and delivery options.
Contact UsOur Price: Request a Quote
Only for upgrades: NSA 4800 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering, cloud management & 7-day alerting, 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr
Our Price: Request a Quote
Only for upgrades: NSA 4800 hardware with advanced protection security suite
Our Price: Request a Quote
SonicWall NSA 4800 appliance with 1yr of Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering, 24x7 support with firmware updates and cloud management with 7-day alerting, advanced reporting & analytics.
Our Price: Request a Quote
RENEWAL FOR 1Yr of MANAGED PROTECTION: Managed Protection Security Suite (MPSS) includes - Managed Firewall Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Cloud Management & 30-Day Advanced Reporting & Analytics and 24x7 Support with firmware updates.
Our Price: Request a Quote
RENEWAL FOR 2Yr of MANAGED PROTECTION: Managed Protection Security Suite (MPSS) includes - Managed Firewall Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Cloud Management & 30-Day Advanced Reporting & Analytics and 24x7 Support with firmware updates.
Our Price: Request a Quote
RENEWAL FOR 3Yr of MANAGED PROTECTION: Managed Protection Security Suite (MPSS) includes - Managed Firewall Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Cloud Management & 30-Day Advanced Reporting & Analytics and 24x7 Support with firmware updates.
Our Price: Request a Quote
SonicWall NSA4800 Appliance with 1Yr of MANAGED PROTECTION Bundle. This is mandatory HW SKU for any of MPSS related service SKUs to be bundled for renewals.: Managed Protection Security Suite (MPSS) includes - Managed Firewall, Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Cloud Management & 30-Day Advanced Reporting & Analytics and 24x7 Support with firmware updates.
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Must be paired with a regular SonicWall NSA 4800 appliance
Our Price: Request a Quote
Converts ha unit to the basic standalone appliance (no services)
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote