Dell SonicWALL Network Security Appliance 2600 TotalSecure 1 Yr – 01-SSC-3863
Overview
Deep security that grows with your business.
Designed for growing small businesses, branch offices and school campuses, the Dell SonicWALL NSA 2600 delivers critical threat protection by preventing intrusions, blocking malware and eliminating access to questionable web content. It includes essential core features such as secure remote access, site-to-site VPN and WAN failover/load balancing, combined with Dell’s acclaimed ease of use and high value.
NSA 2600 Features.
The NSA 2600 appliance offers an extensive array of advanced security and networking features in an accessible and affordable platform that is easy to deploy and manage in a wide variety of environments.
Next-Generation Firewall.The NSA 2600 provides intrusion prevention, application control, gateway anti-malware, SSL decryption and inspection and URL filtering on a high performance platform through its comprehensive and intuitive management interface. This powerful combination ensures state-of-the-art security at a low total cost of ownership. |
Application intelligence.Dell SonicWALL provides real-time insight and control of network traffic broken down by applications, users and content through intuitive on-board visualization. The ability to prioritize important applications, throttle down unproductive applications and block unwanted application components ensures an efficient and safe network. |
WAN acceleration.The WAN Acceleration Appliance (WXA) Series provides WAN Acceleration to reduce application latency, conserve bandwidth and significantly optimize WAN performance. The WXA Series appliances are provisioned, managed and controlled by existing Dell SonicWALL SuperMassive™ 9000 Series and E-Class Network Security Appliance (NSA), NSA and TZ Series appliances for optimal ease of use and simplified deployment. |
Gateway anti-malware.Gateway anti-virus and anti-spyware provide high performance protection against millions of unique pieces of malware with near zero latency and no file size limitation. This provides a first layer of defense and stops malware before it can reach systems on your network. |
SonicWALL Mobile Connect™SonicWALL Mobile Connect, a single unified client app for Apple® iOS and Google® Android™, provides smartphone and tablet users superior network-level access to corporate and academic resources over encrypted SSL VPN connections. |
Intrusion prevention.Tightly integrated, signature based network intrusion prevention protects against a comprehensive array of network and application layer threats by scanning packet payloads for attacks and exploits that attack critical internal systems. |
Virtual Private Networking.High-performance Virtual Private Networks (VPNs) easily scale to thousands of end points and branch offices. And Dell SonicWALL Clean VPN™ technology protects the integrity of both your IPSec and SSL VPN traffic, securing your remote access tunnels and decontaminating the traffic running over it. |
High performance.Dell SonicWALL’s patented1 Reassembly-Free Deep Packet Inspection engine combined with the NSA 2600’s quad-core security platform is capable of inspecting thousands of simultaneous connections across all ports. The NSA 2600 provides Deep Packet Inspection across all interfaces with nearly zero latency and without file size limitation. |
Platform features.
SonicOS provides key features designed to ensure the security of your network with an intuitive graphical user interface for increased functionality and ease of use.
Deep Packet Inspection firewall.Dell SonicWALL Reassembly-Free Deep Packet Inspection® technology scans against multiple application types and protocols to protect against internal and external threats at both the application layer and the network layer. |
Deep Packet Inspection for SSL encrypted traffic (DPI-SSL).DPI-SSL transparently decrypts, inspects and re-encrypts SSL encrypted traffic to allow security services to be applied to all traffic that traverses Dell SonicWALL Next-Generation Firewalls. |
SSL VPN remote access.Integrated SSL VPN technology enables clientless, remote access to email, files, intranets, and applications from a variety of tablet, phone and PC platforms. The SSL VPN client can also be automatically pushed out to the client and auto-configured to provide secure layer 3 connectivity. |
Application Traffic AnalyticsThis powerful analytics solution provides organizations with powerful insight into application traffic, bandwidth utilization and security threats while providing enhanced troubleshooting and forensics capabilities. Businesses can easily identify non-business applications consuming network resources to modify usage policies accordingly. |
Secure network optimization.Stay ahead of today’s constantly evolving landscape of threats and application-related issues with an advanced security platform that consolidates Dell SonicWALL Next-Generation Firewall features for enterprises along with WAN acceleration for distributed offices to maximize security and control with minimum network latency. |
Secure wireless controller.Dell SonicWALL firewalls can be extended with secure wireless access points, SonicPoints, to provide seamless and secure 802.11 a/b/g/n wireless networks protected with the Dell SonicWALL Clean Wireless technology. |
Powerful reporting.Historical reporting on user activity is available through Dell SonicWALL Analyzer software and real-time application analysis through powerful visualization tools. |
Centralized policy managementThe Dell SonicWALL Global Management System (GMS®) provides flexible, powerful and intuitive tools to manage configurations, view real-time monitoring metrics and integrate policy and compliance reporting, all from a central location. |
Business continuity.Your network will continue to operate without interruption even if there is a hardware or software failure with Active/Passive failover. Stateful synchronization across the appliances enables failover without interruption to existing network traffic and VPN tunnels. |
Security services.
URL filtering.Dell SonicWALL Content Filtering Service blocks multiple categories of objectionable Web content and provides the ideal combination of control and flexibility to ensure the highest levels of productivity and protection. |
Enforced Client Anti-Virus and Anti-Spyware.The Dell SonicWALL Enforced Client Anti-Virus and Anti-Spyware service provides an added layer of protection by automatically ensuring network users are actively running McAfee anti-virus software. |
Gateway security services.Dell SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, and Application Intelligence and Control Service delivers intelligent, real-time network security protection against sophisticated application layer and content-based attacks, including viruses, spyware, worms, and more, along with tools for visualizing network traffic. |
Detailed tech Specifications
|
Device Type
|
Security appliance
|
 |
|
|
Bundled Services
|
1 year SonicWALL Comprehensive Gateway Security Suite
|
|
|
|
Form Factor
|
Rack-mountable – 1U
|
|
|
|
RAM
|
2 GB
|
|
|
|
Data Link Protocol
|
Gigabit Ethernet
|
|
|
|
Performance
|
Firewall throughput: 1.9 Gbps ¦ Full Deep Packet Inspection (DPI) throughput: 300 Mbps ¦ Application throughput: 700 Mbps ¦ IPS throughput: 700 Mbps ¦ Anti-malware throughput: 400 Mbps ¦ Firewall throughput (IMIX): 600 Mbps ¦ SSL throughput: 200 Mbps ¦ VPN throughput: 1.1 Gbps ¦ Connection rate: 15000 connections per second
|
|
|
|
Capacity
|
SPI connections: 225000 ¦ DPI connections: 125000 ¦ Maximum number of access points: 32 ¦ VPN tunnels (site-to-site): 75 ¦ IPSec VPN connections: 10 ¦ SSL VPN users: 2 ¦ Virtual interfaces (VLANs): 50
|
|
|
|
VoIP Protocols
|
SIP, H.323 v3, H.323 v4, H.323 v1, H.323 v2, H.323 v5
|
|
|
|
Power
|
AC 120/230 V (50/60 Hz)
|
|
|
|
Dimensions (WxDxH)
|
43 cm x 26 cm x 4.5 cm
|
|
|
|
Weight
|
4.6 kg
|
| General | |
|
Device Type
|
Security appliance
|
|
|
|
Bundled Services
|
1 year SonicWALL Comprehensive Gateway Security Suite
|
|
|
|
Height (Rack Units)
|
1U
|
|
|
|
Width
|
43 cm
|
|
|
|
Depth
|
26 cm
|
|
|
|
Height
|
4.5 cm
|
|
|
|
Weight
|
4.6 kg
|
| Processor / Memory / Storage | |
|
RAM
|
2 GB
|
| Networking | |
|
Form Factor
|
Rack-mountable
|
|
|
|
Connectivity Technology
|
Wired
|
|
|
|
Data Link Protocol
|
Gigabit Ethernet
|
|
|
|
Network / Transport Protocol
|
TCP/IP, PPTP, UDP/IP, L2TP, ICMP/IP, PPPoE, DHCP
|
|
|
|
Routing Protocol
|
OSPF, RIP-1, RIP-2, BGP, static IP routing, policy-based routing (PBR)
|
|
|
|
Remote Management Protocol
|
SNMP 2, SNMP 3, CLI
|
|
|
|
Performance
|
|
|
|
|
Capacity
|
|
|
|
|
Features
|
NAT support, VPN support, load balancing, Stateful Packet Inspection (SPI), DoS attack prevention, antivirus analysis, Intrusion Prevention System (IPS), URL filtering, deep inspection, DDos attack prevention, anti-spam protection, anti-malware protection, Quality of Service (QoS), RADIUS support, DHCP server, bandwidth control, DHCP relay, NetFlow, IPFIX
|
|
|
|
Encryption Algorithm
|
DES, Triple DES, MD5, SHA-1, 128-bit AES, 192-bit AES, 256-bit AES
|
|
|
|
Authentication Method
|
RADIUS, internal user database, Active Directory, XAUTH authentication
|
|
|
|
Compliant Standards
|
IEEE 802.1p
|
| IP Telephony | |
|
VoIP Protocols
|
SIP, H.323 v3, H.323 v4, H.323 v1, H.323 v2, H.323 v5
|
|
|
|
IP Telephony Features
|
VoIP gatekeeper support, VoIP outbound bandwidth management
|
| Expansion / Connectivity | |
|
Expansion Slots
|
1 (total) / 1 (free) x expansion slot
|
|
|
|
Interfaces
|
|
| Miscellaneous | |
|
Compliant Standards
|
FCC Class A certified, UL, TUV GS, VCCI, C-Tick, BSMI, ICSA Firewall certified, cUL, NOM, ICSA Antivirus, CB, RoHS, FIPS 140-2, KCC, WEEE, ANATEL, VPNC certified
|
| Power | |
|
Power Device
|
Internal power supply
|
|
|
|
Installed Qty
|
1
|
|
|
|
Max Supported Qty
|
1
|
|
|
|
Voltage Required
|
AC 120/230 V (50/60 Hz)
|
|
|
|
Power Consumption Operational
|
49.4 Watt
|
|
|
|
Power Provided
|
200 Watt
|
| Software / System Requirements | |
|
OS Provided
|
SonicOS
|
| Environmental Parameters | |
|
Min Operating Temperature
|
0 °C
|
|
|
|
Max Operating Temperature
|
40 °C
|
|
|
|
Humidity Range Operating
|
10 – 90% (non-condensing)
|
Firewall Overview
|
Feature |
Value |
|---|---|
| Deep Packet Inspection Firewall | Standard |
| Stateful Packet Inspection Firewall | Standard |
| Unlimited File Size Protection | Standard |
| Protocols Scanned | 50+ |
| ICSA Firewall Certified | Standard |
Security Services Included
|
Feature |
Value |
|---|---|
| Application Intelligence and Control 1 | Standard |
| Intrusion Prevention 1 | Standard |
| Gateway Anti-Virus and Anti-Spyware 1 | Standard |
| Enforced Client Anti-Virus and Anti-Spyware 1 | Standard |
| Content & URL Filtering (CFS) 1 | Standard |
| Analyzer Reporting 1 | Standard |
| Comprehensive Anti-Spam Service 1 | Standard |
| SSL Inspection (DPI-SSL) 1 | Standard |
Support Services
|
Feature |
Value |
|---|---|
| Dynamic Support 8×5 | Optional |
| Dynamic Support 24×7 1 | Optional |
Firewall General
|
Feature |
Value |
|---|---|
| Interfaces | 8 1GbE copper 1 Managment |
| Management | CLI, SSH, GUI, GMS |
| Certifications | VPNC, ICSA Firewall, ICSA Anti-Virus |
| Nodes Supported | Unrestricted |
| RAM | 2 GB |
| Flash Memory | 1GB |
| Site-to-Site VPN Tunnels | 75 |
| IPSec VPN Clients (Maximum) | 10 (250) |
| SSL VPN Licenses (Maximum) | 2 (25) |
| Unique Malware Threats Blocked | 10+ million |
| Virtual Assist Technicians (Maximum) | *tbc* |
| VLAN Interfaces | 50 |
| SonicPoints | 32 |
Performance
|
Feature |
Value |
|---|---|
| Firewall Inspection Throughput 2 | 1.9 Gbps |
| Full DPI Throughput 3 | 300 Mbps |
| Application Inspection Throughput 3 | 700 Mbps |
| IPS Throughput 3 | 700 Mbps |
| Anti-Malware Inspections Throughput 3 | 400 Mbps |
| IMIX Performance 4 | 600 Mbps |
| SSL Inspection & Decryption (DPI SSL) 3 | 200 Mbps |
| VPN Throughput 4 | 1.1 Gbps |
| Connections per second | 15,000/sec |
| Maximum Connections (SPI) 5 | 225,000 |
| Maximum Connections (DPI) | 125,000 |
| SonicPoints Supported (Maximum) | 32 |
| Single Sign On (SSO) Users | 250 |
Features
|
Feature |
Value |
|---|---|
| Logging | Analyzer, Local Log, Syslog |
| Network Traffic Visualization | Standard |
| Netflow/IPFIX Reporting | Standard |
| SNMP | Standard |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Novell, Internal User Database, Terminal Services, Citrix |
| Single Sign-On | Standard |
| Voice over IP (VoIP) Security | Standard |
| PortShield Security | Standard |
| Dynamic Routing | BGP, OSPF, RIPv1/v2, Static Routes, Policy-Based Routing, Multicast |
| Policy-based Routing | Standard |
| Route-based VPN | Standard |
| Dynamic Bandwidth Management | Standard |
| 802.11n Wireless Support via SonicPoints | Standard |
| Integrated Wireless Switch & Controller | Standard |
| Layer 2 Wireless Bridging | Standard |
| Stateful High Availability | Standard |
| Multi-WAN | Standard |
| Load Balancing | Standard |
| Object-based Management | Standard |
| Policy-based NAT | Standard |
| Inbound Load Balancing | Standard |
| IKEv2 VPN | Standard |
| Terminal Services Authentication/Citrix Support | Standard |
| Onboard Quality of Service (QoS) | Standard |
| SSL Control | Standard |
| IPv6 | Standard |
Failover
|
Feature |
Value |
|---|---|
| Hardware Failover | Active/ Passive with State Sync |
| Multi-WAN Failover | Standard |
| Automated Failover/Failback | Standard |
| Analog Modem Failover | Standard |
| 3G Cellular Modem Failover 7 | Standard |
- Services must be purchased separately.
- Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
- Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
- VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
- Actual maximum connection counts are lower when UTM services are enabled.
- Only with the NSA 250M/NSA 240/NSA 220 Series Stateful HA and Expansion Upgrade.
- USB 3G card and modem are not included. View all supported USB devices.
