Firewall General |
Operating system | SonicOS
| Interfaces | 5x1GbE, 1 USB, 1 Console
| Expansion | USB
| Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs
| Single Sign-On (SSO) Users | 500
| VLAN interfaces | 25
| Access points supported (maximum) | 8
|
---|
|
Firewall/VPN Performace |
Firewall inspection throughput | 1.0 Gbps
| Threat Prevention throughput | 335 Mbps
| Application inspection throughput | 600 Mbps
| IPS throughput | 400 Mbps
| Anti-malware inspection throughput | 335 Mbps
| TLS/SSL inspection and decryption throughput (DPI SSL) | 65 Mbps
| IPSec VPN throughput | 430 Mbps
| Connections per second | 6,000
| Maximum connections (SPI) | 100,000
| Maximum connections (DPI) | 90,000
| Maximum connections (DPI SSL) | 25,000
| Site-to-site VPN tunnels | 15
| IPSec VPN clients (maximum) | 2 (10)
| SSL VPN licenses (maximum) | 1 (75)
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v
| Route-based VPN | RIP, OSPF, BGP4
| Certificate support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-toSonicWall VPN, SCEP
| VPN features | Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
| Global VPN client platforms supported | Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10
| NetExtender | Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
| Mobile Connect | Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome, Windows 8.1 (Embedded)
|
---|
|
Security Services |
Deep Packet Inspection services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
| Content Filtering Service (CFS) | HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
| Comprehensive Anti-Spam Service | Supported
| Application Visualization | Yes
| Application Control | Yes
| Capture Advanced Threat Protection | Yes
|
---|
|
Networking |
IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
| NAT modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
| Routing protocols | BGP4, OSPF, RIPv1/v2, static routes, policy-based routing
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
| Local user database | 150
| VoIP | Full H.323v1-5, SIP
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
| Certifications | ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), USGv6, CSfC, DoDIN (formally UC-APL): DWF, IPS/IDS.
| Common Access Card (CAC) | Supported
| High availability | Active/standby
|
---|
|
Hardware |
Form factor | Desktop
| Power supply | 24W external
| Maximum power consumption (W) | 6.9 / 12.0
| Input power | 100 to 240 VAC, 50-60 Hz, 1 A
| Total heat dissipation | 23.5 / 40.9 BTU
| Dimensions | 3.5 x 13.4 x 19 cm 1.38 x 5.28 x 7.48 in
| Weight | 0.73 kg / 1.61 lbs 0.84 kg / 1.85 lbs
| WEEE weight | 1.15 kg / 2.53 lbs 1.26 kg / 2.78 lbs
| Shipping weight | 1.37 kg / 3.02 lbs 1.48 kg / 3.26 lbs
| MTBF (in years) | 56.1
| Environment (Operating/Storage) | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
| Humidity | 5-95% non-condensing
|
---|
|
Regulatory |
Major regulatory compliance (wired models) | FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, KCC/MSIP, ANATEL
| Major regulatory compliance (wireless models) | FCC Class B, FCC RF ICES Class B, IC RF CE (RED, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH
|
---|
|
Integrated Wireless |
Standards | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
| Frequency bands | 802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz
| Transmit output power | Based on the regulatory domain specified by the system administrator
| Transmit power control | Supported
|
---|
|