SonicWALL NSA 2400MX Appliance

SonicWALL Network Security Appliance 2400MX:

Revolutionary protection, scalability and performance

Today’s business networks need both robust security to counter the rapid proliferation of emerging sophisticated threats and flexible switching to provide responsive business communications channels in a turbulent global marketplace. Meeting both these necessities often requires purchasing separate hardware, which increases the costs and resources spent deploying and managing each component.

The SonicWALL® NSA 2400MX eliminates this problem by delivering robust, high-performance security on a Unified Threat Management (UTM) platform that features a breakthrough Reassembly-Free Deep Packet Inspection™ technology and multi-core hardware design, to deliver real-time comprehensive network protection, high-speed intrusion prevention, file and content inspection, and powerful Application Intelligence capabilities without compromising network performance.

At the same time, the NSA 2400MX provides flexible, intelligent switching capabilities with its unique PortShield architecture, increased port density with 26 interfaces, two module slots for future expandability and advanced switching, dynamic routing, networking and connectivity features. By integrating highperformance UTM with advanced switching functionality, the NSA 2400MX offers peerless scalability, granular configuration flexibility, and centralized control.

Designed for small and medium-sized businesses (SMBs) and branch office networks, the NSA 2400MX offers best-in-class threat prevention, rapid deployment and lowered total cost of ownership (TCO). An affordable platform that is easy to deploy, configure and manage in a wide variety of environments, the NSA 2400MX reduces upfront infrastructure expenses and ongoing administrative overhead costs. The NSA 2400MX also supports integrated virtual private networks (VPNs), virtual local area networks (VLANs), standards-based Voice over IP (VoIP), dynamic routing and Quality of Service (QoS) features, further extending security and performance through the network environment.

• Increased port density with advanced switching
• Advanced routing services and networking features
• High-performance security and application control
• Scalable potection with Reassembly-Free Deep Packet Inspection
• Unique PortShield Architecture
• State-of-the-art performance and lowered TCO
• Standards-based Voice over IP
• Innovative SonicWALL Clean VPN
• SonicWALL Global Management System
• Modular expansion

Features & Benefits:

• Increased port density with advanced switching provides the highest port density of any product in its class, with (10) 1 GbE and 16 FE ports, port bonding, QoS and port-level security.
• Advanced routing services and networking features include support for Open Shortest Path First (OSPF), Router Information Protocol (RIP), 802.1q VLANs, Multi-WAN, ISP failover, zone- and object-based management, load balancing, advanced NAT modes and more, to ensure network availability, ease integration, provide granular configuration flexibility and deliver comprehensive protection.
• High-performance security and application control integrates intrusion prevention, gateway antivirus, anti-spyware, application intelligence and control.
• Scalable protection with Reassembly-Free Deep Packet Inspection eliminates threats over unlimited file sizes and virtually unrestricted concurrent connections, offering ultimate scalability.
• Unique PortShield Architecture provides the flexibility to configure all 26 LAN switch ports into separate security zones such as LANs, WLANs and DMZs, providing protection not only from the WAN and DMZ, but also between devices inside the LAN. Effectively, each security zone has its own wire-speed 'mini-switch' that enjoys the protection of a dedicated deep packet inspection firewall.
• State-of-the-art performance and lowered TCO takes advantage of SonicWALL multi-core performance architecture to increase throughput and simultaneous inspection capabilities dramatically, while keeping power consumption nearly constant.
• Standards-based Voice over IP (VoIP) capabilities provide the highest levels of security for every element of the VoIP infrastructure, from communications equipment to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Servers.
• Innovative SonicWALL Clean VPN™ delivers the critical dual protection of SSL VPN and highperformance Unified Threat Management necessary to secure the integrity of both VPN access and traffic, thereby ensuring decontamination of mobile user and branch office traffic, while preventing vulnerabilities and malicious code from entering the corporate network.
• SonicWALL Global Management System (GMS®) offers flexible, powerful and intuitive tools for centralized global management, simplified configuration, policy enforcement, real-time monitoring, and integrated policy and compliance reporting for SonicWALL appliances.
• Modular expansion allows for a connectivity and port density expansion with supported SonicWALL M Series Modules, including SonicWALL 4-Port GbE M1 and 2-Port SFP M1 Modules.

Flexible, Customizable Deployment Options:

Every SonicWALL Network Security Appliance solution delivers next generation Unified Threat Management protection, utilizing a breakthrough multi-core hardware design and Reassembly-Free Deep Packet Inspection for internal and external network protection without compromising network performance. Each NSA Series product combines high-speed intrusion prevention, file and content inspection, and powerful Application Intelligence Service controls with an extensive array of advanced networking and flexible configuration features. The NSA Series offers an accessible, affordable platform that is easy to deploy and manage in a wide variety of corporate, branch office and distributed network environments.

• The SonicWALL NSA 4500 is ideal for corporate central-site and large distributed environments requiring high throughput capacity and performance
• The SonicWALL NSA 3500 is ideal for corporate, branch office and distributed environments needing significant throughput capacity and performance
• The SonicWALL NSA 2400 is ideal for small- to medium-sized corporate and branch office environments concerned about throughput capacity and performance
• The SonicWALL NSA 240 is ideal for small- to medium- sized businesses and branch office sites

Specifications:

Notes:
¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
² UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
³ Actual maximum connection counts are lower when UTM services are enabled.
⁴ Only with the NSA 240 Stateful HA and Expansion Upgrade.
⁵ VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
⁶ Supported on the NSA 3500 and higher.
⁷ Not available on NSA 2400.

*USB 3G card and modem are not included. See http://www.sonicwall.com/us/products/cardsupport.html for supported USB devices.

Documentation:

SonicWALL NSA 2400MX Series Datasheet (.PDF)