Dell PartnerDirect Premier Partner

Dell Premier Partner

SonicWALL NSA 2400MX Appliance
Revolutionary protection, scalability and performance

Upgrade your Old Firewall Today and Save!

SonicWALL NSA 2400MX Series

The NSA 2400MX has been discontinued and replaced by the NSA 3600, click here! You can still purchase support and subscriptions if you currently own a NSA 2400MX Series appliance below.

Click here to jump to more pricing!

SonicWALL Network Security Appliance 2400MX:

Revolutionary protection, scalability and performance

Today’s business networks need both robust security to counter the rapid proliferation of emerging sophisticated threats and flexible switching to provide responsive business communications channels in a turbulent global marketplace. Meeting both these necessities often requires purchasing separate hardware, which increases the costs and resources spent deploying and managing each component.

The SonicWALL® NSA 2400MX eliminates this problem by delivering robust, high-performance security on a Unified Threat Management (UTM) platform that features a breakthrough Reassembly-Free Deep Packet Inspection™ technology and multi-core hardware design, to deliver real-time comprehensive network protection, high-speed intrusion prevention, file and content inspection, and powerful Application Intelligence capabilities without compromising network performance.

SonicWALL Live Demo Site - Experience SonicWALL for yourself! Click here.At the same time, the NSA 2400MX provides flexible, intelligent switching capabilities with its unique PortShield architecture, increased port density with 26 interfaces, two module slots for future expandability and advanced switching, dynamic routing, networking and connectivity features. By integrating highperformance UTM with advanced switching functionality, the NSA 2400MX offers peerless scalability, granular configuration flexibility, and centralized control.

Designed for small and medium-sized businesses (SMBs) and branch office networks, the NSA 2400MX offers best-in-class threat prevention, rapid deployment and lowered total cost of ownership (TCO). An affordable platform that is easy to deploy, configure and manage in a wide variety of environments, the NSA 2400MX reduces upfront infrastructure expenses and ongoing administrative overhead costs. The NSA 2400MX also supports integrated virtual private networks (VPNs), virtual local area networks (VLANs), standards-based Voice over IP (VoIP), dynamic routing and Quality of Service (QoS) features, further extending security and performance through the network environment.

  • Increased port density with advanced switching
  • Advanced routing services and networking features
  • High-performance security and application control
  • Scalable potection with Reassembly-Free Deep Packet Inspection
  • Unique PortShield Architecture
  • State-of-the-art performance and lowered TCO
  • Standards-based Voice over IP
  • Innovative SonicWALL Clean VPN
  • SonicWALL Global Management System
  • Modular expansion

Features & Benefits:

  • Increased port density with advanced switching provides the highest port density of any product in its class, with (10) 1 GbE and 16 FE ports, port bonding, QoS and port-level security.
  • Advanced routing services and networking features include support for Open Shortest Path First (OSPF), Router Information Protocol (RIP), 802.1q VLANs, Multi-WAN, ISP failover, zone- and object-based management, load balancing, advanced NAT modes and more, to ensure network availability, ease integration, provide granular configuration flexibility and deliver comprehensive protection.
  • High-performance security and application control integrates intrusion prevention, gateway antivirus, anti-spyware, application intelligence and control.
  • Scalable protection with Reassembly-Free Deep Packet Inspection eliminates threats over unlimited file sizes and virtually unrestricted concurrent connections, offering ultimate scalability.
  • Unique PortShield Architecture provides the flexibility to configure all 26 LAN switch ports into separate security zones such as LANs, WLANs and DMZs, providing protection not only from the WAN and DMZ, but also between devices inside the LAN. Effectively, each security zone has its own wire-speed 'mini-switch' that enjoys the protection of a dedicated deep packet inspection firewall.
  • State-of-the-art performance and lowered TCO takes advantage of SonicWALL multi-core performance architecture to increase throughput and simultaneous inspection capabilities dramatically, while keeping power consumption nearly constant.
  • Standards-based Voice over IP (VoIP) capabilities provide the highest levels of security for every element of the VoIP infrastructure, from communications equipment to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Servers.
  • Innovative SonicWALL Clean VPN™ delivers the critical dual protection of SSL VPN and highperformance Unified Threat Management necessary to secure the integrity of both VPN access and traffic, thereby ensuring decontamination of mobile user and branch office traffic, while preventing vulnerabilities and malicious code from entering the corporate network.
  • SonicWALL Global Management System (GMS®) offers flexible, powerful and intuitive tools for centralized global management, simplified configuration, policy enforcement, real-time monitoring, and integrated policy and compliance reporting for SonicWALL appliances.
  • Modular expansion allows for a connectivity and port density expansion with supported SonicWALL M Series Modules, including SonicWALL 4-Port GbE M1 and 2-Port SFP M1 Modules.

Flexible, Customizable Deployment Options:

Flexible, Customizable Deployment Options - NSA Series At-A-Glance:

 

Every SonicWALL Network Security Appliance solution delivers next generation Unified Threat Management protection, utilizing a breakthrough multi-core hardware design and Reassembly-Free Deep Packet Inspection for internal and external network protection without compromising network performance. Each NSA Series product combines high-speed intrusion prevention, file and content inspection, and powerful Application Intelligence Service controls with an extensive array of advanced networking and flexible configuration features. The NSA Series offers an accessible, affordable platform that is easy to deploy and manage in a wide variety of corporate, branch office and distributed network environments.

  • The SonicWALL NSA 4500 is ideal for corporate central-site and large distributed environments requiring high throughput capacity and performance
  • The SonicWALL NSA 3500 is ideal for corporate, branch office and distributed environments needing significant throughput capacity and performance
  • The SonicWALL NSA 2400 is ideal for small- to medium-sized corporate and branch office environments concerned about throughput capacity and performance
  • The SonicWALL NSA 240 is ideal for small- to medium- sized businesses and branch office sites

Specifications:

SonicWALL NSA 2400MX Series - Back View

Appliance: NSA 2400MX
Firewall
SonicOS Version SonicOS Enhanced 5.7 (or higher)
Stateful Throughput1 775 Mbps
GAV Performance2 160 Mbps
IPS Performance2 275 Mbps
UTM Performance2 150 Mbps
IMIX Peformance2 235 Mbps
Maximum Connections3 225,000
Maximum UTM Connections 125,00
New Connections/Sec 4,000
Nodes Supported Unrestricted
Denial of Service Attack Prevention 22 classes of DoS, DDoS and scanning attacks
SonicPoints Supported (maximum) 32 *Please Note: The NSA 2400MX does not currently support the SonicPoint N Dual Radio.
VPN
3DES/AES Throughput5 300 Mbps
Site-to-Site VPN Tunnels 75
Bundled Global VPN Client Licenses for Remote Access (Maximum) 10 (250)
Bundled SSL VPN Licenses (Maximum) 2 (25)
Virtual Assist Bundled (Maximum) 1 (5)
Encryption/Authentication/DH Group DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1/DH Groups 1, 2, 5, 14
Key Exchange IKE, IKEv2, Manual Key, PKI (X.509), L2TP over IPSec
Route-Based VPN Yes (OSPF, RIP)
Certificate Support Verisign, Thawte, Cybertrust, RSA Keon, Entrust, and Microsoft CA for SonicWALL-to-SonicWALL VPN, SCEP
Dead Peer Detection Yes
DHCP Over VPN Yes
IPSec NAT Traversal Yes
Redundant VPN Gateway Yes
Global VPN Client Platforms Supported Microsoft Windows 2000, Windows XP, Microsoft Vista 32-bit/64 bit, Windows 7 32/64-bit
SSL VPN Platforms Supported Microsoft Windows 2000 / XP / Vista 32/64-bit / Windows 7, Mac 10.4+, Linux FC 3+ / Ubuntu 7+ / OpenSUSE
Deep Packet Inspection Security Services
Deep Packet Inspection Signature Service Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence
Content Filtering Service (CFS) Premium Edition (CFS) HTTP URL,HTTPS IP, keyword and content scanning ActiveX, Java Applet, and cookie blocking
Gateway-enforced Client Anti-Virus and Anti-Spyware HTTP/S, SMTP, POP3, IMAP and FTP, Enforced McAfee Clients Email attachment blocking
Comprehensive Anti-Spam Service Yes
Application Intelligence Provides application level enforcement and bandwidth control, regulate Web traffic, email, email attaches and file transfers, scan and restrict documents and files for key words and phrases
DPI-SSL6 Provides the ability to decrypt HTTPS traffic transparently, scan this traffic for threats using SonicWALLs Deep Packet Inspection technology (GAV/AS/IPS/Application Intelligence/CFS),then re-encrypt the traffic and send it to its destination if no threats or vulnerabilities are found. This feature works for both clients and servers.
Networking
IP Address Assignment Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT Modes 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
VLAN Interfaces (802.1q) 25
Routing OSPF, RIPv1/v2, static routes, policy-based routing, Multicast
QoS Bandwidth priority. maximum bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
IPv6 Yes
Authentication XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
Internal Database/Single Sign-on Users 250/250 Users
VoIP Full H.323v1-5, SIP, gatekeeper support, outbound bandwidth management, VoIP over WLAN, deep inspection security, full interoperability with most VoIP gateway and communications devices
System
Zone Security Yes
Schedules One Time, Recurring
Object-based/Group-based Management Yes
DDNS Yes
Management and Monitoring Web GUI (HTTP, HTTPS), Command Line (SSH, Console), SNMP v2: Global management with SonicWALL GMS
Logging and Reporting Analyzer, Local Log, Syslog, Solera Networks, NetFlow v5/v9, IPFIX with Extensions, Real-time Visualization
High Availability Optional Active/Passive with State Sync**
Load Balancing Yes, (Outgoing with percent-based, round robin and spill-over) (Incoming with round robin, random distribution, sticky IP, block remap and symmetrical remap)
Standards TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Wireless Standards 802.11 a/b/g/n, WPA2, WPA, TKIP, 802.1x, EAP-PEAP, EAP-TTLS
Hardware
Interfaces (16) 10/100, (10) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB, 2 Module Slots (for future use)
Memory (RAM) 512 MB
Flash Memory 512 MB Compact Flash
3G Wireless/Modem7* With 3G USB Adapter Modem
Power Supply Single 180W ATX Power Supply
Fans 2 Fans
Power Input 10-240V, 50-60Hz
Max Power Consumption 52 W
Total Heat Dissipation 177 BTU
Certifications EAL4+, VPNC, ICSA Firewall 4.1
Form Factor 1U Rack-mountable
Dimensions

17 x 13.25 x 1.75 in / 43.18 x 33.65 x 4.44 cm

Weight: 11.75 lbs
5.3 kg
WEEE Weight: 12.25 lbs
5.6 kg
Major Regulatory FCC Class A, CES Class A, CE, C-Tick, VCCI, Compliance MIC, UL, cUL, TUV/GS, CB, NOM, RoHS, WEEE
Environment 40-105 F, 5-40 C
MTBF 8.4 years
Humidity Operating: 10-95% RH, non-condensing, Non-Operating: 90% RH, non-condensing

Notes:
1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
3 Actual maximum connection counts are lower when UTM services are enabled.
4 Only with the NSA 240 Stateful HA and Expansion Upgrade.
5 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
6 Supported on the NSA 3500 and higher.
7 Not available on NSA 2400.

*USB 3G card and modem are not included. See http://www.sonicwall.com/us/products/cardsupport.html for supported USB devices.

SonicWALL NSA 2400MX Part Numbers

SonicWALL NSA 2400MX Appliance
Modules
2-Port SFP Module #01-SSC-8826
List Price: $380.00
Our Price: $323.95
1-Port T1/E1 Module M1 #01-SSC-8829
List Price: $695.00
Our Price: $591.95
1-Port ADSL Annex A Module M1 #01-SSC-8827
List Price: $345.00
Our Price: $293.95
1-Port ADSL Annex B Module M1 #01-SSC-8828
List Price: $345.00
Our Price: $293.95
2-Port GbE with LAN Bypass Module M1 #01-SSC-8830
List Price: $895.00
Our Price: $761.95
4 Port GbE M1 Module #01-SSC-8825
List Price: $495.00
Our Price: $421.95
Stateful High Availability Upgrade
Upgrades The NSA 2400/2600 to Support State Sync in Active / Passive config for seamless failover between two NSA 2400s or two NSA 2600s
Stateful HA Upgrade For NSA 2400 and NSA 2600 Series #01-SSC-7095
List Price: $545.00
Our Price: $408.95
Expanded License
Expanded License for NSA 2400 and NSA 2600
*Includes BGP and Stateful HA features
#01-SSC-7090
Our Price: $595.00
Our Price: $446.95
Comprehensive Anti-Spam Service for NSA 2400
The SonicWALL Comprehensive Anti-Spam Service delivers advanced spam protection at the gateway. Simply activate the service and stop spam before it enters your network. The Comprehensive Anti-Spam Service is recommended for up to 250 users.
Comprehensive Anti-Spam Service for NSA 2400 Series (1 Year) #01-SSC-8997
List Price: $975.00
Our Price: $731.95
Comprehensive Anti-Spam Service for NSA 2400 Series (2 Years) #01-SSC-8998
List Price: $1,655.00
Our Price: $1,241.95
Comprehensive Anti-Spam Service for NSA 2400 Series (3 Years) #01-SSC-8999
List Price: $2,335.00
Our Price: $1,751.95
Security Services for NSA 2400MX
GAV/IPS/Application Firewall for NSA 2400 (1 Year) #01-SSC-6135
List Price: $680.00
Our Price: $510.95
GAV/IPS/Application Firewall for NSA 2400 (2 Years) #01-SSC-6142
List Price: $1,150.00
Our Price: $862.95
GAV/IPS/Application Firewall for NSA 2400 (3 Years) #01-SSC-6158
List Price: $1,635.00
Our Price: $1,226.95
Content Filtering Services for NSA 2400MX
Content Filtering Service Premium Business Edition For NSA 2400 Series (1 Year) #01-SSC-7334
List Price: $940.00
Our Price: $705.95
Content Filtering Service Premium Business Edition For NSA 2400 Series (2 Years) #01-SSC-7341
List Price: $1,570.00
Our Price: $1,177.95
Content Filtering Service Premium Business Edition For NSA 2400 Series (3 Years) #01-SSC-7348
List Price: $2,265.00
Our Price: $1,698.95
Deep Packet Inspection SSL Upgrade License
Enable SSL Decryption on the NSA 220/240/250M/2400/2600 for additional protection (one time license)
DPI-SSL For NSA 220/240/250M/2400/2600 Series #01-SSC-8933
List Price: $750.00
Our Price: $562.95
SonicWALL Analyzer Reporting Software
SonicWALL® Analyzer is an easy to use web-based traffic analytics and reporting tool that provides real-time and historical insight into the health, performance and security of the network. Learn more!
SonicWALL Analyzer Reporting Software for NSA 220, 240, 250M, NSA 2400, PRO 1260, PRO 2040 Class Products #01-SSC-3379
List Price: $250.00
Our Price: $187.95
UTM SSL VPN Licenses
UTM SSL-VPN 1 User License #01-SSC-8629
List Price: $50.00
Our Price: $40.00
UTM SSL-VPN 5 User Licenses #01-SSC-8630
List Price: $215.00
Our Price: $172.00
UTM SSL-VPN 10 User Licenses #01-SSC-8631
List Price: $345.00
Our Price: $276.00
Global VPN Client for Windows
Global VPN Client for Windows - 1 License #01-SSC-5310
List Price: $50.00
Our Price: $40.00
Global VPN Client for Windows - 5 Licenses #01-SSC-5316
List Price: $215.00
Our Price: $172.00
Global VPN Client for Windows - 10 Licenses #01-SSC-5311
List Price: $345.00
Our Price: $276.00
Global VPN Client for Windows - 50 Licenses #01-SSC-5313
List Price: $595.00
Our Price: $476.00
Global VPN Client for Windows - 100 Licenses #01-SSC-5314
List Price: $795.00
Our Price: $636.00
Enforced Client Anti-Virus & Anti-Spyware
SonicWALL Enforced Client Anti-Virus and Anti-Spyware solution provides comprehensive virus, spyware and desktop firewall protection for desktops and laptops using a single integrated client. Learn More
Enforced Client Anti-Virus & Anti-Spyware 5 License Subscription (1 Year) #01-SSC-2743
List Price: $165.00
Our Price: $123.95
Enforced Client Anti-Virus & Anti-Spyware 10 License Subscription (1 Year) #01-SSC-2740
List Price: $325.00
Our Price: $243.95
Enforced Client Anti-Virus & Anti-Spyware 25 License Subscription (1 Year) #01-SSC-2745
List Price: $813.00
Our Price: $609.95
Enforced Client Anti-Virus & Anti-Spyware 50 License Subscription (1 Year) #01-SSC-2741
List Price: $1,625.00
Our Price: $1,218.95
Virtual Assist for UTM Appliances
SonicWALL Virtual Assist opens up the possibility for a technician to provide on-demand technical assistance for laptop or desktop issues to a customer via a Web browser. Learn More
SonicWALL Virtual Assist for UTM Appliances, up to 1 Concurrent Technician #01-SSC-8831
List Price: $495.00
Our Price: $371.95
SonicWALL Virtual Assist for UTM Appliances, up to 5 Concurrent Technicians #01-SSC-8832
List Price: $1,995.00
Our Price: $1,496.95