SonicWall NSa 4800 Network Security Appliance
Enterprise-class NGFW with 20 Gbps throughput, 13 Gbps threat prevention, and superior TLS inspection for campus and distributed networks.

Overview:

Gen 8 NSa firewalls drives strong security with a comprehensive solution encompassing of threat protection, centralized management, reporting and analytics, security and managed service options, Secure Service Edge (SSE) integration, and cyber warranty.

SonicWall latest mid-range next-gen firewalls, Network Security Appliance (NSa) Series offer medium and large enterprises industry-leading threat prevention performance at the lowest total cost of ownership in their class. The firewalls are the cornerstones of the threat protection solution that includes simplified centralized firewall management, Zero Trust enablement, flexible licensing with an option of managed firewall services, and an embedded cyber warranty for risk mitigation.

The Gen 8 firewalls deliver comprehensive security features such as intrusion prevention, VPN, application control, malware analysis, URL filtering, DNS Security, Geo-IP and Bot-net services, protecting the perimeter from advanced threats without becoming a bottleneck.

Highlights

---

Hardware

Gen 8 NSa Series, built with the latest hardware components, deliver multi-gigabit threat prevention throughput — even for encrypted traffic. Featuring a high port density, the firewall solutions support network and hardware redundancy with high availability and dual power adapters including one for redundancy

Architecture

The Gen 8 NSa Series runs on SonicOS 8, a new operating system that delivers a modern user interface, intuitive workflows and user-first design principles. SonicOS 8 provides multiple features designed to facilitate enterpriselevel workflows. It offers easy policy configuration, zero-touch deployment and flexible management — all of which allow enterprises to improve both their security and operational efficiency.

The NSa Series supports advanced networking features, such as SD-WAN, dynamic routing, layer 4-7 high availability and high-speed VPN functionality. In addition to integrating firewall and switch capabilities, the appliances provide a single-paneof-glass interface to manage both switches and access points.

Threat Protection and Security Services

Built to mitigate the advanced cyberattacks of today and tomorrow, the Gen 8 NSa Series offers access to SonicWall’s advanced firewall security services, allowing you to protect your entire IT infrastructure. Solutions and services such as Cloud Application Security, Capture Advanced Threat Protection (ATP) cloud-based sandboxing, patented Real-Time Deep Memory Inspection (RTDMI™) and Reassembly-Free Deep Packet Inspection (RFDPI) — for all traffic including TLS 1.3 — offer comprehensive gateway protection from most stealthy and dangerous malware, including zero-day and encrypted threats.

Simplified licensing includes Hardware Only, Advanced (APSS) and Managed Protection Security Suite (MPSS) to meet your unique needs. MPSS augments resources with managed services for firewalls.

A Cloud Secure Edge Connector integration provides secure access to their private applications behind the firewalls. Users and devices can adhere to a Zero-Trust framework for application access.

Cyber Warranty

An embedded cyber warranty is offered as part of your security suite to mitigate costs of security breach, meet compliance requirements and promote peace of mind.

Features:

• High Performance and Flexible Network Connectivity - Deploy next generation firewalls that are designed for mid-size and distributed enterprises to deliver much needed multi-gigabit threat prevention performance while providing high port density including 10 GbE ports for flexible network connectivity.
• Blocks More Attacks with RTDMI™ - Real-Time Deep Memory Inspection (RTDMI™) proactively detects and blocks unknown malware via deep memory inspection in real time, a revolutionary approach to defend against zero-day and side-channel attacks and other unrecognized threats.
• Low Total Cost of Ownership - Make a SonicWall NSa firewall the start of enterprise savings. From reduced costs through zero-touch deployment to enabling SD-WAN and delivering threat block rates on par or better than competitors at a fraction of the cost, SonicWall NSa firewalls are security you can’t afford to be without.
• Simplified Centralized Management - Increase efficiencies in deploying and managing distributed firewalls via configuration administration enhancements and bulk deployment capabilities included in all licensing tiers.
• Advanced Reporting & Analytics - Increase insights via customizable reports, schedule report capability, and tenant-based analytics.
• Managed Protection Security Suite - Extend your team with SonicSentry NOC Team 24x7 for managed firewall services that include monitoring, firmware updates, vulnerability reporting, and an embedded warranty of up to $200K warranty.
• Secure SD-WAN Technology - Leave MPLS behind for a more agile, secure, and cost-effective network optimized for today’s broadband-driven, cloud-infused landscape. Eliminate costs on SD-WAN appliances and licenses by leveraging the built-in secure SD-WAN technology in NSa firewalls.
• Integrates with Wireless Access Points - Implement high-speed wireless security by combining a NSa series next-generation firewall with a SonicWall SonicWave wireless access point. NSa series firewalls and SonicWave access points both feature 2.5/5 GbE ports that enable multi-gigabit wireless throughput offered in Wi-Fi 6 wireless technology.
• Built-in ZTNA Connector - Increase secure access to private applications behind the firewalls using a built-in connector to Cloud Secure Edge, enabling compliance with a Zero-Trust framework.

Deployments:

The Gen 8 NSa Series has two main deployment options for medium and distributed enterprises:

Specifications:

Gen 8 NSa Series System Specifications

¹ SAML Single Sign-On is available with the upcoming SonicOS 8.1, releasing soon.

² Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

³ Threat Prevention/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Keysight HTTP performance test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

⁴ VPN throughput measured with UDP traffic using 1418 byte packet size AESGMAC16-256 Encryption adhering to RFC 2544. All specifications, features and availability are subject to change.

⁵ Included with3-yearbundle

Documentation:

Download the SonicWall Gen 8 NSa Series Datasheet (.PDF)

Download the SonicWall Gen 8: Architecture and Security Datasheet (.PDF)