SonicWall NSa 5700
SonicWall Gen 7 NSa Series

Internet Edge Deployment

In this standard deployment option, the Gen 7 NSa Series NGFW protects private networks from malicious traffic coming from the internet, allowing you to:

• Deploy a proven NGFW solution with highest performance and port density (including 40 GbE and 10 GbE connectivity) in its class
• Gain visibility and inspect encrypted traffic, including TLS 1.3, to block evasive threats coming from the Internet — all without compromising performance
• Protect your enterprise with integrated security, including malware analysis, cloud app security, URL filtering and reputation services
• Save space and money with an integrated NGFW solution that includes advanced security and networking capabilities
• Reduce complexity and maximize efficiency using a central management system delivered through an intuitive single-paneof-glass user interface

The SonicWall Gen 7 NSa Series supports SD-WAN and can be centrally managed, making it an ideal fit for medium and distributed enterprises. This deployment allows organizations to:

• Future-proof against an ever-changing threat landscape by investing in a NGFW with multi-gigabit threat analysis performance
• Provide direct and secure internet access to distributed branch offices instead of back-hauling through corporate headquarters

• Allow distributed branch offices to securely access internal resources in corporate headquarters or in a public cloud, significantly improving application latency
• Automatically block threats that use encrypted protocols such as TLS 1.3, securing networks from the most advanced attacks.
• Reduce complexity and maximize efficiency using a central management system delivered through an intuitive single pane of glass user interface
• Leverage high port density that includes 40 GbE and 10 GbE connectivity to support a distributed enterprise and wide area networks

Firewall

• Stateful packet inspection
• Reassembly-Free Deep
• Packet Inspection
• DDoS attack protection (UDP/
• ICMP/SYN flood)
• IPv4/IPv6 support
• Biometric authentication
• for remote access
• DNS proxy
• Full API support
• SonicWall Switch integration
• SD-WAN scalability
• SD-WAN Usability Wizard
• Connections scalability
• (SPI, DPI, DPI SSL)
• Enhanced dashboard
• Enhanced device view
• Top traffic and user summary
• Insights to threats
• Notification center

TLS/SSL/SSH decryption and inspection

• TLS 1.3 with enhanced security
• Deep packet inspection
• for TLS/SSL/SSH
• Inclusion/exclusion of objects, groups
• or hostnames
• SSL control
• Enhancements for DPI-SSL with CFS
• Granular DPI SSL controls per zone or rule
• Capture advanced threat protection
• Real-Time Deep Memory Inspection
• Cloud-based multi-engine analysis2
• Virtualized sandboxing
• Hypervisor level analysis
• Full system emulation
• Broad file type examination
• Automated and manual submission
• Real-time threat intelligence updates
• Block until verdict
• Capture Client

Intrusion prevention

• Intrusion prevention
• Signature-based scanning
• Automatic signature updates
• Bi-directional inspection
• Granular IPS rule capability
• GeoIP enforcement
• Botnet filtering with dynamic list
• Regular expression matching

Anti-malware

• Stream-based malware scanning
• Gateway anti-virus
• Gateway anti-spyware
• Bi-directional inspection
• No file size limitation
• Cloud malware

Application identification

• Application control
• Application bandwidth management
• Custom application signature creation
• Data leakage prevention
• Application reporting over NetFlow/IPFIX
• Comprehensive application signature database

Traffic visualization and analytics

• User activity
• Application/bandwidth/threat usage
• Cloud-based analytics

HTTP/HTTPS Web content filtering

• URL filtering
• Proxy avoidance
• Keyword blocking
• Policy-based filtering (exclusion/inclusion)
• HTTP header insertion
• Bandwidth manage CFS rating categories
• Unified policy model with app control
• Content Filtering Client

VPN

• Secure SD-WAN
• Auto-provision VPN
• IPSec VPN for site-to-site connectivity
• SSL VPN and IPSec client remote access
• Redundant VPN gateway
• Mobile Connect for iOS, Mac OS
• X, Windows, Chrome, Android and Kindle Fire
• Route-based VPN (OSPF, RIP, BGP)

Networking

• PortShield
• Jumbo frames
• Path MTU discovery
• Enhanced logging
• VLAN trunking
• Port mirroring (SonicWall Switch)
• Layer-2 QoS
• Port security
• Dynamic routing (RIP/OSPF/BGP)
• SonicWall wireless controller
• Policy-based routing (ToS/ metric and ECMP)
• NAT
• DHCP server
• Bandwidth management
• A/P high availability with state sync
• Inbound/outbound load balancing
• High availability - Active/Standby with state sync
• L2 bridge, wire/virtual wire mode, tap mode, NAT mode
• Asymmetric routing
• Common Access Card (CAC) support

VoIP

• Granular QoS control
• Bandwidth management
• DPI for VoIP traffic
• H.323 gatekeeper and SIP proxy support

Management, monitoring and support

• Capture Security Appliance
• Capture Threat Assessment (CTA) v2.0
• New design or template
• Industry and global average comparison
• New UI/UX, Intuitive feature layout
• Dashboard
• Device information, application, threats
• Topology view
• Simplified policy creation and management
• Policy/Objects usage statistics
• Used vs Un-used
• Active vs Inactive
• Global search for static data
• Storage support
• Internal and external storage management
• WWAN USB card support (5G/LTE/4G/3G)
• Network Security Manager (NSM) support
• Web GUI
• Command line interface (CLI)
• Zero-Touch registration & provisioning
• CSC Simple Reporting
• SonicExpress mobile app support
• SNMPv2/v3
• Centralized management and reporting with SonicWall Global Management System (GMS)
• API for reporting and analytics
• Logging
• Netflow/IPFix exporting
• Cloud-based configuration backup
• BlueCoat security analytics platform
• Application and bandwidth visualization
• IPv4 and IPv6 management
• CD management screen
• Dell N-Series and X-Series switch management including cascaded switches

Debugging and diagnostics

• Enhanced packet monitoring
SSH terminal on UI

Wireless

• SonicWave AP cloud management
• WIDS/WIPS
• Rogue AP prevention
• Fast roaming (802.11k/r/v)
• 802.11s mesh networking
• Auto-channel selection
• RF spectrum analysis
• Floor plan view
• Topology view
• Band steering
• Beamforming
• AirTime fairness
• Bluetooth Low Energy
• MiFi extender
• RF enhancements and improvements
• Guest cyclic quota