SonicWall NSa 3700 Network Security/Firewall Appliance

Featuring a high port density including multiple 40 GbE and 10 GbE ports, the solution supports network and hardware redundancy with high availability, and dual power supplies.

SonicWall Generation 7 (Gen 7) Network Security Appliance (NSa) next-generation firewalls (NGFWs) offers medium- to large-sized enterprises industry-leading performance at the lowest total cost of ownership in their class.

With comprehensive security features such as intrusion prevention, VPN, application control, malware analysis, URL filtering, DNS Security, Geo-IP and Bot-net services, it protects the perimeter from advanced threats without becoming a bottleneck.

The Gen 7 NSa Series has been built from the ground up with the latest hardware components, all designed to deliver multi-gigabit threat prevention throughput - even for encrypted traffic. Featuring a high port density including multiple 40 GbE and 10 GbE ports, the solution supports network and hardware redundancy with high availability, and dual power supplies.

Generation 7 - SonicOS 7.0 and Security Services

The Gen 7 NSa Series runs on SonicOS 7.0, a new operating system built from the ground up to deliver a modern user interface, intuitive workflows and user-first design principles. SonicOS 7.0 provides multiple features designed to facilitate enterprise-level workflows. It offers easy policy configuration, zero-touch deployment and flexible management - all of which allow enterprises to improve both their security and operational efficiency.

The Gen 7 NSa Series supports advanced networking features, such as SD-WAN, dynamic routing, layer 4-7 high-availability and high-speed VPN functionality. In addition to integrating firewall and switch capabilities, the appliance provides a single-pane-of-glass interface to manage both switches and access points.

Built to mitigate the advanced cyberattacks of today and tomorrow, the Gen 7 NSa Series offers access to SonicWall's advanced firewall security services, allowing you to protect your entire IT infrastructure. Solutions and services such as Cloud Application Security, Capture Advanced Threat Protection (ATP) cloud-based sandboxing, Real-Time Deep Memory Inspection (RTDMI™) and Reassembly-Free Deep Packet Inspection (RFDPI) - for all traffic including TLS 1.3 - offer comprehensive gateway protection from most stealthy and dangerous malware, including zero-day and encrypted threats.

Deployments

The Gen 7 NSa Series has two main deployment options for medium and distributed enterprises:

Internet Edge Deployment

In this standard deployment option, the Gen 7 NSa Series

NGFW protects private networks from malicious traffic coming from the internet, allowing you to:

• Deploy a proven NGFW solution with highest performance and port density (including 40 GbE and 10 GbE connectivity) in its class
• Gain visibility and inspect encrypted traffic, including TLS 1.3, to block evasive threats coming from the Internet - all without compromising performance
• Protect your enterprise with integrated security, including malware analysis, cloud app security, URL filtering and reputation services
• Save space and money with an integrated NGFW solution that includes advanced security and networking capabilities
• Reduce complexity and maximize efficiency using a central management system delivered through an intuitive single-paneof-glass user interface

• Packet Inspection
• Application Control
• URL Filtering
• Antivirus
• Content Filtering
• Threat Protection
• Intrusion Prevention
• Malware Protection
• Zero Day Event
• Anti-spam
• TLS Decryption
• SSL Decryption
• TLS Inspection
• SSL Inspection
• Real-Time Deep Memory Inspection (RTDMI)
• Reassembly-free Deep Packet Inspection
• SSH Inspection
• Botnet Detection
• Spyware Protection
• Distributed Denial of Service (DDoS)
• Secure IPsec VPN Connectivity

• DES
• 3DES
• AES (128-bit)
• AES (192-bit)
• AES (256-bit)
• MD5
• SHA-1

• 1000Base-T
• 10GBase-X

• 50 Hz
• 60 Hz

• FIPS 140-2
• ICSA Enterprise Firewall
• ICSA Antivirus
• IPv6/USGv6
• FCC Class A
• CE (EMC, LVD)
• C-Tick
• VCCI Class A
• MSIP/KCC Class A
• UL
• cUL
• TUV/GS
• CB
• Mexico CoC by UL
• ANATEL
• BSMI

• Registration, Evaluation, Authorization and Restriction of Chemicals (REACH)
• Restriction of Hazardous Substances (RoHS)
• Waste Electrical and Electronic Equipment Directive (WEEE)