SonicWALL® NSA 250M and 250M Wireless-N high-performance, modular Next-Generation Firewalls offer branch offices and distributed enterprises in-depth frontline security, application and user control, network productivity and optional 802.11 dual-band wireless. The NSA 250M acts as the first line of network defense against viruses, Trojans, key-loggers and other application layer attacks, without compromising network performance. The NSA 250M Series can be extended with a variety of modules to provide deployment flexibility and reduce acquisition and maintenance costs.
Features
The NSA 250M Series offers an extensive array of advanced networking and configuration flexibility features in an accessible, affordable platform that is easy to deploy and manage in a wide variety of environments.
Distributed network security.
The NSA 250M Series provides anti-malware, intrusion prevention and web content filtering at branch offices without compromising performance at those locations.
Application control and visualization.
IT administrators can granularly view and control bandwidth-consuming and potentially dangerous application traffic over the network, even between widely distributed locations.
WAN acceleration.
Network productivity can increase because IT administrators can identify and throttle or block unauthorized, unproductive and non-work-related appliances and websites such as Facebook® or YouTube® and optimize WAN traffic when integrated with SonicWALL WAN Acceleration Appliance (WXA) solutions.
Gateway Anti-Malware and Intrusion Prevention.
Gateway anti-virus, anti-spyware and intrusion prevention provide high-performance protection against millions of unique pieces of malware with near zero latency and no file size limitations. This provides a first layer of defense and stops malware before it can reach systems on your network.
Virtual Private Networking.
High-performance Virtual Private Networks (VPNs) easily scale to thousands of endpoints and branch offices. And SonicWALL Clean VPN™ technology protects the integrity of both your IPSec and SSL VPN traffic, securing your remote access tunnels and decontaminating the traffic running across it.
Integrated modules support.
The NSA 250M Series can be extended with a variety of modules, such as T1/E1, DSL and SFP Modules, to provide deployment flexibility and additional failover capabilities. By consolidating equipment, the modular solution reduces acquisition and maintenance costs.
SonicWALL Mobile Connect™
SonicWALL® Mobile Connect™, a single unified client app for iOS, provides Apple® iPad®, iPhone®, and iPod touch® users full network-level access to corporate and academic resources over encrypted SSL VPN connections.
High performance.
SonicWALL’s patented Reassembly-Free Deep Packet Inspection® engine1 combined with the NSA 250M dual-core security platform is capable of inspecting hundreds of thousands of connections simultaneously across all ports. With nearly zero latency and without file size limitations, the system provides 130 Mbps of Deep Packet Inspection across 5 GbE copper interfaces.
Specifications
Firewall Overview
Feature | Value |
Deep Packet Inspection Firewall | Optional |
Stateful Packet Inspection Firewall | Standard |
Unlimited File Size Protection | Standard |
Protocols Scanned | 50+ |
ICSA Firewall Certified | Standard |
Security Services Included
Feature | Value |
Application Intelligence and Control | Optional |
Intrusion Prevention | Optional |
Gateway Anti-Virus and Anti-Spyware | Optional |
Enforced Client Anti-Virus and Anti-Spyware | Optional |
Content & URL Filtering (CFS) | Optional |
Analyzer Reporting | Optional |
Comprehensive Anti-Spam Service | Optional |
SSL Inspection (DPI-SSL) | Optional |
Support Services
Feature | Value |
Dynamic Support 8×5 | 90 Days |
Dynamic Support 24×7 | Optional |
Firewall General
Feature | Value |
Interfaces | (5) 10/100/1000 Copper Gigabit, 2 USB, Module Interface, Console |
Management | CLI, SSH, GUI, GMS |
Certifications | VPNC, ICSA Firewall 4.1 |
Nodes Supported | Unrestricted |
RAM | 512 MB |
Flash Memory | 32 MB |
Site-to-Site VPN Tunnels | 50 |
Global VPN Clients (Maximum) | 2 (25) |
SSL VPN NetExtender Clients (Maximum) | 2 (15) |
Unique Malware Threats Blocked | 1,000,000+ |
Virtual Assist Technicians (Maximum) | 30-Day Trial (5) |
VLAN Interfaces | 35 |
SonicPoints | 16 |
Performance
Feature | Value |
Stateful Throughput | 750 Mbps |
DPI Performance | 130 Mbps |
Gateway Anti-Virus Throughput | 140 Mbps |
Intrusion Prevention Throughput | 250 Mbps |
IMIX Performance | 210 Mbps |
3DES/AES VPN Throughput | 200 Mbps |
Maximum Connections | 110,000 |
Maximum UTM Connections | 64,000 |
New Connections per Second | 3000 |
Features
Feature | Value |
Logging | IPFIX, Netflow, Analyzer, Local Log, Syslog |
Network Traffic Visualization | Standard |
Netflow/IPFIX Reporting | Standard |
SNMP | Standard |
Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database |
Single Sign-On | Standard |
Voice over IP (VoIP) Security | Standard |
PortShield Security | Standard |
Dynamic Routing | OSPF, RIP |
Policy-based Routing | Standard |
Route-based VPN | Standard |
Dynamic Bandwidth Management | Standard |
802.11n Wireless Support via SonicPoints | Standard |
Integrated Wireless Switch & Controller | Standard |
Layer 2 Wireless Bridging | Standard |
Stateful High Availability | Standard |
Multi-WAN | Standard |
Load Balancing | Standard |
Object-based Management | Standard |
Policy-based NAT | Standard |
Inbound Load Balancing | Standard |
IKEv2 VPN | Standard |
Terminal Services Authentication/Citrix Support | Standard |
Onboard Quality of Service (QoS) | Standard |
SSL Control | Standard |
IPv6 | Standard |
Failover
Feature | Value |
Hardware Failover | Optional Active/ Passive with State Sync |
Multi-WAN Failover | Standard |
Automated Failover/Failback | Standard |
Analog Modem Failover | Standard |
3G Cellular Modem Failover | Standard |