SonicWall NSA 3700 Network Security Appliance
Comprehensive Mid Range Next-Generation Firewall

Features:

• Blocks More Attacks with RTDMI™ - Real-Time Deep Memory Inspection (RTDMI™) proactively detects and blocks unknown malware via deep memory inspection in real time, a revolutionary approach to defend against zero-day and side-channel attacks and other unrecognized threats.
• Secure Remote Workers - SonicWall NetExtender provides an intuitive SSL-VPN connection client that's easy to deploy and configure. Easily provide your remote workers with secure access to your corporate network from Linux, Mac and Windows devices.
• Secure SD-WAN Technology - Leave MPLS behind for a more agile, more secure and more cost-effective network optimized for today's broadband-driven, cloud-infused landscape. Secure SD-WAN technology is built in to NSA firewalls, so there's no need to purchase additional SD-WAN appliances and licenses.
• Built-in Wireless Controller - Implement high-speed wireless security by combining a NSa series next-generation firewall with a SonicWall SonicWave wireless access point. NSa series firewalls and SonicWave access points both feature 2.5 GbE ports that enable multi-gigabit wireless throughput offered in Wave 2 wireless technology.
• Low Total Cost of Ownership - Make a SonicWall NSA firewall the start of enterprise savings. From reduced costs through zero-touch deployment to enabling SD-WAN and delivering NetSecOPEN-verified threat block rates on par or better than competitors at a fraction of the cost, SonicWall NSA firewalls are security you can't afford to be without.
• Cloud-based & On-Premises Centralized Management - Gain greater visibility into your enterprise even as it becomes more complex on- and off-prem. Tightly integrated into the SonicWall ecosystem, bring your firewalls into a single-pane-of-glass management, licensing, reporting and analytics
• High Performance and Port Density - Deploy next generation firewalls that are designed for mid-size and distributed enterprises to deliver much needed multi-gigabit threat prevention performance while providing high port density including 10 GbE ports for flexible network connectivity

Deployments:

Internet Edge Deployment

In this standard deployment option, the Gen 7 NSA Series NGFW protects private networks from malicious traffic coming from the internet, allowing you to:

• Deploy a proven NGFW solution with highest performance and port density (including 10 GbE connectivity) in its class
• Gain visibility and inspect encrypted traffic, including TLS 1.3, to block evasive threats coming from the Internet - all without compromising performance
• Protect your enterprise with integrated security, including malware analysis, cloud app security, URL filtering and reputation services
• Save space and money with an integrated NGFW solution that includes advanced security and networking capabilities
• Reduce complexity and maximize efficiency using a central management system delivered through an intuitive singlepane-of-glass user interface

Medium and Distributed Enterprises

The SonicWall Gen 7 NSA Series supports SD-WAN and can be centrally managed, making it an ideal fit for medium and distributed enterprises. This deployment allows organizations to:

• Future-proof against an ever-changing threat landscape by investing in a NGFW with multi-gigabit threat analysis performance
• Provide direct and secure internet access to distributed branch offices instead of back-hauling through corporate headquarters
• Allow distributed branch offices to securely access internal resources in corporate headquarters or in a public cloud, significantly improving application latency
• Automatically block threats that use encrypted protocols such as TLS 1.3, securing networks from the most advanced attacks
• Reduce complexity and maximize efficiency using a central management system delivered through an intuitive single pane of glass user interface
• Leverage high port density that includes 10 GbE connectivity to support a distributed enterprise and wide area networks

Specifications:

*Future use.

¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

² Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

³ VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

⁴ BGP is available only on SonicWall TZ400, TZ500 and TZ470.

⁵ All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products

Documentation:

Download the SonicWall NSA 3700 Datasheet (.PDF)