SonicWall Network Security Virtual (NSV) 300 Virtual Appliance
Deep security for public, private or hybrid cloud environments

Features:

SonicOS Platform

The SonicOS architecture is at the core of every SonicWall physical and virtual firewall including the NSv and NSA Series, SuperMassive Series and TZ Series. Refer to the SonicWall SonicOS Platform datasheet for the complete list of features and capabilities.

Automated breach prevention¹

NSv delivers complete advanced threat protection, including high-performance intrusion and malware prevention, and cloud-based sandboxing with SonicWall's RTDMI technology.

Around-the-clock security¹

NSv ensures lateral movement protection, plus inbound and outbound traffic protection. New threat updates are automatically pushed to firewalls with active security services, and take effect immediately without reboots or interruptions.

Zero-day protection¹

NSv protects against zero-day attacks with constant updates against the latest exploit methods and techniques that cover thousands of individual exploits.

Threat API

NSv receives and leverages any and all proprietary, original equipment manufacturer and third-party intelligence feeds to combat advanced threats, such as zero-day, malicious insider, compromised credentials, ransomware and advanced persistent threats.

Zone protection

NSv strengthens internal security by enabling segmentation of the network into multiple security zones, with intrusion prevention service keeping threats from propagating across the zone boundaries. Creating and applying access rules and NAT policies to traffic passing through the various interfaces, it can allow or deny internal or external network access based on various criteria.

Application intelligence and control¹

NSv provides granular control over network traffic at the user, email address, schedule, and IP-subnet levels, with application-specific policies. It controls custom applications by creating signatures based on specific parameters or patterns unique to an application. Internal or external network access is allowed or denied based on various criteria.

Data leakage prevention

NSv provides the ability to scan streams of data for keywords. This restricts the transfer of certain file names, file types, email attachments, attachment types, email with certain subjects, and email or attachments with certain keywords or byte patterns.

Application layer bandwidth management

NSv can select among various bandwidth management settings to reduce network bandwidth usage by an application using packet monitor. This provides further control over the network.

Secure communication

NSv ensures the data exchange between groups of virtual machines is done securely, including isolation, confidentiality, integrity, and information flow control within these networks via the use of segmentation.

Access control

NSv validates that only VMs that satisfy a given set of conditions are able to access data belonging to another through the use of VLANs.

User authentication

NSv creates policies to control or restrict VM and workload access by unauthorised users.

Data confidentiality

NSv blocks information theft and illegitimate access to protected data and services.

Virtual network resilience and availability

NSv prevents disruption or degradation of application services and communications.

System safety and integrity

NSv stops unauthorised takeover of VM systems and services.

Traffic validation, inspection and monitoring mechanisms

NSv detects irregularities and malicious behaviors to stop attacks targeting VM workloads.

Deployment options

NSv can be deployed on a wide variety of virtualized and cloud platforms for various private/public cloud security use cases.

¹ Requires SonicWall Advanced Gateway Security Services (AGSS) subscription.

² SonicWall Global Management System and Capture Security Center require separate licensing or subscription.

Benefits:

Public and private cloud security

• Next-gen firewall with automated real-time breach detection and prevention capabilities
• Patent-pending Real-Time Deep Memory Inspection (RTDMI) technology
• Patented Reassembly-Free Deep Packet Inspection (RFDPI) technology
• Complete end-to-end visibility and control
• Application intelligence and control
• Segmentation security and security zoning
• Support across private cloud (ESXi, Hyper-V) and public cloud (AWS, Azure) platforms
• BYOL and PAYG licensing

Virtual machine protection

• Zero-day threat protection with Capture ATP
• Data confidentiality
• Secure communication with data leakage prevention
• Traffic validation, inspection and monitoring
• System safety and integrity
• Virtual network resilience and availability

Compare Models (NSv 10 - NSv 100):

¹ Currently supporting SonicOS 6.5.4 on ESXi. Support of SonicOS 6.5.4 on Hyper-V, Azure and AWS will be available August 2019.

² PAYG is currently available only on AWS.

³ Memory with Jumbo frame disabled.

⁴ Memory with Jumbo frame enabled. Additional memory is required for Jumbo frames. Jumbo frames are not supported on Azure and AWS.

⁵ High availability available on VMware ESXi platform and Microsoft Hyper-V, plus HA is not supported on Azure and AWS.

⁶ Published performance numbers are up to the specification and the actual performance may vary depending on underlying hardware, network conditions; firewall configuration and activated services. Performance and capacities may also vary based on underlying virtualization infrastructure, and we recommend additional testing within your environment to ensure your performance and capacity requirements are met. Performance metrics were observed using Intel Xeon W Processor (W-2195 2.3GHz, 4.3GHz Turbo, 24.75M Cache) running SonicOSv 6.5.0.2 with VMware vSphere 6.5.

⁷ VLAN interfaces are not supported on Azure and AWS.

Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools.

Testing done with multiple flows through multiple port pairs. VPN throughput measured using UDP traffic at 1418 byte packet size adhering to RFC 2544. All specifications and features are subject to change.

Compare Models (NSv 200 - NSv 1600):

¹ Currently supporting SonicOS 6.5.4 on ESXi. Support of SonicOS 6.5.4 on Hyper-V, Azure and AWS will be available August 2019.

² PAYG is currently available only on AWS.

³ Memory with Jumbo frame disabled.

⁴ Memory with Jumbo frame enabled. Additional memory is required for Jumbo frames. Jumbo frames are not supported on Azure and AWS.

⁵ High availability available on VMware ESXi platform and Microsoft Hyper-V, plus HA is not supported on Azure and AWS.

⁶ Published performance numbers are up to the specification and the actual performance may vary depending on underlying hardware, network conditions; firewall configuration and activated services. Performance and capacities may also vary based on underlying virtualization infrastructure, and we recommend additional testing within your environment to ensure your performance and capacity requirements are met. Performance metrics were observed using Intel Xeon W Processor (W-2195 2.3GHz, 4.3GHz Turbo, 24.75M Cache) running SonicOSv 6.5.0.2 with VMware vSphere 6.5.

⁷ VLAN interfaces are not supported on Azure and AWS.

Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools.

Testing done with multiple flows through multiple port pairs. VPN throughput measured using UDP traffic at 1418 byte packet size adhering to RFC 2544. All specifications and features are subject to change.

Documentation:

Download the SonicWall Network Security Virtual (NSV) Firewall Series Datasheet (.PDF)