SonicWall NSa 3700 Network Security Appliance
Comprehensive Mid Range Next-Generation Firewall

Overview:

Defeating advanced threats requires an advanced firewall solution built for the needs of your business. The SonicWall Network Security appliance (NSa) Mid-Range Firewall is next-generation security designed specifically for businesses of 250 users and up. Work with the confidence of knowing you’re protected against the day-to-day incursions as well as against advanced threats like ransomware, attacks against non-standard ports, and breaches in firewalls, all at the speed of business.

With cloud-based and on-box capabilities like TLS/SSL decryption and inspection, application intelligence and control, secure SD-WAN, real-time visualization, and WLAN management, SonicWall provides flexible, fast and cost-effective security to keep the threats out and your business thriving.

Generation 7 – SonicOS 7.0 and Security Services

The Gen 7 NSa Series runs on SonicOS 7.0, a new operating system built from the ground up to deliver a modern user interface, intuitive workflows and user-first design principles. SonicOS 7.0 provides multiple features designed to facilitate enterprise-level workflows. It offers easy policy configuration, zero-touch deployment and flexible management — all of which allow enterprises to improve both their security and operational efficiency

The Gen 7 NSa Series supports advanced networking features, such as SD-WAN, dynamic routing, layer 4-7 clustering and high-speed VPN functionality. In addition to integrating firewall and switch capabilities, the appliance provides a single-pane-of-glass interface to manage both switches and access points.

Built to mitigate the advanced cyberattacks of today and tomorrow, the Gen 7 NSa Series offers access to SonicWall’s advanced firewall security services, allowing you to protect your entire IT infrastructure. Solutions and services such as Cloud Application Security, Capture Advanced Threat Protection (ATP) cloud-based sandboxing, Real-Time Deep Memory Inspection (RTDMI™) and Reassembly-Free Deep Packet Inspection (RFDPI) — for all traffic including TLS 1.3 — offer comprehensive gateway protection from most stealthy and dangerous malware, including zero-day and encrypted threats.

Highlights

Features:

• Blocks More Attacks with RTDMI™ - Real-Time Deep Memory Inspection (RTDMI™) proactively detects and blocks unknown malware via deep memory inspection in real time, a revolutionary approach to defend against zero-day and side-channel attacks and other unrecognized threats.
• Secure Remote Workers - SonicWall NetExtender provides an intuitive SSL-VPN connection client that’s easy to deploy and configure. Easily provide your remote workers with secure access to your corporate network from Linux, Mac and Windows devices.
• Secure SD-WAN Technology - Leave MPLS behind for a more agile, more secure and more cost-effective network optimized for today’s broadband-driven, cloud-infused landscape. Secure SD-WAN technology is built in to NSa firewalls, so there’s no need to purchase additional SD-WAN appliances and licenses.
• Built-in Wireless Controller - Implement high-speed wireless security by combining a NSa series next-generation firewall with a SonicWall SonicWave wireless access point. NSa series firewalls and SonicWave access points both feature 2.5 GbE ports that enable multi-gigabit wireless throughput offered in Wave 2 wireless technology.
• Low Total Cost of Ownership - Make a SonicWall NSa firewall the start of enterprise savings. From reduced costs through zero-touch deployment to enabling SD-WAN and delivering NetSecOPEN-verified threat block rates on par or better than competitors at a fraction of the cost, SonicWall NSa firewalls are security you can’t afford to be without.
• Cloud-based & On-Premises Centralized Management - Gain greater visibility into your enterprise even as it becomes more complex on- and off-prem. Tightly integrated into the SonicWall ecosystem, bring your firewalls into a single-pane-of-glass management, licensing, reporting and analytics
• High Performance and Port Density - Deploy next generation firewalls that are designed for mid-size and distributed enterprises to deliver much needed multi-gigabit threat prevention performance while providing high port density including 10 GbE ports for flexible network connectivity

Deployments:

Internet Edge Deployment

In this standard deployment option, the Gen 7 NSa Series NGFW protects private networks from malicious traffic coming from the internet, allowing you to:

• Deploy a proven NGFW solution with highest performance and port density (including 10 GbE connectivity) in its class
• Gain visibility and inspect encrypted traffic, including TLS 1.3, to block evasive threats coming from the Internet — all without compromising performance
• Protect your enterprise with integrated security, including malware analysis, cloud app security, URL filtering and reputation services
• Save space and money with an integrated NGFW solution that includes advanced security and networking capabilities
• Reduce complexity and maximize efficiency using a central management system delivered through an intuitive singlepane-of-glass user interface

Medium and Distributed Enterprises

The SonicWall Gen 7 NSa Series supports SD-WAN and can be centrally managed, making it an ideal fit for medium and distributed enterprises. This deployment allows organizations to:

• Future-proof against an ever-changing threat landscape by investing in a NGFW with multi-gigabit threat analysis performance
• Provide direct and secure internet access to distributed branch offices instead of back-hauling through corporate headquarters
• Allow distributed branch offices to securely access internal resources in corporate headquarters or in a public cloud, significantly improving application latency
• Automatically block threats that use encrypted protocols such as TLS 1.3, securing networks from the most advanced attacks
• Reduce complexity and maximize efficiency using a central management system delivered through an intuitive single pane of glass user interface
• Leverage high port density that includes 10 GbE connectivity to support a distributed enterprise and wide area networks

Specifications:

*Future use.

¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

² Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

³ VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

⁴ BGP is available only on SonicWall TZ400, TZ500 and TZ470.

⁵ All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products

Documentation:

Download the SonicWall NSa 3700 Datasheet (.PDF)