SonicWall NSSp 11700
SonicWall Gen 7 NSsp Series

Next-Generation Firewall (NGFW)

• Managed through a single pane of glass
• NSsp integrates with the rest of the SonicWall ecosystem of solutions
• Gain full visibility into your network to see what applications, devices, and users are doing to enforce policies as well as eliminate threats and bandwidth bottlenecks
• Integrate with Capture ATP with RTDMI for cloud-based sandboxing or Capture Security appliance for on-premise malware detection

Deep Packet Inspection of SSL/ TLS (DPI-SSL) for hidden threats

• The NSsp provides inspection for over millions of simultaneous TLS/SSL and SSH encrypted connections regardless of port or protocol
• Inclusion and exclusion rules allow customization based on specifc organizational compliance and/or legal requirements
• Support for TLS cipher suites up to TLS 1.3

Segmentation and Networking

• Operate across several segmented networks, clouds, or service defnitions, with unique templates, device groups, and policies across multiple devices and tenants
• MSSPs can also support multiple customers with a clean pipe along with unique policies

IoT and Application Control

• The NSsp catalogs thousands of applications through App Control and monitors their trafc for anomalous behavior

Multi-instance Firewall (only for NSsp 15700)

• Multi-instance is the next generation of multi-tenancy
• Each tenant is isolated with dedicated compute resources to avoid resource starvation
• It features physical and logical ports/tenants
• It supports independent tenant policy and confguration management
• Leverage version independence and High Availability (HA) support for tenants

Wire Mode Functionality

• Bypass Mode for the quick and relatively non-interruptive introduction of frewall hardware into a network
• Inspect Mode to extend Bypass Mode without functionally altering the low-risk, zero latency packet path
• Secure Mode to actively interposing the frewall’s multi-core processors into the packet processing path
• Tap Mode to ingest a mirrored packet stream via a single switch port on the frewall, eliminating the need for physically intermediated insertion

Capture Cloud Platform

• SonicWall’s Capture Cloud Platform delivers cloud-based threat prevention and network management plus reporting and analytics for organizations of any size

Advanced Threat Protection

• SonicWall Capture Advanced Threat Protection™ (ATP) is used by over 150,000 customers across the world through a variety of solutions and it helps to discover and stop over 1,200 new forms of malware each business day
• NSsp integrates with Capture Security appliance to detect and block unknown threats with on-premises sandboxing thats uses Real-Time Deep Memory Inspection™ (RTDMI)

Content Filtering Services

• Compare requested web sites against a massive database in the cloud containing millions of rated URLs, IP addresses and web sites
Create and apply policies that allow or deny access to sites based on individual or group identity, or by time of day, for over 50 pre-defned categories

Intrusion Prevention System (IPS)

• Delivers a confgurable, high performance Deep Packet Inspection engine for extended protection of key network services such as Web, e-mail, fle transfer, Windows services and DNS
• Designed to protect against application vulnerabilities as well as worms, trojans, and peer-to-peer, spyware and backdoor exploits
• The extensible signature language provides proactive defense against newly discovered application and protocol vulnerabilities
• SonicWall IPS ofoads the costly and time-consuming burden of maintaining and updating signatures for new attacks through SonicWall’s industryleading Distributed Enforcement Architecture (DEA)

NSsp 10700

NSsp 11700

NSsp 13700

NSsp 15700