SonicWALL Network Security Appliance 2400MX
N E T WO R K SECU R I T Y
Revolutionary protection, scalability and performance
Todays business networks need both robust security to counter the rapid proliferation of emerging sophisticated threats and flexible switching to provide responsive business communications channels in a turbulent global marketplace. Meeting both these necessities often requires purchasing separate hardware, which increases the costs and resources spent deploying and managing each component.

n Increased port density

with advanced switching
n Advanced routing services
and networking features security and application control
The SonicWALL Network Security Appliance (NSA) 2400MX eliminates this problem by delivering robust, high-performance security on either a Unified Threat Management (UTM) or Next-Generation Firewall platform that features a breakthrough Reassembly-Free Deep Packet Inspection technology and multi-core hardware design, to deliver real-time comprehensive network protection, high-speed intrusion prevention, file and content inspection, and powerful application intelligence and control capabilities without compromising network performance. At the same time, the NSA 2400MX provides flexible, intelligent switching capabilities with its unique PortShield architecture, increased port density with 26 interfaces, two module slots for expanded port density and connectivity options, and advanced switching, dynamic routing, networking and connectivity features. By integrating high-performance network security with advanced switching functionality, the NSA 2400MX offers peerless scalability, granular configuration flexibility, and centralized control. Designed for small- to medium-sized businesses (SMBs) and branch office networks, the NSA 2400MX offers best-in-class threat prevention, rapid deployment and lowered total cost of ownership (TCO). An affordable platform that is easy to deploy, configure and manage in a wide variety of environments, the NSA 2400MX reduces upfront infrastructure expenses and ongoing administrative overhead costs. The NSA 2400MX also supports integrated virtual private networks (VPNs), virtual local area networks (VLANs), standards-based Voice over IP (VoIP), dynamic routing and Quality of Service (QoS) features, further extending security and performance through the network environment.

Features and Benefits

Increased port density with advanced switching provides the highest port density of any product in its class, with (10) 1 GbE and 16 FE ports, port bonding, QoS and port-level security. Advanced routing services and networking features include support for Open Shortest Path First (OSPF), Router Information Protocol (RIP), 802.1q VLANs, Multi-WAN, ISP failover, zone- and objectbased management, load balancing, advanced NAT modes and more, to ensure network availability, ease integration, provide granular configuration flexibility and deliver comprehensive protection. High-performance security and application control integrates intrusion prevention, gateway anti-virus, anti-spyware, application intelligence and control. Scalable protection with Reassembly-Free Deep Packet Inspection eliminates threats over unlimited file sizes and virtually unrestricted concurrent connections, offering ultimate scalability. Unique PortShield Architecture provides the flexibility to configure all 26 LAN switch ports into separate security zones such as LANs, WLANs and DMZs, providing protection not only from the WAN and DMZ, but also between devices inside the LAN. Effectively, each security zone has its own wire-speed mini-switch that enjoys the protection of a dedicated deep packet inspection firewall. State-of-the-art performance and lowered TCO takes advantage of SonicWALL multi-core performance architecture to increase throughput and simultaneous inspection capabilities dramatically, while keeping power consumption nearly constant. Standards-based Voice over IP (VoIP) capabilities provide the highest levels of security for every element of the VoIP infrastructure, from communications equipment to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Servers. Innovative SonicWALL Clean VPN delivers the critical dual protection of SSL VPN and highperformance Unified Threat Management necessary to secure the integrity of both VPN access and traffic, thereby ensuring decontamination of mobile user and branch office traffic, while preventing vulnerabilities and malicious code from entering the corporate network. SonicWALL GlobalManagement System (GMS) offers flexible, powerful and intuitive tools for centralized global management, simplified configuration, policy enforcement, real-time monitoring, and integrated policy and compliance reporting for SonicWALL appliances. Modular expansion allows for a connectivity and port density expansion with supported SonicWALL M Series Modules, including SonicWALL 4-Port GbE M1 and 2-Port SFP M1 Modules.

n High-performance

n Scalable potection with
Reassembly-Free Deep Packet Inspection Architecture

n Unique PortShield

n State-of-the-art
performance and lowered TCO over IP

n Standards-based Voice

n Innovative SonicWALL

Clean VPN

n SonicWALL Global

Management System

n Modular expansion

Specifications

Firewall SonicOS Version Stateful ThroughputGAV Performance IPS Performance 2 UTM Performance 2 IMIX Performance 2 Maximum Connections 3 Maximum UTM Connections New Connections/Sec Nodes Supported Denial of Service Attack Prevention SonicPoints Supported (Maximum) NSA 2400MX SonicOS Enhanced 5.7 (or higher) 775 Mbps 160 Mbps 275 Mbps 150 Mbps 235 Mbps 225,000 125,000 4,000 Unrestricted 22 classes of DoS, DDoS and scanning attacks 32
Network Security Appliance 2400MX 01-SSC-7100 NSA 2400MX TotalSecure* (1-year) 01-SC-8854 For more information on SonicWALL network security solutions, please visit www.sonicwall.com. *Includes one-year of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Intelligence Service, Content Filtering Service, Dynamic Support 24x7 and ViewPoint Reporting.
VPN 3DES/AES ThroughputMbps Site-to-Site VPN Tunnels 75 Bundled Global VPN Client Licenses 10 (250) (Maximum) Bundled SSL VPN Licenses (Maximum) 2 (25) Virtual Assist Bundled (Maximum) 1 (5) Encryption/Authentication/DH Group DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1/DH Groups 1, 2, 5, 14 Key Exchange Key Exchange IKE, IKEv2, Manual Key, PKI (X.509), L2TP over IPSec Route-Based VPN Yes (OSPF, RIP) Certificate Support Verisign, Thawte, Cybertrust, RSA Keon, Entrust, and Microsoft CA for SonicWALL-to-SonicWALL VPN, SCEP Dead Peer Detection Yes DHCP Over VPN Yes IPSec NAT Traversal Yes Redundant VPN Gateway Yes Global VPN Client Platforms Supported Microsoft Windows 2000, Windows XP, Microsoft Vista 32/64 bit, Windows 7 32/64 bit SSL VPN Platforms Supported Microsoft Windows 2000 / XP / Vista 32/64-bit / Windows 7, Mac 10.4+, Linux FC 3+ / Ubuntu 7+ / OpenSUSE Security Services Deep Packet Inspection Service Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence Content Filtering Service Premium Edition (CFS) HTTP URL,HTTPS IP, keyword and content scanning ActiveX, Java Applet, and cookie blocking Gateway-enforced Client Anti-Virus and Anti-Spyware HTTP/S, SMTP, POP3, IMAP and FTP, Enforced McAfee Clients Email attachment blocking Comprehensive Anti-Spam Service Supported Application Intelligence and Control Provides application level enforcement and bandwidth control, regulate Web traffic, email, email attaches and file transfers, scan and restrict documents and files for key words and phrases Networking IP Address Assignment Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay NAT Modes 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode VLAN Interfaces (802.1q) 25 Routing OSPF, RIPv1/v2, static routes, policy-based routing, Multicast QoS Bandwidth priority, maximum bandwidth, guaranteed bandwidth, DSCP marking, 802.1p IPv6 Yes Authentication XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix Internal Database/Single Sign-on Users 250/250 Users VoIP Full H.323v1-5, SIP, gatekeeper support, outbound bandwidth management, VoIP over WLAN, deep inspection security, full interoperability with most VoIP gateway and communications devices Switching Features VLAN Trunking, Rapid Spanning Tree, Layer 2 Discovery, Link Aggregation, Port Mirroring, Layer 2 QoS, Rate Control, Port Security System Zone Security Yes Schedules One Time, Recurring Object-based/Group-based Management Yes DDNS Yes Management and Monitoring Web GUI (HTTP, HTTPS), Command Line (SSH, Console), SNMP v2: Global management with SonicWALL GMS Logging and Reporting ViewPoint, Local Log, Syslog, Solera Networks High Availability Optional Active/Passive with State Sync Load Balancing Yes, (Outgoing with percent-based, round robin and spill-over); (Incoming with round robin, random distribution, sticky IP, block remap and symmetrical remap) Standards TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 Hardware Interfaces (16) 10/100, (10) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB, 2 Module Slots (For Future Use) Memory (RAM) 512 MB Flash Memory 512 MB Compact Flash 3G Wireless/Modem* With 3G USB Adapter Modem Power Supply Single 180W ATX Power Supply Fans 2 Fans Power Input 100-240Vac, 60-50Hz Max Power Consumption 52W Total Heat Dissipation 177BTU Certifications EAL4+, VPNC, ICSA Firewall 4.1 Certifications Pending FIPS 140-2 Form Factor 1U rack-mountable/ and Dimensions 17 x 13.25 x 1.75 in/ 43.18 x 33.65 x 4.44 cm Weight 11.75 lbs/ 5.3 kg WEEE Weight 12.25 lbs/ 5.6 kg Major Regulatory FCC Class A, CES Class A, CE, C-Tick, VCCI, Compliance MIC, UL, cUL, TUV/GS, CB, NOM, RoHS, WEEE Environment 40-105 F, 5-40 C MTBF 8.4 years Humidity Operating Humidity 10-95% RH, non-condensing Non-operating Humidity 90% RH, non-condensing

1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. 2 UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. 3 Actual maximum connection counts are lower when UTM services are enabled. 4 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. *USB 3G card not included. See http://www.sonicwall.com/us/products/cardsupport. html for supported USB devices. The Comprehensive Anti-Spam Service supports an unrestricted number of users but is recommended for 250 users or less.
SonicWALL 4 Port GbE M1 Module 01-SSC-8825 The SonicWALL 4-Port GbE M1 Module expands port density by adding four 1-Gbps Ethernet networking interfaces, without incurring costs of an additional switch and reducing points of failure.
SonicWALL 2 Port SFP M1 Module 01-SSC-8826 The SonicWALL 2-Port SFP M1 Module adds fiber connectivity over two SFP copper/fiber 1-Gbps Ethernet networking interfaces, without additional third party equipment costs and points of failure.

Certifications

SonicWALLs line-up of dynamic security solutions SonicWALL, Inc. 2001 Logic Drive, San Jose, CA 95124 T +1 408.745.9600 F +1 408.745.9300 www.sonicwall.com

NETWORK SECURITY

SECURE REMOTE ACCESS

WEB AND E-MAIL SECURITY

BACKUP AND RECOVERY

POLICY AND MANAGEMENT

2011 SonicWALL, Inc. All rights reserved. SonicWALL is a registered trademark of SonicWALL, Inc. and all other SonicWALL product and service names and slogans are trademarks or registered trademarks of SonicWALL, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective owners. 03/11 SW 1112