Datasheet
NSA Series system specifications
NSA 220/W NSA 250M/W
Operating system SonicOS 5.9
Security cores 2
1 GbE interfaces 7 x 1GbE 5 x 1GbE
Management interfaces CLI, SSH, GUI, GMS
Memory (RAM) 512 MB 512 MB
Expansion 2 USB, SD Card 1 Module Interface, 2 USB, SD Card
Firewall inspection throughput
1
600 Mbps 750 Mbps
Full DPI throughput
2
110 Mbps 130 Mbps
Application inspection throughput
2
195 Mbps 250 Mbps
IPS throughput
2
195 Mbps 250 Mbps
Anti-malware inspection throughput
2
115 Mbps 140 Mbps
IMIX throughput
3
180 Mbps 210 Mbps
VPN throughput
3
150 Mbps 200 Mbps
Connections per second 2,200/sec 3,000/sec
Maximum connections (SPI) 85,000 110,000
Maximum connections (DPI) 32,000 64,000
SonicPoints supported (Maximum) 16 16
Single Sign On (SSO) Users 250 250
4
VPN NSA 220/W NSA 250M/W
Site-to-site tunnels 25 50
IPSec VPN clients (Maximum) 2 (25) 2 (25)
SSL VPN licenses (Maximum) 2 (15) 2 (15)
Encryption/Authentication DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1
Key exchange Die Hellman Groups 1, 2, 5, 14
Route-based VPN RIP, OSPF
Networking NSA 220/W NSA 250M/W
IP IP address assignment Static (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay
NAT modes 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode
VLAN interfaces 25 35
Routing protocols BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
QoS Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
Authentication XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
VoIP Full H323-v1-5, SIP
Standards TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications VPNC, ICSA Firwall, ICSA Anti-Virus
Certifications pending FIPS 140-2, Common Criteria EAL1+
Common Access Card (CAC) Supported
Wireless NSA 220/W NSA 250M/W
Standards 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
Virtual access points (VAPs)5– External triple, detachable
antennas (5 dBi Diversity)
Radio power–802.11a/802.11b/802.11g 15.5 dBm max/18 dBm max/17 dBM @ 6 Mbps, 13 dBM @ 54 Mbps
Radio power–802.11n (2.4GHz)/802.11n (5.0GHz) 19 dBm MCS 0, 11 dBm MCS 15/17 dBm MCS 0, 12 dBm MCS 15
Radio receive sensitivity–802.11a/802.11b/802.11g -95 dBm MCS 0, -81 dBm MCS 15/-90 dBm @ 11Mbps/-91 dBm @ 6Mbps, -74 dBm @ 54 Mbps
Radio receive sensitivity– -89 dBm MCS 0, -70 dBm MCS 15/-95 dBm MCS 0, -76 dBm MCS 15
802.11n (2.4GHz)/802.11n (5.0GHz)
Hardware NSA 220/W NSA 250M/W
Power supply 36W external
Fans No fan/1 internal fan 2 internal fans
Input power 100-240 VAC, 60-50 Hz
Maximum power consumption (W) 11W/15W 12W/16W
Form factor Desktop / 1U Rack Mountable Kit Available
Dimensions 7.125 x 1.5 x 10.5 in
18.10 x 3.81 x 26.67 cm
Weight 1.95 lbs/0.88 kg/2.15 lbs/0.97 kg 3.05 lbs/1.38 kg/3.15 lbs/1.43 kg
WEEE weight 3.05 lbs/1.38 kg/3.45 lbs/1.56 kg 4.4 lbs/2.0kg/4.65 lbs/2.11 kg
Shipping weight 4.35lb/4.7lb 5.6 lb/5.9 lb
Major regulatory FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB,
Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI, GOST-R (NSA 220), CU (NSA 250M)
Environment 40-105° F, 0-40° C
Humidity 5-95% non-condensing
1
Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2
Full DPI/GatewayAV/Anti-
Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
3
VPN throughput measured using UDP trac at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4
Please refer to the latest SonicOS 5.9
release for the latest number of SSO users. *Future use.
12