NSsp 15700
| NSsp 15700 | |
|---|---|
| Operating System | SonicOSX 7.0 |
| lnterfaces | 6 x 100-GbE QSFP28, 4 x 40-GbE QSFP+, 16x 10GbESFP+ |
| Built-in storage | 2 x480 GBSSD |
| Management | CLI, SSH, Web u1. REST APls |
| SSO Users | 100,000 |
| Logging | Analyzer, Local Log, Syslog, IPFIX, NetFlow |
| FIREWALL/VPN PERFORMANCE | |
|---|---|
| Firewall Inspection Throughput | 105 Gbps |
| Threat Prevention Throughput | 82 Gbps |
| Application Inspection Throughput | 86 Gbps |
| IPS Throughput | 76.5 Gbps |
| IMIX Throughput | 28.5 Gbps |
| TLS/SSL Inspection and Secryption Throughput (DPI SSL) | 21 Gbps |
| VPN Throughput | 32 Gbps |
| Connections Per Second | 800K |
| Maximum Connections (SPI) | 80M |
| Maximum Connections (DPI) | 50M |
| Maximum Connections (DPI SSL) | 3M |
| VPN | |
|---|---|
| Site-to-site VPN Tunnels | 25,000 |
| IPSec VPN Clients (maximum) | 2,000 (10,000) |
| SSL VPN Licenses (maximum) | 2 (3,000) |
| Encryption/Authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-based VPN | RIP, OSPF, BGP |
| VPN Features | Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms Supported | Microsoft® Windows Vista 32/64-bit. Windows 7 32/64-bit. Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10 |
| NetExtender | Microsoft Windows Vista 32/64-bit. Windows 7, Windows 8.0 32/64-bit. Windows 8.1 32/64-bit. Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE |
| Mobile Connect | Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome, Windows 8.1 (Embedded) |
| NETWORKING | |
|---|---|
| Multi-lnstance Firewall | Max Tenants per Hardware: 12 |
| IP Address Assignment | Static (DHCP, PPPoE, L2TP and PPTP client), lnternal DHCP server, DHCP Relay |
| NAT Modes | 1:1, many:1, 1:many, flexible NAT (overlapping iP). PAT, transparent mode |
| VLAN Interfaces | 1024 |
| Wire Mode | Yes |
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) |
| Authentication | LDAP (multiple domains). XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| VoIP | Full H323-v1-5, SIP |
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADiUS, IEEE 802.3 |
| Certifications (in progress) | FIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS) |
| High Availability | Active/Passive with stateful synchronization |