CyberIndexBeta

SonicWall NSa Series

SonicWALLNetwork Firewall (primary)Compare with others in Network Firewall

Product

Mid-range next-generation firewall appliances for mid-sized organisations and enterprise branches. It is available as a hardware appliance. Recorded capabilities include application control, central management console, deep packet inspection and high availability. Its record also notes intrusion detection (ids), intrusion prevention (ips), sd-wan and ssl/tls inspection. The stated market is Enterprise.

Current Version
8.2.2-8015
Product Page
sonicwall.com/…/mid-range
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-13

Vendor

SonicWall has sold network security appliances since 1991 and has changed owner repeatedly: Dell bought it in 2012, then sold it in 2016 as part of the Dell Software group to Francisco Partners and Elliott Management, under whom it has been independent since. It is headquartered in Milpitas, California, and sells almost entirely through resellers and managed service providers. The firewall is the business. The SonicWall TZ series covers small offices and branches and the SonicWall NSa series the larger sites, with SonicWall NSsp at the top and SonicWall Network Security Manager as the console. Its subscription services — SonicWall Capture ATP for sandboxing suspicious files and the Capture Security services around it — are what the appliances are licensed with. SonicWall Capture Client is its endpoint product, and worth understanding before comparing its results with others here: the malware engine inside it is SentinelOne's, licensed rather than built, so a Capture Client result reflects SentinelOne's detection as delivered through SonicWall's management. Vendor page →

Website
sonicwall.com
Country
United States
Headquarters
Milpitas, United States
Year Established
1991
Customers
500K organisations
Users
3M devices protected
Revenue
$400.0M (2026)

Platforms

Hardware Appliancenative

Target Market

Enterprise primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)native
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANnative
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 8.2.2-8015platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

NetSecOPEN Network Security Test

Tested: NSa 47002025-10-11lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

All results

NetSecOPEN Network Security TestNetSecOPEN — NSa 4700, SonicOS 7.3.0-6002 (UNH-IOL)2025-10-11
Exploits Blocked: 100%HTTPS Throughput (inspected): 3.58 GbpsHTTPS Connections/s: 2275
NetSecOPEN Network Security TestNetSecOPEN — NSa 4700, SonicOS 7.0.1-6009 (UNH-IOL)2024-10-26
Exploits Blocked: 100%HTTPS Throughput (inspected): 3.289 GbpsHTTPS Connections/s: 2200

Certifications

Common Criteria1 active5 expiredshow 6 certificates ▾
FIPS 140-32 activeshow 2 certificates ▾
NetSecOPEN CertificationCertified2 activeshow 2 certificates ▾

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-13New versionNew version: 8.2.2-8015evidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedSD-WAN: built inevidence
  • 2026-10-07Capability addedVPN Gateway: built inevidence
  • 2026-10-07Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-07Capability addedIntrusion Detection (IDS): built inevidence
  • 2026-10-07Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-06Certification addedCertification expired: Common Criteria (EAL4)evidence
  • 2026-10-06Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-06Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-06Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-06Certification addedCertified: Common Criteriaevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20New versionNew version: SonicOSevidence
  • 2026-09-20Platform addedRuns on Hardware Applianceevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.