Real-time intrusion detection in an 802.11ac Wave 2 wireless network environment

SonicWall announced the launch of the 'NSA 2650', a next-generation firewall for automated real-time threat defense based on the next-generation wireless network standard, 802.11ac Wave 2.

The NSA 2650 firewall is a product optimized for the needs of corporate customers seeking to protect their business environments from various threats that are constantly seeking new ways to penetrate networks.

The new NSA 2650 firewall is a firewall that supports automated real-time intrusion detection and prevention, as well as TLS/SSL decryption and inspection, in multi-gigabit wired and next-generation wireless network environments such as 802.11ac Wave 2.

The NSA 2650 goes beyond the concept of simply replacing the previous version, the NSA 2600; it is a solution that meets the requirements for threat defense in high-speed network environments and provides an optimal security environment for web encryption and mobility. The NSA 2650 is a 1U-sized device based on four multi-cores that supports the following computationally intensive deep packet inspection (inspecting and analyzing transmitted data in packet units) functions and can process these functions at high speed.

The NSA2650 supports intrusion prevention, antivirus, anti-spyware, real-time inspection and decryption of TLS/SSL attacks, application visualization, application control, botnet detection, IP-based location (Geo-IP) identification, anti-spam, user identification, and APT (Advanced Threat Defense).

Unlike many competing firewalls that excel only in performance for unencrypted connections, the NSA 2650 is designed to support customer requests for more TLS/SSL connection inspection. The NSA 2650 supports up to 12,000 encrypted web connections and first decrypts the traffic, then performs thorough packet inspection on each connection.

To protect the system from sophisticated threats, such as unknown zero-day attacks hidden in encrypted web traffic, the NSA 2650 utilizes Capture, SonicWall's cloud-based multi-engine sandbox service. The NSA 2650 sends suspicious files to the SonicWall Capture service for analysis.

The NSA 2650 features a dedicated management port and 4×2.5-GbE SFP, 4×2.5-GbE, and 12×1-GbE interfaces. In addition to multi-Gigabit ports, a high-speed processor, and robust onboard memory, enhanced hardware capabilities make it an ideal product for small and medium-sized organizations and distributed enterprises. Additionally, if a problem occurs with the power supply, an auxiliary power supply can be optionally used.

The NSA 2650 is equipped with two expansion slots, offering high scalability. One slot is fitted with a 16GB storage module that supports functions such as logging, reporting, final signature updates, backup, and restore. The other slot provides the flexibility to add future functional and physical capabilities. This firewall platform not only allows for future module expansion but also possesses the capability to adequately defend against threats, such as ransomware, through firmware updates before they occur.

Heo Nam-ju, General Manager of SonicWall Korea, stated, “With the NSA 2650, SonicWall has once again added a groundbreaking security product to its portfolio. The SonicWall NSA 2650 clearly demonstrates the continuous evolution of SonicWall’s vision to elevate network security levels without compromising performance. Combined with SonicWave wireless access points based on the new 802.11ac Wave 2 wireless network, SonicWall establishes a high-speed wireless network security environment, providing wireless users with an enhanced mobile experience. Through the launch of this new product, we will strengthen sales activities and customer support in the domestic market to contribute to the development of the domestic network security market.”