SonicWall NSa 3650 01-SSC-1937 1U Rackmount Firewall, Appliance Only
Overview
The SonicWall Network Security appliance (NSa) series (Gen 6) serves organizations from mid-sized networks to distributed enterprises and data centers with advanced threat prevention on SonicOS 6.5.4. The 01-SSC-1937 is the NSa 3650 appliance, supplied as Appliance Only: the firewall, VPN and routing run on SonicOS 6.5.4, while security subscriptions are sold separately. SonicWall's End of Support for the NSa 3650 took effect on August 1, 2026.
Technical Details
The SonicWall NSa 3650 01-SSC-1937 is a 1U rackmount next-generation firewall running SonicOS 6.5.4, with 12×1GbE RJ45, 4×2.5GbE RJ45, 8×2.5GbE SFP, 2×10GbE SFP+. Threat Prevention throughput is 1.75 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled (3.75 Gbps firewall inspection), and it holds up to 2,000,000 concurrent SPI connections. This part number is Appliance Only: security subscriptions are sold separately, and SonicWall support for this model has ended. It is used at a campus or main-office internet edge, in the DMZ and between user and server segments.
Best For
The NSa 3650 suits a campus or main-office internet edge that needs 1.75 Gbps of Threat Prevention throughput and up to 2,000,000 concurrent SPI connections. It suits buyers maintaining an existing NSa 3650 deployment, since SonicWall support for this model ended on August 1, 2026. Size against the Threat Prevention figure, not the firewall inspection throughput.
Not suitable if:
- your inspected traffic exceeds 1.75 Gbps, the published Threat Prevention throughput
- you need security services included in the part number, since this one is Appliance Only
- you need SonicWall technical support or firmware updates, since this model reached SonicWall End of Support on August 1, 2026
01-SSC-1937 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 12×1GbE RJ45, 4×2.5GbE RJ45, 8×2.5GbE SFP, 2×10GbE SFP+ |
| Max Port Speed | 10 GbE |
| Management & Console Ports | 1×1GbE RJ45 management, 1×Console |
| Performance & Scale | |
| Firewall Throughput | 3.75 Gbps (RFC 2544) |
| Threat Prevention Throughput | 1.75 Gbps (Gateway AV, Anti-Spyware, IPS and Application Control enabled) |
| TLS/SSL Inspection Throughput | 0.32 Gbps (DPI SSL) |
| IPsec VPN Throughput | 1.5 Gbps (1280-byte UDP) |
| Maximum Concurrent Sessions | 2,000,000 (SPI) |
| New Sessions per Second | 14,000 |
| Maximum DPI Connections | 750,000 (DPI) |
| Maximum IPsec VPN Tunnels | 3,000 (site-to-site) |
| Hardware & Memory | |
| Onboard Storage | 32 GB |
| Power & Thermal | |
| Power Supply | Dual, redundant 120 W (one included); 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 46.0 W |
| Cooling | Dual fixed fans |
| Physical & Environmental | |
| Form Factor | 1U Rackmount |
| Dimensions (H x W x D) | 1.8 × 16.9 × 12.8 in (4.5 × 43 × 32.5 cm) |
| Weight | 11.7 lb (5.3 kg) |
| Operating Temperature | 32 to 105 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 6.5.4 |
| High Availability | Active/Passive; stateful synchronization (Stateful HA Upgrade license) and Active/Active clustering (Expanded License) are licensed separately |
| Central Management Platform | Capture Security Center, GMS |
| Routing Protocols & IPv6 | BGP (requires Expanded License), OSPF, RIPv1/v2, static routes, policy-based routing |
FAQ
Does the SonicWall NSa 3650 01-SSC-1937 include a security subscription?
No. The 01-SSC-1937 is Appliance Only: firewall, VPN and routing run on SonicOS 6.5.4, while security subscriptions are sold separately; SonicWall support for this model has ended.
How much traffic can the SonicWall NSa 3650 01-SSC-1937 handle?
SonicWall publishes no user count, so size the NSa 3650 on its figures. Firewall inspection throughput is 3.75 Gbps, but Threat Prevention throughput is 1.75 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled; size against that. It holds 2,000,000 concurrent SPI connections and 750,000 DPI connections, and opens 14,000 new connections per second.
What interfaces does the SonicWall NSa 3650 01-SSC-1937 have?
The NSa 3650 provides 12×1GbE RJ45, 4×2.5GbE RJ45, 8×2.5GbE SFP, 2×10GbE SFP+. Management and console connectivity is 1×1GbE RJ45 management, 1×Console. Transceivers for any SFP-type ports are sold separately.
Does the SonicWall NSa 3650 01-SSC-1937 support high availability?
The NSa 3650 supports Active/Passive high availability. State sync requires SonicWall's separate Stateful HA Upgrade license, and SonicWall's datasheet notes that Active/Active clustering requires the purchase of an Expanded License.
What is the difference between the NSa 3650 and the NSA 3600?
The NSa 3650 is rated at 3.75 Gbps firewall inspection throughput, 1.75 Gbps Threat Prevention throughput and 2,000,000 concurrent SPI connections. The NSA 3600 is rated at 3.4 Gbps firewall inspection throughput and 750,000 concurrent SPI connections, and SonicWall publishes no Threat Prevention figure for it. Check both interface sets in the specification tables.
Does the 01-SSC-1937 include SonicWall support?
No. New SonicWall support can no longer be bought for the NSa 3650: the last day to order one-year support was July 31, 2025, and End of Support took effect on August 1, 2026.
How is the SonicWall NSa 3650 01-SSC-1937 managed?
The NSa 3650 is managed through Capture Security Center and GMS, and locally through the SonicOS web interface and CLI. Firewall policy, SD-WAN, VPN and high availability are configured on the appliance; the security services on it are licensed separately unless this part number bundles them.
Is the 01-SSC-1937 end of life?
Yes. SonicWall's product lifecycle table lists the NSa 3650 with a Last Order Day of April 15, 2022, Active Retirement Mode from April 16, 2022, Limited Retirement Mode from April 16, 2024, a last one-year support order on July 31, 2025 and End of Support on August 1, 2026. SonicWall's End of Support notice names the NSa 2800 and NSa 3800 as replacements.
What condition is the 01-SSC-1937 sold in, and what warranty applies?
Network Devices Inc. supplies the 01-SSC-1937 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
