SonicWall NSa 3650 01-SSC-3215 1U Rackmount Firewall, High Availability Unit
Overview
The SonicWall Network Security appliance (NSa) series (Gen 6) serves organizations from mid-sized networks to distributed enterprises and data centers with advanced threat prevention on SonicOS 6.5.4. The 01-SSC-3215 is the NSa 3650 High Availability unit: the secondary unit of an NSa 3650 high availability pair, supplied as an appliance with no security subscription attached; security subscriptions are sold separately and licensed on the primary appliance. SonicWall's End of Support for the NSa 3650 took effect on August 1, 2026.
Technical Details
The SonicWall NSa 3650 01-SSC-3215 is a 1U rackmount next-generation firewall running SonicOS 6.5.4, with 12×1GbE RJ45, 4×2.5GbE RJ45, 8×2.5GbE SFP, 2×10GbE SFP+. Threat Prevention throughput is 1.75 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled (3.75 Gbps firewall inspection), and it holds up to 2,000,000 concurrent SPI connections. This part number is the High Availability unit of an NSa 3650 pair and must be paired with a regular NSa 3650. It is used at a campus or main-office internet edge, in the DMZ and between user and server segments.
Best For
The NSa 3650 suits a campus or main-office internet edge that needs 1.75 Gbps of Threat Prevention throughput and up to 2,000,000 concurrent SPI connections. It is bought to pair with an existing NSa 3650 for high availability; SonicWall support for this model ended on August 1, 2026. Size against the Threat Prevention figure, not the firewall inspection throughput.
Not suitable if:
- your inspected traffic exceeds 1.75 Gbps, the published Threat Prevention throughput
- you need a standalone firewall rather than the second unit of an HA pair
- you need SonicWall technical support or firmware updates, since this model reached SonicWall End of Support on August 1, 2026
01-SSC-3215 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 12×1GbE RJ45, 4×2.5GbE RJ45, 8×2.5GbE SFP, 2×10GbE SFP+ |
| Max Port Speed | 10 GbE |
| Management & Console Ports | 1×1GbE RJ45 management, 1×Console |
| Performance & Scale | |
| Firewall Throughput | 3.75 Gbps (RFC 2544) |
| Threat Prevention Throughput | 1.75 Gbps (Gateway AV, Anti-Spyware, IPS and Application Control enabled) |
| TLS/SSL Inspection Throughput | 0.32 Gbps (DPI SSL) |
| IPsec VPN Throughput | 1.5 Gbps (1280-byte UDP) |
| Maximum Concurrent Sessions | 2,000,000 (SPI) |
| New Sessions per Second | 14,000 |
| Maximum DPI Connections | 750,000 (DPI) |
| Maximum IPsec VPN Tunnels | 3,000 (site-to-site) |
| Hardware & Memory | |
| Onboard Storage | 32 GB |
| Power & Thermal | |
| Power Supply | Dual, redundant 120 W (one included); 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 46.0 W |
| Cooling | Dual fixed fans |
| Physical & Environmental | |
| Form Factor | 1U Rackmount |
| Dimensions (H x W x D) | 1.8 × 16.9 × 12.8 in (4.5 × 43 × 32.5 cm) |
| Weight | 11.7 lb (5.3 kg) |
| Operating Temperature | 32 to 105 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 6.5.4 |
| High Availability | Active/Passive; stateful synchronization (Stateful HA Upgrade license) and Active/Active clustering (Expanded License) are licensed separately |
| Central Management Platform | Capture Security Center, GMS |
| Routing Protocols & IPv6 | BGP (requires Expanded License), OSPF, RIPv1/v2, static routes, policy-based routing |
FAQ
Does the SonicWall NSa 3650 01-SSC-3215 include a security subscription?
No. The 01-SSC-3215 is a dedicated High Availability appliance with no security-service bundle of its own. It runs SonicOS 6.5.4; once it is associated with the primary NSa 3650 on MySonicWall, it synchronizes its licensing with the primary appliance.
How much traffic can the SonicWall NSa 3650 01-SSC-3215 handle?
SonicWall publishes no user count, so size the NSa 3650 on its figures. Firewall inspection throughput is 3.75 Gbps, but Threat Prevention throughput is 1.75 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled; size against that. It holds 2,000,000 concurrent SPI connections and 750,000 DPI connections, and opens 14,000 new connections per second.
What interfaces does the SonicWall NSa 3650 01-SSC-3215 have?
The NSa 3650 provides 12×1GbE RJ45, 4×2.5GbE RJ45, 8×2.5GbE SFP, 2×10GbE SFP+. Management and console connectivity is 1×1GbE RJ45 management, 1×Console. Transceivers for any SFP-type ports are sold separately.
Does the SonicWall NSa 3650 01-SSC-3215 support high availability?
This part number is the High Availability unit: the second appliance of an NSa 3650 HA pair. The NSa 3650 supports Active/Passive high availability. State sync requires SonicWall's separate Stateful HA Upgrade license, and SonicWall's datasheet notes that Active/Active clustering requires the purchase of an Expanded License.
What is the difference between the NSa 3650 and the NSA 3600?
The NSa 3650 is rated at 3.75 Gbps firewall inspection throughput, 1.75 Gbps Threat Prevention throughput and 2,000,000 concurrent SPI connections. The NSA 3600 is rated at 3.4 Gbps firewall inspection throughput and 750,000 concurrent SPI connections, and SonicWall publishes no Threat Prevention figure for it. Check both interface sets in the specification tables.
Does the 01-SSC-3215 include SonicWall support?
The 01-SSC-3215 must be paired with a regular NSa 3650. New SonicWall support can no longer be bought for the NSa 3650: the last day to order one-year support was July 31, 2025, and End of Support took effect on August 1, 2026.
How is the SonicWall NSa 3650 01-SSC-3215 managed?
The NSa 3650 is managed through Capture Security Center and GMS, and locally through the SonicOS web interface and CLI. Firewall policy, SD-WAN, VPN and high availability are configured on the appliance; the HA unit's licensing synchronizes with the primary appliance in the pair.
Is the 01-SSC-3215 end of life?
Yes. SonicWall's product lifecycle table lists the NSa 3650 with a Last Order Day of April 15, 2022, Active Retirement Mode from April 16, 2022, Limited Retirement Mode from April 16, 2024, a last one-year support order on July 31, 2025 and End of Support on August 1, 2026. SonicWall's End of Support notice names the NSa 2800 and NSa 3800 as replacements.
What condition is the 01-SSC-3215 sold in, and what warranty applies?
Network Devices Inc. supplies the 01-SSC-3215 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
