SonicWall NSA 3600 01-SSC-3850 1U Rackmount Firewall, Appliance Only
Overview
The SonicWall NSA 2600 to 6600 models form the series that SonicWall's datasheet lists as its legacy NSA series, running SonicOS 6.5.1 on a 1U rack-mountable platform. The 01-SSC-3850 is the NSA 3600 appliance, supplied as Appliance Only: the firewall, VPN and routing run on SonicOS 6.5.1, while security subscriptions are sold separately. SonicWall's product lifecycle table lists End of Support for the NSA 3600 on August 1, 2026.
Technical Details
The SonicWall NSA 3600 01-SSC-3850 is a 1U rackmount next-generation firewall running SonicOS 6.5.1, with 12×1GbE RJ45, 4×1GbE SFP, 2×10GbE SFP+. Firewall inspection throughput is 3.4 Gbps, while SonicWall's datasheet publishes no Threat Prevention throughput for this model, and it holds up to 750,000 concurrent SPI connections. This part number is Appliance Only: security subscriptions are sold separately, and SonicWall support for this model has ended. It is used at a campus or main-office internet edge, in the DMZ and between user and server segments.
Best For
The NSA 3600 suits a campus or main-office internet edge that needs 3.4 Gbps of firewall inspection throughput and up to 750,000 concurrent SPI connections. It suits buyers maintaining an existing NSA 3600 deployment, since SonicWall support for this model ended on August 1, 2026. SonicWall's datasheet publishes no Threat Prevention figure for this model.
Not suitable if:
- you need security services included in the part number, since this one is Appliance Only
- you need SonicWall technical support or firmware updates, since this model reached SonicWall End of Support on August 1, 2026
01-SSC-3850 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 12×1GbE RJ45, 4×1GbE SFP, 2×10GbE SFP+ |
| Max Port Speed | 10 GbE |
| Management & Console Ports | 1×1GbE RJ45 management, 1×Console |
| Performance & Scale | |
| Firewall Throughput | 3.4 Gbps (RFC 2544) |
| Threat Prevention Throughput | Not published |
| TLS/SSL Inspection Throughput | 0.3 Gbps (DPI SSL) |
| IPsec VPN Throughput | 1.5 Gbps (1280-byte UDP) |
| Maximum Concurrent Sessions | 750,000 (SPI) |
| New Sessions per Second | 20,000 |
| Maximum DPI Connections | 375,000 (DPI) |
| Maximum IPsec VPN Tunnels | 1,000 (site-to-site) |
| Power & Thermal | |
| Power Supply | Single, fixed 250 W; 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | No |
| Maximum Power Consumption | 74.3 W |
| Cooling | Dual fixed fans |
| Physical & Environmental | |
| Form Factor | 1U Rackmount |
| Dimensions (H x W x D) | 1.75 × 19.1 × 17 in (4.5 × 48.5 × 43 cm) |
| Weight | 13.56 lb (6.15 kg) |
| Operating Temperature | 32 to 105 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 6.5.1 |
| High Availability | Active/Passive; stateful synchronization (Stateful HA Upgrade license) and Active/Active clustering (Expanded License) are licensed separately |
| Central Management Platform | Capture Security Center, GMS |
| Routing Protocols & IPv6 | BGP (requires Expanded License), OSPF, RIPv1/v2, static routes, policy-based routing |
FAQ
Does the SonicWall NSA 3600 01-SSC-3850 include a security subscription?
No. The 01-SSC-3850 is Appliance Only: firewall, VPN and routing run on SonicOS 6.5.1, while security subscriptions are sold separately; SonicWall support for this model has ended.
How much traffic can the SonicWall NSA 3600 01-SSC-3850 handle?
SonicWall publishes no user count and, for this model, no Threat Prevention throughput. Firewall inspection throughput is 3.4 Gbps, and the appliance holds 750,000 concurrent SPI connections and 375,000 DPI connections, with 20,000 new connections per second. Size inspected traffic with Network Devices Inc. before ordering.
What interfaces does the SonicWall NSA 3600 01-SSC-3850 have?
The NSA 3600 provides 12×1GbE RJ45, 4×1GbE SFP, 2×10GbE SFP+. Management and console connectivity is 1×1GbE RJ45 management, 1×Console. Transceivers for any SFP-type ports are sold separately.
Does the SonicWall NSA 3600 01-SSC-3850 support high availability?
The NSA 3600 supports Active/Passive high availability. SonicWall's NSA series datasheet lists state sync and Active/Active clustering, which require SonicWall's separate Stateful HA Upgrade and Expanded License.
What is the difference between the NSA 3600 and the NSa 3650?
The NSA 3600 is rated at 3.4 Gbps firewall inspection throughput and 750,000 concurrent SPI connections, with no published Threat Prevention figure. The newer Gen 6 NSa 3650 is rated at 3.75 Gbps firewall inspection throughput, 1.75 Gbps Threat Prevention throughput and 2,000,000 concurrent SPI connections. Check both interface sets in the specification tables.
Does the 01-SSC-3850 include SonicWall support?
No. New SonicWall support can no longer be bought for the NSA 3600: the last day to order one-year support was July 31, 2025, and End of Support took effect on August 1, 2026.
How is the SonicWall NSA 3600 01-SSC-3850 managed?
The NSA 3600 is managed through Capture Security Center and GMS, and locally through the SonicOS web interface and CLI. Firewall policy, VPN and high availability are configured on the appliance; the security services on it are licensed separately unless this part number bundles them.
Is the 01-SSC-3850 end of life?
Yes. SonicWall's product lifecycle table lists the NSA 3600 with a Last Order Day of March 2, 2021, Active Retirement Mode from March 3, 2021, Limited Retirement Mode from March 3, 2023, a last one-year support order on July 31, 2025 and End of Support on August 1, 2026. SonicWall's June 2025 support notice gives April 15, 2022 as the Last Day Order instead; both sources give End of Support as August 1, 2026.
What condition is the 01-SSC-3850 sold in, and what warranty applies?
Network Devices Inc. supplies the 01-SSC-3850 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
