SonicWall NSsp 10700 02-SSC-1717 1U Rackmount Firewall, High Availability Unit
Overview
The SonicWall Gen 7 NSsp (Network Security services platform) Series is a high-port-density next-generation firewall line built to process several million connections for zero-day and advanced threats in large enterprises. The 02-SSC-1717 is the NSsp 10700 High Availability unit. It is the secondary unit of an NSsp 10700 high availability pair, supplied as an appliance with no security subscription attached; support and security subscriptions are sold separately and licensed on the primary appliance.
Technical Details
The SonicWall NSsp 10700 02-SSC-1717 is a 1U rackmount next-generation firewall running SonicOS 7, with 16×1GbE RJ45, 4×10/5/2.5/1GbE RJ45, 4×10/5/2.5/1GbE SFP+, 8×25/10/5/2.5GbE SFP28, 2×100/40GbE QSFP28. Threat Prevention throughput is 28 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled (42 Gbps firewall inspection), and it holds up to 15,000,000 concurrent SPI connections and opens 280,000 new connections per second. This part number is the High Availability unit of an NSsp 10700 pair and must be paired with a regular NSsp 10700. It is used at a large-enterprise or data-center edge for north-south inspection and high-connection-count workloads.
Best For
The NSsp 10700 suits a large-enterprise or data-center edge that needs 28 Gbps of Threat Prevention throughput and up to 15,000,000 concurrent SPI connections. It is bought to pair with an existing NSsp 10700 for high availability. Size against the Threat Prevention figure, not the firewall inspection throughput.
Not suitable if:
- your inspected traffic exceeds 28 Gbps, the published Threat Prevention throughput
- you need a standalone firewall rather than the second unit of an HA pair
02-SSC-1717 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 16×1GbE RJ45, 4×10/5/2.5/1GbE RJ45, 4×10/5/2.5/1GbE SFP+, 8×25/10/5/2.5GbE SFP28, 2×100/40GbE QSFP28 |
| Max Port Speed | 100 GbE |
| Management & Console Ports | 1×1GbE RJ45 out-of-band management, 1×Console, 2×USB (type-A) |
| Performance & Scale | |
| Firewall Throughput | 42 Gbps (RFC 2544) |
| Threat Prevention Throughput | 28 Gbps (Gateway AV, Anti-Spyware, IPS and Application Control enabled) |
| TLS/SSL Inspection Throughput | 10 Gbps (DPI SSL) |
| IPsec VPN Throughput | 22.5 Gbps (1418-byte UDP, AESGMAC16-256) |
| Maximum Concurrent Sessions | 15,000,000 (SPI) |
| New Sessions per Second | 280,000 |
| Maximum DPI Connections | 12,000,000 (DPI) |
| Maximum IPsec VPN Tunnels | 6,000 (site-to-site) |
| Hardware & Memory | |
| Onboard Storage | 1.5 TB |
| Power & Thermal | |
| Power Supply | 2×350 W, hot-swappable; 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | Yes |
| Maximum Power Consumption | 155.3 W |
| Cooling | 3 removable fans |
| Physical & Environmental | |
| Form Factor | 1U Rackmount |
| Dimensions (H x W x D) | 1.8 × 16.9 × 18.1 in (4.5 × 43 × 46 cm) |
| Weight | 20.1 lb (9.1 kg) |
| Operating Temperature | 32 to 105 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 7 |
| High Availability | Active/Passive with stateful synchronization |
| Central Management Platform | Network Security Manager (NSM) 3.0 and above |
| Routing Protocols & IPv6 | BGP4, OSPF, RIPv1/v2, static routes, policy-based routing; IPv6/USGv6 certified |
FAQ
Does the SonicWall NSsp 10700 02-SSC-1717 include a security subscription?
No. The 02-SSC-1717 is a dedicated High Availability appliance with no security-service bundle of its own. It runs SonicOS 7; once it is associated with the primary NSsp 10700 on MySonicWall, it synchronizes its licensing with the primary appliance.
How much traffic can the SonicWall NSsp 10700 02-SSC-1717 handle?
SonicWall publishes no user count, so size the NSsp 10700 on its figures. Firewall inspection throughput is 42 Gbps, but Threat Prevention throughput is 28 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled; size against that. It holds 15,000,000 concurrent SPI connections and 12,000,000 DPI connections, and opens 280,000 new connections per second.
What interfaces does the SonicWall NSsp 10700 02-SSC-1717 have?
The NSsp 10700 provides 16×1GbE RJ45, 4×10/5/2.5/1GbE RJ45, 4×10/5/2.5/1GbE SFP+, 8×25/10/5/2.5GbE SFP28, 2×100/40GbE QSFP28. Management and console connectivity is 1×1GbE RJ45 out-of-band management, 1×Console, 2×USB (type-A). Transceivers for any SFP-type ports are sold separately.
Does the SonicWall NSsp 10700 02-SSC-1717 support high availability?
This part number is the High Availability unit: the second appliance of an NSsp 10700 HA pair. The NSsp 10700 supports Active/Passive high availability with stateful synchronization. The NSsp datasheet prints no clustering mode, so none is claimed for this appliance.
What is the difference between the NSsp 10700 and the NSsp 11700?
Both run SonicOS 7. The NSsp 10700 is rated at 42 Gbps firewall inspection throughput, 28 Gbps Threat Prevention throughput and 15,000,000 concurrent SPI connections; the NSsp 11700 is rated at 47 Gbps, 37 Gbps and 20,000,000. Check both interface sets in the specification tables.
Does the 02-SSC-1717 include SonicWall support?
The 02-SSC-1717 is a dedicated High Availability appliance. It must be paired with a regular NSsp 10700. Once the two are associated on MySonicWall, the HA unit synchronizes its licensing with the primary appliance. Network Devices Inc. confirms the pairing and licensing before the order is placed.
How is the SonicWall NSsp 10700 02-SSC-1717 managed?
The NSsp 10700 is managed through Network Security Manager (NSM) 3.0 and above, and locally through the SonicOS web interface and CLI. Firewall policy, VPN and high availability are configured on the appliance; the HA unit's licensing synchronizes with the primary appliance in the pair. SonicWall includes centralized management and alerting as part of support, so NSM management needs an active support contract or security bundle.
What condition is the 02-SSC-1717 sold in, and what warranty applies?
Network Devices Inc. supplies the 02-SSC-1717 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
