SonicWall NSa 6800 03-SSC-8011 1U Rackmount Firewall, Secure Upgrade Appliance Only
Overview
The SonicWall Gen 8 NSa Series is a 1U rack-mountable next-generation firewall line with simplified licensing across Hardware Only, Advanced and Managed Protection options. The 03-SSC-8011 is the NSa 6800 Secure Upgrade appliance. It carries no attached subscription and is offered only to SonicProtect customers upgrading their hardware. Support and optional security subscriptions are otherwise sold separately.
Technical Details
The SonicWall NSa 6800 03-SSC-8011 is a 1U rackmount next-generation firewall running SonicOS 8, with 16×1GbE RJ45, 4×10/5/2.5/1GbE, 8×10/5/2.5/1GbE SFP/SFP+, 4×40GbE QSFP. Threat Prevention throughput is 40 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled (55 Gbps firewall inspection), and it holds up to 20,000,000 concurrent SPI connections. This part number is Appliance Only: SonicWall support and optional security subscriptions are sold separately. It is used at a campus or main-office internet edge, in the DMZ and between user and server segments.
Best For
The NSa 6800 suits a campus or main-office internet edge that needs 40 Gbps of Threat Prevention throughput and up to 20,000,000 concurrent SPI connections. It suits existing SonicProtect subscribers upgrading their hardware. Size against the Threat Prevention figure, not the firewall inspection throughput.
Not suitable if:
- your inspected traffic exceeds 40 Gbps, the published Threat Prevention throughput
- you need security services included in the part number, since this one is Appliance Only
- you do not hold an active SonicProtect subscription, since this upgrade appliance is restricted to SonicProtect customers
03-SSC-8011 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 16×1GbE RJ45, 4×10/5/2.5/1GbE, 8×10/5/2.5/1GbE SFP/SFP+, 4×40GbE QSFP |
| Max Port Speed | 40 GbE |
| Management & Console Ports | 1×1GbE RJ45 out-of-band management, 1×Console, 2×USB (type-A) |
| Performance & Scale | |
| Firewall Throughput | 55 Gbps (RFC 2544) |
| Threat Prevention Throughput | 40 Gbps (Gateway AV, Anti-Spyware, IPS and Application Control enabled) |
| TLS/SSL Inspection Throughput | 10.5 Gbps (DPI SSL) |
| IPsec VPN Throughput | 27 Gbps (1418-byte UDP, AESGMAC16-256) |
| Maximum Concurrent Sessions | 20,000,000 (SPI) |
| New Sessions per Second | 280,000 |
| Maximum DPI Connections | 15,000,000 (DPI) |
| Maximum IPsec VPN Tunnels | 6,000 (site-to-site) |
| Hardware & Memory | |
| Onboard Storage | 512 GB (expandable up to 1 TB) |
| Power & Thermal | |
| Power Supply | 450 W; 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 201.7 W |
| Physical & Environmental | |
| Form Factor | 1U Rackmount |
| Dimensions (H x W x D) | 1.73 × 17.01 × 16.77 in (4.4 × 43.2 × 42.6 cm) |
| Weight | 16.3 lb (7.4 kg) |
| Operating Temperature | 32 to 104 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 8 |
| High Availability | Active/Passive with stateful synchronization |
| Central Management Platform | Network Security Manager (NSM) 3.0 and above |
| Routing Protocols & IPv6 | BGP, OSPF, RIPv1/v2, static routes, policy-based routing; IPv6 certified |
FAQ
Does the SonicWall NSa 6800 03-SSC-8011 include a security subscription?
No. The 03-SSC-8011 is Appliance Only: firewall, VPN and routing run on SonicOS 8, while SonicWall support and security subscriptions such as the Advanced Protection Security Suite are sold separately. SonicWall's Gen 8 Architecture and Services datasheet notes that firewall management is included with Gen 8 firewalls that have support or an active security bundle.
How much traffic can the SonicWall NSa 6800 03-SSC-8011 handle?
SonicWall publishes no user count, so size the NSa 6800 on its figures. Firewall inspection throughput is 55 Gbps, but Threat Prevention throughput is 40 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled; size against that. It holds 20,000,000 concurrent SPI connections and 15,000,000 DPI connections, and opens 280,000 new connections per second.
What interfaces does the SonicWall NSa 6800 03-SSC-8011 have?
The NSa 6800 provides 16×1GbE RJ45, 4×10/5/2.5/1GbE, 8×10/5/2.5/1GbE SFP/SFP+, 4×40GbE QSFP. Management and console connectivity is 1×1GbE RJ45 out-of-band management, 1×Console, 2×USB (type-A). Transceivers for any SFP-type ports are sold separately.
Does the SonicWall NSa 6800 03-SSC-8011 support high availability?
The NSa 6800 supports Active/Passive high availability with stateful synchronization. SonicWall's Gen 8 Architecture and Services datasheet adds Active-Active DPI high availability for the NSa 4800, 5800 and 6800.
What is the difference between the NSa 6800 and the NSa 5800?
Both run the same SonicOS 8. The NSa 6800 is rated at 55 Gbps firewall inspection throughput, 40 Gbps Threat Prevention throughput and 20,000,000 concurrent SPI connections; the NSa 5800 is rated at 30 Gbps, 24 Gbps and 8,000,000. Check both interface sets in the specification tables.
Who can buy the 03-SSC-8011?
Only SonicProtect customers. The 03-SSC-8011 is upgrade hardware with no attached subscription, offered to existing SonicProtect subscribers only. Network Devices Inc. confirms eligibility before ordering.
Does the 03-SSC-8011 include SonicWall support?
Support is not included with an Appliance Only part number. SonicWall support and optional security subscriptions are sold separately, and Network Devices Inc. confirms the correct support option before the order is placed.
How is the SonicWall NSa 6800 03-SSC-8011 managed?
The NSa 6800 is managed through Network Security Manager (NSM) 3.0 and above, and locally through the SonicOS web interface and CLI. Firewall policy, SD-WAN, VPN and high availability are configured on the appliance; the security services on it are licensed separately unless this part number bundles them. SonicWall includes centralized management and alerting as part of support, so NSM management needs an active support contract or security bundle.
What condition is the 03-SSC-8011 sold in, and what warranty applies?
Network Devices Inc. supplies the 03-SSC-8011 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
