We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Silver rack-mount firewall appliance, 43 by 32.5 by 4.5 cm

SonicWall

SonicWall NSa 2800 Firewall Appliance 03-SSC-4689

SKU CH-0373-4FD8W MPN 03-SSC-4689

Rack-mountable firewall delivers 8 Gbps inspection throughput with 3-year advanced protection suite and 2,000 site-to-site VPN tunnels

  • Form FactorRack Mountable
  • SecuritySecurity services Deep Packet Inspection services: Gateway A
  • Encryption StandardEncryption/Authentication: DES, 3DES, AES (128, 192, 256-bit
  • Simultaneous Sessions2,000,000
  • Maximum Users40000
  • VPNVPN and ZTNA Site-to-site VPN tunnels: 2,000 IPSec VPN clien

Hardware NSa 2800

Option Secure Upgrade Plus (Appliance + 3Y APSS) +1Y CSE

  • 8 Gbps firewall throughput handles heavy traffic loads
  • 6 Gbps threat prevention inspects encrypted and clear traffic
  • 2,000 site-to-site VPN tunnels connect distributed offices
  • 3-year Advanced Protection Suite includes cloud reporting
  • Rack-mount 43 x 32.5 x 4.5 cm fits standard cabinets

Mid-size enterprise firewall

The SonicWall NSa 2800 is a rack-mountable firewall appliance built for mid-size and distributed enterprises. It delivers 8 Gbps firewall inspection throughput and 6 Gbps threat prevention throughput with deep packet inspection services including gateway anti-virus, anti-spyware, intrusion prevention and TLS decryption. The bundled 3-year Advanced Protection Security Suite adds cloud-based reporting and comprehensive security services for encrypted and unencrypted traffic.

Verify rack space power and licensing needs

Confirm that a standard 19-inch rack has 43 x 32.5 x 4.5 cm of clearance and that the 100-240 VAC, 4A power input matches the facility supply with a 52.8W maximum draw. Ensure the 40,000 maximum user count and 2,000,000 simultaneous session capacity align with network size. The appliance includes two SSL VPN licenses expandable to 500 and 50 IPSec VPN clients expandable to 1,000, so validate remote access requirements before deployment.

Integrates into high-density 10 GbE networks

The unit fits into environments needing high port density with 10 GbE connectivity for flexible network segmentation. It supports site-to-site VPN tunnels up to 2,000 and route-based VPN with RIP, OSPF and BGP for dynamic routing. Encryption standards cover DES, 3DES and AES at 128, 192 and 256-bit with Suite B cryptography. Compliance certifications include FCC Class A, CE, UL and other international marks for regulated deployments.

Highlights

  • 8 Gbps firewall throughput handles heavy traffic loads
  • 6 Gbps threat prevention inspects encrypted and clear traffic
  • 2,000 site-to-site VPN tunnels connect distributed offices
  • 3-year Advanced Protection Suite includes cloud reporting
  • Rack-mount 43 x 32.5 x 4.5 cm fits standard cabinets

Specifications

BrandSONICWALL
SeriesNSA
ModelNSA 2800
Part Number03-SSC-4689
Form FactorRack Mountable
SecuritySecurity services
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption Content Filtering Service (CFS): Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/ forbid list
Encryption StandardEncryption/Authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Simultaneous Sessions2,000,000
Maximum Users40000
VPNVPN and ZTNA
Site-to-site VPN tunnels: 2,000
IPSec VPN clients (max): 50 (1000)
SSL VPN licenses (max): 2 (500)
Encryption/Authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN: RIP, OSPF, BGP
Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEP
VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported: Microsoft® Windows 10 and Wind
ThroughputFirewall inspection throughput: 8 Gbps
Threat Prevention throughput: 6 Gbps
Application inspection throughput: 7 Gbps
IPS throughput: 7 Gbps
Anti-malware inspection throughput: 6 Gbps
TLS/SSL inspection and decryption throughput: 1.8 Gbps
IPSec VPN throughput: 5.5 Gbps
ComplianceMajor regulatory compliance: FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL6, BSMI
Power Input100-240 VAC, 50-60 Hz, 4A
Max Power Consumption52.8W
FeaturesFirewall:
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
DNS Filtering
Networking:
IP address assignment: Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes: 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoS: Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication: LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO1, Radi
Dimensions43 x 32.5 x 4.5 cm
Weight4.6 lb
Shipping weight7.17 kg
Package size582 × 475 × 196 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

Does the 03-SSC-4689 appliance ship with rack-mount brackets or must they be purchased separately?

The unit is rack mountable by design; brackets are typically included for standard 19-inch rack installation.

The SKU lists a 3-year Advanced Protection bundle plus 1 year CSE — what happens after those periods end?

After three years the Advanced Protection services require renewal; the CSE (Customer Support Entitlement) covers the first year and must also be extended to retain firmware updates and technical support.

In a live network the spec shows 8 Gbps firewall throughput — will encrypted traffic run at that rate?

Encrypted traffic is inspected at the TLS/SSL decryption throughput of 6 Gbps, so enabling full decryption reduces the effective rate to that figure.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.