- Canadian Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
SonicWall NSa 3800
Twenty-four gigabit ports and ten SFP+ cages — the densest copper-and-fibre mix in the range below the 6800.
SonicOS 812 Gbps firewall8 Gbps threat prevention1U rack-mount
- 12 Gbps firewall inspection, 8 Gbps with threat prevention on
- 24 x 1GbE, 10 x 10/5/2.5/1G SFP/SFP+, 2 x USB (Type-A), 1 console, 1 management port
- 3,000,000 SPI connections, 1,200,000 with deep packet inspection
- 8 Gbps IPSec VPN and 3,000 site-to-site tunnels
- 256 GB (expandable to 512 GB) of on-board storage
Ordering information
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The firewall on its own, with no security subscription attached. Choose this only when you are adding the unit to an existing licence pool.
SonicWall NSa 3800 Appliance
-
SonicWall NSa 3800, Appliance Only #03-SSC-1843Get a Quote
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall NSa 3800 TotalSecure - Advanced Edition - 1 Year #03-SSC-4646Get a Quote
-
SonicWall NSa 3800 TotalSecure - Essential Edition - 1 Year #03-SSC-4649Get a Quote
-
SonicWall NSa 3800 TotalSecure Managed Edition - 1 Year #03-SSC-4658Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall NSa 3800 Secure Upgrade Plus Advanced Edition - 3 Year #03-SSC-4652Get a Quote
-
SonicWall NSa 3800 Secure Upgrade Plus - Advanced Edition - 2 Year #03-SSC-4657Get a Quote
-
SonicWall NSa 3800 Secure Upgrade Appliance Only No Attached Subscription (Existing Sonicprotect Users Only) #03-SSC-5827Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Service Suite for NSa 3800 - 1 Year #03-SSC-3504Get a Quote
-
SonicWall Essential Protection Service Suite for NSa 3800 - 2 Year #03-SSC-3506Get a Quote
-
SonicWall Essential Protection Service Suite for NSa 3800 - 3 Year #03-SSC-3508Get a Quote
-
SonicWall Essential Protection Service Suite for NSa 3800 - 4 Year #03-SSC-3510Get a Quote
-
SonicWall Essential Protection Service Suite for NSa 3800 - 5 Year #03-SSC-3512Get a Quote
-
SonicWall NSa 3800 High Availability #03-SSC-4663Get a Quote
-
SonicWall NSa 3800 HA Conversion Licence To Standalone Unit #03-SSC-5812Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite for NSa 3800 - 1 Year #03-SSC-3497Get a Quote
-
SonicWall Advanced Protection Security Suite for NSa 3800 - 2 Year #03-SSC-3498Get a Quote
-
SonicWall Advanced Protection Security Suite for NSa 3800 - 3 Year #03-SSC-3499Get a Quote
-
SonicWall Advanced Protection Security Suite for NSa 3800 - 4 Year #03-SSC-3500Get a Quote
-
SonicWall Advanced Protection Security Suite for NSa 3800 - 5 Year #03-SSC-3501Get a Quote
Managed Protection Security Suite
The Advanced suite with SonicWall’s own management and monitoring on top. Sold as a renewal and available to three years.
SonicWall Managed Protection Security Suite Renewal / Upgrade (Renewal only - requires the TotalSecure Managed Edition appliance SKU)
-
SonicWall Managed Protection Security Service for NSa 3800 - 1 Year #03-SSC-3337Get a Quote
-
SonicWall Managed Protection Security Service for NSa 3800 - 2 Year #03-SSC-3348Get a Quote
-
SonicWall Managed Protection Security Service for NSa 3800 - 3 Year #03-SSC-3359Get a Quote
Capture Advanced Threat Protection
Multi-engine cloud sandboxing for files the gateway cannot judge on signature alone.
SonicWall Capture Advanced Threat Protection (Service subscription - appliance required)
-
SonicWall Capture Advanced Threat Protection for NSa 3800 - 1 Year #03-SSC-3342Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSa 3800 - 2 Year #03-SSC-3353Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSa 3800 - 3 Year #03-SSC-3364Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSa 3800 - 4 Year #03-SSC-3375Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSa 3800 - 5 Year #03-SSC-3386Get a Quote
Gateway Anti-Malware, IPS and Application Control
The three inspection engines on their own, for a site that licenses content filtering separately.
SonicWall Gateway Anti-Malware, IPS and Application Control (Service subscription - appliance required)
-
SonicWall Gateway Anti-Malware, Intrusion Prevention And Application Control for NSa 3800 - 1 Year #03-SSC-3344Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention And Application Control for NSa 3800 - 2 Year #03-SSC-3355Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention And Application Control for NSa 3800 - 3 Year #03-SSC-3366Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention And Application Control for NSa 3800 - 4 Year #03-SSC-3377Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention And Application Control for NSa 3800 - 5 Year #03-SSC-3388Get a Quote
Content Filtering Premium
Reputation-based URL filtering with keyword and content scanning.
SonicWall Content Filtering Premium (Service subscription - appliance required)
-
SonicWall Content Filtering Service Premium Business Edition for NSa 3800 - 1 Year #03-SSC-3335Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSa 3800 - 2 Year #03-SSC-3346Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSa 3800 - 3 Year #03-SSC-3357Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSa 3800 - 4 Year #03-SSC-3368Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSa 3800 - 5 Year #03-SSC-3379Get a Quote
DNS Security Service
Blocks resolution of known-malicious domains before a connection is opened.
SonicWall DNS Security Service (Service subscription - appliance required)
-
SonicWall DNS Security Service for NSa 3800 - 1 Year #03-SSC-3339Get a Quote
-
SonicWall DNS Security Service for NSa 3800 - 2 Year #03-SSC-3350Get a Quote
-
SonicWall DNS Security Service for NSa 3800 - 3 Year #03-SSC-3361Get a Quote
-
SonicWall DNS Security Service for NSa 3800 - 4 Year #03-SSC-3372Get a Quote
-
SonicWall DNS Security Service for NSa 3800 #03-SSC-3383Get a Quote
24x7 Support
Round-the-clock telephone and online support with firmware entitlement and advance hardware replacement.
SonicWall 24x7 Support (Support contract)
-
SonicWall 24X7 Support for NSa 3800 - 1 Year #03-SSC-3341Get a Quote
-
SonicWall 24X7 Support for NSa 3800 - 2 Year #03-SSC-3352Get a Quote
-
SonicWall 24X7 Support for NSa 3800 - 3 Year #03-SSC-3363Get a Quote
-
SonicWall 24X7 Support for NSa 3800 - 4 Year #03-SSC-3374Get a Quote
-
SonicWall 24X7 Support for NSa 3800 - 5 Year #03-SSC-3385Get a Quote
Standard Support
Business-hours support with firmware entitlement and hardware replacement.
SonicWall Standard Support (Support contract)
-
SonicWall 8X5 Support for NSa 3800 - 1 Year #03-SSC-5814Get a Quote
-
SonicWall 8X5 Support for NSa 3800 - 2 Year #03-SSC-5815Get a Quote
-
SonicWall 8X5 Support for NSa 3800 - 3 Year #03-SSC-5816Get a Quote
-
SonicWall 8X5 Support for NSa 3800 - 4 Year #03-SSC-5817Get a Quote
-
SonicWall 8X5 Support for NSa 3800 - 5 Year #03-SSC-5818Get a Quote
Comprehensive Anti-Spam Service
Inbound mail filtering at the gateway, scored on SonicWall’s own reputation data before the message reaches the mail server.
SonicWall Comprehensive Anti-Spam Service (Service subscription - appliance required)
-
SonicWall Comprehensive Antispam Service for NSa 3800 - 1 Year #03-SSC-3343Get a Quote
-
SonicWall Comprehensive Antispam Service for NSa 3800 - 2 Year #03-SSC-3354Get a Quote
-
SonicWall Comprehensive Antispam Service for NSa 3800 - 3 Year #03-SSC-3365Get a Quote
-
SonicWall Comprehensive Antispam Service for NSa 3800 - 4 Year #03-SSC-3376Get a Quote
-
SonicWall Comprehensive Antispam Service for NSa 3800 - 5 Year #03-SSC-3387Get a Quote
Advanced Reporting and Analytics (SaaS)
The same reporting hosted by SonicWall, in 7, 30, 90 and 365-day retention tiers. The retention period is part of the part number, so check it against the retention your auditor asks for.
SonicWall Advanced Reporting and Analytics (SaaS) (Service subscription - appliance required)
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics for NSa 3800 - 1 Year #03-SSC-5391Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics for NSa 3800 - 2 Year #03-SSC-5392Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics for NSa 3800 - 3 Year #03-SSC-5393Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics for NSa 3800 - 4 Year #03-SSC-5394Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics for NSa 3800 - 5 Year #03-SSC-5395Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics for NSa 3800 - 1 Year #03-SSC-5397Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics for NSa 3800 - 2 Year #03-SSC-5398Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics for NSa 3800 - 3 Year #03-SSC-5399Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics for NSa 3800 - 4 Year #03-SSC-5400Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics for NSa 3800 - 5 Year #03-SSC-5401Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics for NSa 3800 - 1 Year #03-SSC-5403Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics for NSa 3800 - 2 Year #03-SSC-5404Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics for NSa 3800 - 3 Year #03-SSC-5405Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics for NSa 3800 - 4 Year #03-SSC-5406Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics for NSa 3800 - 5 Year #03-SSC-5407Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics for NSa 3800 - 1 Year #03-SSC-5409Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics for NSa 3800 - 2 Year #03-SSC-5410Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics for NSa 3800 - 3 Year #03-SSC-5411Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics for NSa 3800 - 4 Year #03-SSC-5412Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics for NSa 3800 - 5 Year #03-SSC-5413Get a Quote
Device Management and Basic Reporting (SaaS)
Cloud management with 7 days of basic reporting — the entry tier, for sites that do not need the full analytics retention.
SonicWall Device Management and Basic Reporting (SaaS) (Service subscription - appliance required)
-
SonicWall SaaS Device Management And 7 Day Basic Reporting for NSa 3Xxx - 1 Year #03-SSC-9381Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting for NSa 3Xxx - 2 Year #03-SSC-9382Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting for NSa 3Xxx - 3 Year #03-SSC-9383Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting for NSa 3Xxx - 4 Year #03-SSC-9384Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting for NSa 3Xxx - 5 Year #03-SSC-9385Get a Quote
Technical specifications
SonicWall NSa 3800 Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOS 8 |
|---|---|
| Interfaces | 24 x 1GbE, 10 x 10/5/2.5/1G SFP/SFP+, 2 x USB (Type-A), 1 console, 1 management port |
| Internal Storage (expansion) | 256 GB (expandable to 512 GB) |
| Centralized Management | Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs |
| Logical VLAN and Tunnel Interfaces | 256 |
| SAML Single Sign-On Users | 40,000 |
| Access Points Supported | 512 |
Firewall and VPN Performance
| Firewall Inspection Throughput | 12 Gbps |
|---|---|
| Threat Prevention Throughput | 8 Gbps |
| Application Inspection Throughput | 9 Gbps |
| IPS Throughput | 8 Gbps |
| Anti-Malware Inspection Throughput | 8 Gbps |
| TLS/SSL Inspection and Decryption Throughput | 3 Gbps |
| IPSec VPN Throughput | 8 Gbps |
| Connections per Second | 90,000 |
| Maximum Connections (SPI) | 3,000,000 |
| Maximum Connections (DPI) | 1,200,000 |
| Maximum Connections (TLS) | 300,000 |
VPN and ZTNA
| Site-to-Site VPN Tunnels | 3,000 |
|---|---|
| IPSec VPN Clients | 50 (1,000 maximum) |
| SSL VPN Licences | 2 (500 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-1, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14 |
| Route-Based VPN | RIP, OSPF, BGP |
| Certificate Support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| NetExtender | Microsoft Windows 10, Windows 11 and Linux |
| Mobile Connect | Apple iOS, macOS, Google Android, Chrome OS, Windows |
| SonicWall Private Access (Cloud Secure Edge) | Included in the 3&Free loyalty programme |
Security Services
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption |
|---|---|
| Content Filtering Service | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, filtering on file types such as ActiveX, Java and Cookies, allow/forbid lists |
| Comprehensive Anti-Spam Service | Yes |
| Application Visualization | Yes |
| Application Control | Yes |
| Capture Advanced Threat Protection | Yes |
| DNS Filtering | Yes |
Networking
| IP Address Assignment | Static (DHCP, PPPoE, L2TP and PPTP client), internal DHCP server, DHCP relay |
|---|---|
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, Common Access Card (CAC) |
| Local User Database | 1,000 |
| VoIP | Full H.323v1-5, SIP |
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Certifications | IPv6/USGv6 |
| High Availability | Active/Passive with stateful synchronization |
Hardware and Power
| Form Factor | 1U rack-mountable |
|---|---|
| Power Supply | 150 W |
| Input Power | 100-240 VAC, 50-60 Hz |
| Maximum Power Consumption | 102.3 W |
| Redundant Power Supply | Optional (1) |
| Total Heat Dissipation | 341 BTU/hr |
| Dimensions (W x D x H) | 43 x 32.5 x 4.5 cm |
| Weight | 4.6 kg |
| Shipping Weight | 7.2 kg |
| Operating Temperature | 0°C to +40°C |
| Storage Temperature | -40°C to +70°C |
| Humidity | 5-95% non-condensing |
| Regulatory Compliance | FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class A, KCC/MSIP, BSMI, MTCTE/TEC, CB |
Notes
Figures are SonicWall’s published Gen 8 NSa specifications (datasheet, January 2026).
Managed Protection Security Suite is a renewal and runs to three years; the other suites run to five.
Overview
NSa 3800
Twenty-four gigabit ports and ten SFP+ cages — the densest copper-and-fibre mix in the range below the 6800.
Where the NSa 3800 fits
Twenty-four gigabit ports and ten SFP+ cages — the densest copper-and-fibre mix in the range below the 6800. It suits a site that needs fibre uplinks in quantity — ten SFP/SFP+ cages, more than any other model below the 6800. Every Gen 8 NSa runs the same SonicOS 8 build and the same security services, so the choice between them is capacity rather than capability.
Interested in the SonicWall NSa 3800?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote