- Canadian Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
SonicWall NSsp 11700
The same 1U chassis as the 10700 with 47 Gbps of firewall inspection, 20 million SPI connections and twice the site-to-site tunnels.
SonicOS 747 Gbps firewall35 Gbps threat prevention1U rack-mount
- 47 Gbps firewall inspection, 35 Gbps with threat prevention on
- 2 x 100/40G QSFP28, 8 x 25/10/5/2.5G QSFP+, 4 x 10/5/2.5G SFP+, 4 x 10/5/2.5/1G Cu and 16 x 1GbE
- 20,000,000 SPI connections, 17,000,000 with deep packet inspection
- 12,000 site-to-site VPN tunnels — twice the 10700
- 1.5 TB of built-in storage and redundant hot-swappable power
Ordering information
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The firewall on its own, with no security subscription attached. Choose this only when you are adding the unit to an existing licence pool.
SonicWall NSsp 11700 Appliance
-
SonicWall NSSP 11700 - Superior Next-Generation Firewall for Maximum Security and Performance (Appliance Only, No Subscription) #02-SSC-8399Get a Quote
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall NSSP 11700, TotalSecure - Advanced Edition - Includes Appliance, Advanced Protection Security Suite, and Support - 1 Year #02-SSC-3680Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall NSSP 11700 Secure Upgrade Appliance Only No Attached Subscription (Existing SonicWall Customers Only) #02-SSC-2293Get a Quote
-
SonicWall NSSP 11700 Secure Upgrade Plus - Includes Appliance and Advanced Protection Services Suite - 2 Year #02-SSC-3916Get a Quote
-
SonicWall NSSP 11700 Secure Upgrade Plus - Includes Appliance and Advanced Protection Services Suite - 3 Year #02-SSC-3915Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite for NSSP 11700 - 1 Year #02-SSC-1553Get a Quote
-
SonicWall Advanced Protection Security Suite for NSSP 11700 - 2 Year #02-SSC-1554Get a Quote
-
SonicWall Advanced Protection Security Suite for NSSP 11700 - 3 Year #02-SSC-1555Get a Quote
-
SonicWall Advanced Protection Security Suite for NSSP 11700 - 4 Year #02-SSC-1556Get a Quote
-
SonicWall Advanced Protection Security Suite for NSSP 11700 - 5 Year #02-SSC-1557Get a Quote
Capture Advanced Threat Protection
Multi-engine cloud sandboxing for files the gateway cannot judge on signature alone.
SonicWall Capture Advanced Threat Protection (Service subscription - appliance required)
-
SonicWall Capture Advanced Threat Protection for NSSP 11700 - 1 Year #02-SSC-1559Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSSP 11700 - 2 Year #02-SSC-1560Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSSP 11700 - 3 Year #02-SSC-1561Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSSP 11700 - 4 Year #02-SSC-1562Get a Quote
-
SonicWall Capture Advanced Threat Protection for NSSP 11700 - 5 Year #02-SSC-1563Get a Quote
Gateway Anti-Malware, IPS and Application Control
The three inspection engines on their own, for a site that licenses content filtering separately.
SonicWall Gateway Anti-Malware, IPS and Application Control (Service subscription - appliance required)
-
SonicWall Gateway Anti-Malware, Intursion Prevention and Application Control for NSSP 11700 - 1 Year #02-SSC-1577Get a Quote
-
SonicWall Gateway Anti-Malware, Intursion Prevention and Application Control for NSSP 11700 - 2 Year #02-SSC-1578Get a Quote
-
SonicWall Gateway Anti-Malware, Intursion Prevention and Application Control for NSSP 11700 - 3 Year #02-SSC-1579Get a Quote
-
SonicWall Gateway Anti-Malware, Intursion Prevention and Application Control for NSSP 11700 - 4 Year #02-SSC-1580Get a Quote
-
SonicWall Gateway Anti-Malware, Intursion Prevention and Application Control for NSSP 11700 - 5 Year #02-SSC-1581Get a Quote
Content Filtering Premium
Reputation-based URL filtering with keyword and content scanning.
SonicWall Content Filtering Premium (Service subscription - appliance required)
-
SonicWall Content Filtering Service Premium Business Edition for NSSP 11700 - 1 Year #02-SSC-1571Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSSP 11700 - 2 Year #02-SSC-1572Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSSP 11700 - 3 Year #02-SSC-1573Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSSP 11700 - 4 Year #02-SSC-1574Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for NSSP 11700 - 5 Year #02-SSC-1575Get a Quote
24x7 Support
Round-the-clock telephone and online support with firmware entitlement and advance hardware replacement.
SonicWall 24x7 Support (Support contract)
-
SonicWall 24X7 Support for NSSP 11700 - 1 Year #02-SSC-9996Get a Quote
-
SonicWall 24X7 Support for NSSP 11700 - 2 Year #02-SSC-9997Get a Quote
-
SonicWall 24X7 Support for NSSP 11700 - 3 Year #02-SSC-9998Get a Quote
-
SonicWall 24X7 Support for NSSP 11700 - 4 Year #02-SSC-9999Get a Quote
-
SonicWall 24X7 Support for NSSP 11700 - 5 Year #02-SSC-1551Get a Quote
Standard Support
Business-hours support with firmware entitlement and hardware replacement.
SonicWall Standard Support (Support contract)
-
SonicWall Standard Support for NSSP 11700 - 1 Year #02-SSC-1583Get a Quote
-
SonicWall Standard Support for NSSP 11700 - 2 Year #02-SSC-1584Get a Quote
-
SonicWall Standard Support for NSSP 11700 - 3 Year #02-SSC-1585Get a Quote
-
SonicWall Standard Support for NSSP 11700 - 4 Year #02-SSC-1586Get a Quote
-
SonicWall Standard Support for NSSP 11700 - 5 Year #02-SSC-1587Get a Quote
High Availability
The second appliance in an active/standby pair, plus the licence that converts one back to a standalone unit.
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall NSSP 11700 High Availability #02-SSC-1719Get a Quote
Comprehensive Anti-Spam Service
Inbound mail filtering at the gateway, scored on SonicWall’s own reputation data before the message reaches the mail server.
SonicWall Comprehensive Anti-Spam Service (Service subscription - appliance required)
-
SonicWall Comprhensive Anti-Spam Service for NSSP 11700 - 1 Year #02-SSC-1565Get a Quote
-
SonicWall Comprhensive Anti-Spam Service for NSSP 11700 - 2 Year #02-SSC-1566Get a Quote
-
SonicWall Comprhensive Anti-Spam Service for NSSP 11700 - 3 Year #02-SSC-1567Get a Quote
-
SonicWall Comprhensive Anti-Spam Service for NSSP 11700 - 4 Year #02-SSC-1568Get a Quote
-
SonicWall Comprhensive Anti-Spam Service for NSSP 11700 - 5 Year #02-SSC-1569Get a Quote
Device Management and Basic Reporting (SaaS)
Cloud management with 7 days of basic reporting — the entry tier, for sites that do not need the full analytics retention.
SonicWall Device Management and Basic Reporting (SaaS) (Service subscription - appliance required)
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For Nssp 11Xxx - 1 Year #03-SSC-9346Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For Nssp 11Xxx - 2 Year #03-SSC-9347Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For Nssp 11Xxx - 3 Year #03-SSC-9348Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For Nssp 11Xxx - 4 Year #03-SSC-9349Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For Nssp 11Xxx - 5 Year #03-SSC-9350Get a Quote
SonicProtect Bundle
SonicWall’s multi-year services bundle, priced per chassis family rather than per model. Sold in three and five-year terms only.
SonicWall SonicProtect Bundle (Service subscription - appliance required)
-
SonicWall Gen 7 Sonicprotect Bundle For NSSP 11K Family - 3 Year #03-SSC-2536Get a Quote
-
SonicWall Gen 7 Sonicprotect Bundle For NSSP 11K Family - 5 Year #03-SSC-2535Get a Quote
Gen 6 Firewall Replacement
A replacement chassis for a site still running Gen 6 hardware, bundled with a year of the Advanced Protection Security Suite.
SonicWall Gen 6 Firewall Replacement Renewal / Upgrade (Trade-up - requires a Gen 6 or Gen 6.5 unit on record)
-
SonicWall NSSP 11700 Gen6 Firewall Replacement With APSS - 1 Year #03-SSC-8137Get a Quote
Technical specifications
SonicWall NSsp 11700 Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOS 7.0.1 |
|---|---|
| Interfaces | 2 x 100/40G QSFP28, 8 x 25/10/5/2.5G QSFP+, 4 x 10/5/2.5G SFP+, 4 x 10/5/2.5/1G (Cu), 16 x 1GbE, 2 x USB 3.0, 1 console, 1 management port |
| Built-in Storage | 1.5 TB (1 TB SSD plus 512 GB M.2) |
| Centralized Management | CLI, SSH, Web UI, REST APIs |
| Single Sign-On Users | 100,000 |
| Logging | Analyzer, local log, Syslog, IPFIX, NetFlow |
Firewall and VPN Performance
| Firewall Inspection Throughput | 47 Gbps |
|---|---|
| Threat Prevention Throughput | 35 Gbps |
| Application Inspection Throughput | 44 Gbps |
| IPS Throughput | 37 Gbps |
| TLS/SSL Inspection and Decryption Throughput (DPI SSL) | 11.5 Gbps |
| VPN Throughput | 26.7 Gbps |
| Connections per Second | 280,000 |
| Maximum Connections (SPI) | 20,000,000 |
| Maximum Connections (DPI) | 17,000,000 |
| Maximum Connections (DPI SSL) | 1,750,000 |
VPN and Remote Access
| Site-to-Site VPN Tunnels | 12,000 |
|---|---|
| IPSec VPN Clients | 2,000 (6,000 maximum) |
| SSL VPN Licences | 2 (3,000 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-1, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-Based VPN | RIP, OSPF, BGP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms | Microsoft Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10 |
| NetExtender | Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE |
| Mobile Connect | Apple iOS, Mac OS X, Google Android, Kindle Fire, Chrome, Windows 8.1 (Embedded) |
Security Services
| Deep Packet Inspection Services | Gateway anti-virus, anti-spyware, intrusion prevention, TLS/SSL/SSH decryption and inspection |
|---|---|
| Content Filtering Service | URL filtering, proxy avoidance, keyword blocking, policy-based filtering, HTTP header insertion, CFS rating categories |
| Application Identification and Control | Application control, application bandwidth management, custom application signatures, data leakage prevention, reporting over NetFlow/IPFIX |
| Capture Advanced Threat Protection | Real-Time Deep Memory Inspection, cloud multi-engine analysis, virtualized sandboxing, hypervisor-level analysis, full system emulation, block until verdict |
| Traffic Visualization and Analytics | User activity, application / bandwidth / threat usage, cloud-based analytics |
Networking
| Multi-Instance Firewall | Not supported — see the NSsp 15700 |
|---|---|
| VLAN Interfaces | 1,024 |
| Wire Mode | Not supported — see the NSsp 15700 |
| Routing Protocols | BGP4, OSPF, RIPv1/v2, static routes, policy-based routing |
| IP Address Assignment | Static (DHCP, PPPoE, L2TP and PPTP client), internal DHCP server, DHCP relay |
| NAT Modes | 1:1, many:1, 1:many, flexible NAT (overlapping IP), PAT, transparent mode |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) |
| VoIP | Full H.323v1-5, SIP |
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, Common Access Card (CAC) |
| Certifications (in progress) | FIPS 140-2 (with Suite B), UC APL, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS) |
| High Availability | Active/Passive with stateful synchronization |
Hardware and Power
| Form Factor | 1U rack-mountable |
|---|---|
| Power Supply | 2 x 350 W, hot-swappable |
| Input Power | 100-240 VAC, 50-60 Hz |
| Maximum Power Consumption | 155.3 W |
| Fans | 3 (removable) |
| Total Heat Dissipation | 529.57 BTU/hr |
| Dimensions (W x D x H) | 43 x 32.5 x 4.5 cm (16.9 x 12.8 x 1.8 in) |
| Weight | 9.1 kg |
| WEEE Weight | 11 kg |
| Shipping Weight | 14.9 kg |
| Operating Temperature | 0°C to +40°C |
| Storage Temperature | -40°C to +70°C |
| Humidity | 0-90% relative humidity, non-condensing |
| Regulatory Model Number | 1RK54-119 |
| Regulatory Compliance | FCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL, BSMI |
Notes
Figures are SonicWall’s published Gen 7 NSsp Series specifications (datasheet NSsp-US-COG-5224).
Support runs to five years on the 1U models; the NSsp 15700 is listed in one, three and five-year terms only.
Overview
NSsp 11700
The same 1U chassis as the 10700 with 47 Gbps of firewall inspection, 20 million SPI connections and twice the site-to-site tunnels.
Where the NSsp 11700 fits
Physically the same 1U box as the 10700 — same ports, same storage, same power — with more of everything that is measured. 35 Gbps of threat prevention against the 10700’s 27, five million more SPI connections and double the site-to-site tunnels. The tunnel count is the one that usually decides it: a hub terminating thousands of branch VPNs runs out of tunnels long before it runs out of throughput.
Interested in the SonicWall NSsp 11700?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote