- Canadian Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
Two vCPUs and 6 Gbps of firewall inspection, with five times the connection capacity of the XS.
- 6 Gbps firewall inspection, 1.6 Gbps with threat prevention on
- Two vCPUs and 4-6 GB of memory
- 225,000 SPI connections — more than five times the XS
- 1,500 site-to-site VPN tunnels and 50 IPSec VPN clients (1,000 maximum)
- 4 Gbps of IPS throughput and 800 Mbps of TLS/SSL inspection
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall NSv S Totalsecure Secure Connect Service Suite - 1 Year #03-SSC-9414Get a Quote
-
SonicWall NSv S Totalsecure Essential Edition - 1 Year #03-SSC-9417Get a Quote
-
SonicWall NSv S Totalsecure Advanced Edition - 1 Year #03-SSC-9412Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall NSv S Secure Upgrade Plus Essential Edition - 2 Year #03-SSC-9443Get a Quote
-
SonicWall NSv S Secure Upgrade Plus Essential Edition - 3 Year #03-SSC-9434Get a Quote
-
SonicWall NSv S Secure Upgrade Plus - Advanced Edition - 2 Year #03-SSC-9442Get a Quote
-
SonicWall NSv S Secure Upgrade Plus - Advanced Edition - 3 Year #03-SSC-9424Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Security Suite For NSv S - 2 Year #03-SSC-9402Get a Quote
-
SonicWall Essential Protection Security Suite For NSv S - 3 Year #03-SSC-9403Get a Quote
-
SonicWall Essential Protection Security Suite For NSv S - 4 Year #03-SSC-9404Get a Quote
-
SonicWall Essential Protection Security Suite For NSv S - 5 Year #03-SSC-9405Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite For NSv S - 1 Year #03-SSC-8558Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv S - 2 Year #03-SSC-8578Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv S - 3 Year #03-SSC-8591Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv S - 4 Year #03-SSC-8604Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv S - 5 Year #03-SSC-8617Get a Quote
High Availability
The second appliance in an active/standby pair, plus the licence that converts one back to a standalone unit.
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall NSv S High Availability #03-SSC-9446Get a Quote
Advanced Reporting and Analytics (NSM On-Prem)
Log retention and reporting against a Network Security Manager instance you run yourself, in 7-day and 365-day retention tiers.
SonicWall Advanced Reporting and Analytics (NSM On-Prem) (Service subscription - appliance required)
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv S - 1 Year #03-SSC-8813Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv S - 2 Year #03-SSC-8815Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv S - 3 Year #03-SSC-8817Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv S - 4 Year #03-SSC-8819Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv S - 5 Year #03-SSC-8821Get a Quote
Advanced Reporting and Analytics (SaaS)
The same reporting hosted by SonicWall, in 7, 30, 90 and 365-day retention tiers. The retention period is part of the part number, so check it against the retention your auditor asks for.
SonicWall Advanced Reporting and Analytics (SaaS) (Service subscription - appliance required)
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv S - 1 Year #03-SSC-8564Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv S - 2 Year #03-SSC-8575Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv S - 3 Year #03-SSC-8588Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv S - 4 Year #03-SSC-8601Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv S - 5 Year #03-SSC-8614Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv S - 1 Year #03-SSC-8568Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv S - 2 Year #03-SSC-8573Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv S - 3 Year #03-SSC-8586Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv S - 4 Year #03-SSC-8599Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv S - 5 Year #03-SSC-8612Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv S - 1 Year #03-SSC-8843Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv S - 2 Year #03-SSC-8845Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv S - 3 Year #03-SSC-8847Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv S - 4 Year #03-SSC-8849Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv S - 5 Year #03-SSC-8851Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv S - 1 Year #03-SSC-8842Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv S - 2 Year #03-SSC-8844Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv S - 3 Year #03-SSC-8846Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv S - 4 Year #03-SSC-8848Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv S - 5 Year #03-SSC-8850Get a Quote
Secure Connect Security Suite
The suite built around Cloud Secure Edge: the gateway services plus SonicWall’s private-access connector, for a virtual firewall whose job is remote and site-to-site access rather than a physical perimeter.
SonicWall Secure Connect Security Suite (Service subscription - licence required)
-
SonicWall Secure Connect Security Suite For NSv S - 1 Year #03-SSC-8566Get a Quote
-
SonicWall Secure Connect Security Suite For NSv S - 2 Year #03-SSC-8570Get a Quote
-
SonicWall Secure Connect Security Suite For NSv S - 3 Year #03-SSC-8583Get a Quote
-
SonicWall Secure Connect Security Suite For NSv S - 4 Year #03-SSC-8596Get a Quote
-
SonicWall Secure Connect Security Suite For NSv S - 5 Year #03-SSC-8609Get a Quote
SonicWall NSv S Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOSX 8 |
|---|---|
| Supported Hypervisors | VMware ESXi, Microsoft Hyper-V, KVM (Ubuntu/CentOS), Proxmox |
| Supported Public Clouds | AWS and Microsoft Azure, including the AWS and Azure US Government regions (US East and West) |
| Supported AWS Instance Types | c5.large, c5n.large, c5d.large, m5.large, m5n.large |
| Supported Azure Instance Types | Standard_DD2v4, Standard_D2ds_v4, Standard_D2s_v4 |
| Licensing | BYOL and PAYG (PAYG is currently available on AWS only) |
| Maximum Supported vCPUs | 2 |
| Interface Count (ESXi / Hyper-V / KVM / Proxmox / AWS / Azure) | 8 / 8 / 8 / 8 / 2 / 2 |
| Management and Data Plane Cores | 1 management / 1 data plane |
| Minimum Memory | 4 GB (with jumbo frames disabled) |
| Maximum Memory | 6 GB (with jumbo frames enabled; not supported on Azure or AWS) |
| Supported IP Addresses / Nodes | Unlimited |
| Minimum Storage | 60 GB |
| Single Sign-On Users | 500 |
| Logging | Analyzer, local log, Syslog |
| High Availability | Active/Passive. Available on VMware ESXi, KVM, Azure, Microsoft Hyper-V and Proxmox; the NSv S uses a D3v2 VM size. Not supported on AWS. |
Firewall and VPN Performance
| Firewall Inspection Throughput | 6 Gbps |
|---|---|
| Threat Prevention Throughput | 1.6 Gbps |
| IPS Throughput | 4 Gbps |
| TLS/SSL Inspection and Decryption Throughput (DPI SSL) | 800 Mbps |
| VPN Throughput | 1.4 Gbps |
| Connections per Second | 13,760 |
| Maximum Connections (SPI) | 225,000 |
| Maximum Connections (DPI) | 125,000 |
| Maximum Connections (DPI SSL) | 8,000 |
VPN and Remote Access
| Site-to-Site VPN Policies | 75 |
|---|---|
| Site-to-Site VPN Tunnels | 1,500 |
| IPSec VPN Clients | 50 (1,000 maximum) |
| SSL VPN Clients Included | 2 |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-1, Suite B Cryptography, Common Access Card (CAC) |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-Based VPN | RIP, OSPF, BGP |
| SSL VPN Clients (Maximum) | 100 |
Security Services
| Deep Packet Inspection Services | Gateway anti-virus, anti-spyware, intrusion prevention, TLS/SSL/SSH decryption and inspection |
|---|---|
| Content Filtering Service | Reputation-based Content Filtering Service (CFS 5.0), URL filtering, proxy avoidance, keyword blocking, policy-based filtering, HTTP header insertion |
| DNS Security | DNS filtering and DNS proxy |
| Application Identification and Control | Application control, application bandwidth management, custom application signatures, data leakage prevention, reporting over NetFlow/IPFIX |
| Capture Advanced Threat Protection | Real-Time Deep Memory Inspection, cloud multi-engine analysis, virtualized sandboxing, hypervisor-level analysis, full system emulation, block until verdict |
| SD-WAN and ZTNA | Secure SD-WAN with intelligent routing, auto-provision VPN, Secure Private Access to Cloud Secure Edge |
Networking
| IP Address Assignment | Static, DHCP, internal DHCP server and DHCP relay (DHCP server and relay are supported on private cloud, not on public cloud) |
|---|---|
| NAT Modes | 1:1, many:1, 1:many, flexible NAT (overlapping IPs), PAT |
| Logical VLAN and Tunnel Interfaces | 128 maximum. VLAN interfaces are not supported on Azure or AWS. |
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1 |
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix |
| Local User Database | 250 |
Figures are SonicWall’s published NSv XS/S/M/L specifications (datasheet, August 2026). Throughput is measured per RFC 2544 with default settings; actual performance depends on the host and on which services are enabled.
Public cloud is not the same deployment as private: VLAN interfaces are unavailable on AWS and Azure, jumbo frames are unsupported on both, high availability is unavailable on AWS, and the interface count is lower on the XS, S and M.
NSv S
Two vCPUs and 6 Gbps of firewall inspection, with five times the connection capacity of the XS.
Where the NSv S fits
The first NSv sized for real traffic rather than a single workload. Two vCPUs take firewall inspection to 6 Gbps and connection capacity to 225,000, which is the figure that usually matters — the XS runs out of sessions well before it runs out of throughput. It is also the model SonicWall calls out for high availability on Azure, where the pair needs a D3v2 VM size.
Interested in the SonicWall NSv S?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote