- Canadian Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
SonicWall NSv XS
The smallest virtual firewall in the range: one vCPU, 2 Gbps of firewall inspection and 2 GB of memory, for a single cloud workload or a small branch.
- 2 Gbps firewall inspection, 800 Mbps with threat prevention on
- One vCPU and 2-4 GB of memory — the smallest footprint in the range
- Runs on VMware ESXi, Hyper-V, KVM, Proxmox, AWS and Azure
- 700 site-to-site VPN tunnels and 25 IPSec VPN clients (100 maximum)
- Secure Connect Security Suite for Cloud Secure Edge private access
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall NSv XS Totalsecure Secure Connect Service Suite - 1 Year #03-SSC-6105Get a Quote
-
SonicWall NSv XS Totalsecure Advanced Edition - 1 Year #03-SSC-6106Get a Quote
-
SonicWall NSv XS Totalsecure Managed Edition - 1 Year #03-SSC-6107Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall NSv XS Secure Upgrade Plus Advanced Edition - 2 Year #03-SSC-6118Get a Quote
-
SonicWall NSv XS Secure Upgrade Plus Advanced Edition - 3 Year #03-SSC-6121Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Security Suite For NSv Xs - 1 Year #03-SSC-4816Get a Quote
-
SonicWall Essential Protection Security Suite For NSv Xs - 2 Year #03-SSC-4896Get a Quote
-
SonicWall Essential Protection Security Suite For NSv Xs - 3 Year #03-SSC-4898Get a Quote
-
SonicWall Essential Protection Security Suite For NSv Xs - 4 Year #03-SSC-4900Get a Quote
-
SonicWall Essential Protection Security Suite For NSv Xs - 5 Year #03-SSC-4902Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite For NSv XS - 1 Year #03-SSC-4828Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv XS - 2 Year #03-SSC-4839Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv XS - 3 Year #03-SSC-4852Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv XS - 4 Year #03-SSC-4865Get a Quote
-
SonicWall Advanced Protection Security Suite For NSv XS - 5 Year #03-SSC-4878Get a Quote
Managed Protection Security Suite
The Advanced suite with SonicWall’s own management and monitoring on top. Sold as a renewal and available to three years.
SonicWall Managed Protection Security Suite Renewal / Upgrade (Renewal only - requires the TotalSecure Managed Edition appliance SKU)
-
SonicWall Managed Protection Security Suite For NSv XS - 1 Year #03-SSC-4823Get a Quote
-
SonicWall Managed Protection Security Suite For NSv XS - 2 Year #03-SSC-4832Get a Quote
-
SonicWall Managed Protection Security Suite For NSv XS - 3 Year #03-SSC-4845Get a Quote
High Availability
The second appliance in an active/standby pair, plus the licence that converts one back to a standalone unit.
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall NSv XS High Availability #03-SSC-9050Get a Quote
Advanced Reporting and Analytics (NSM On-Prem)
Log retention and reporting against a Network Security Manager instance you run yourself, in 7-day and 365-day retention tiers.
SonicWall Advanced Reporting and Analytics (NSM On-Prem) (Service subscription - appliance required)
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv XS - 1 Year #03-SSC-8927Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv XS - 2 Year #03-SSC-8929Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv XS - 3 Year #03-SSC-8931Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv XS - 4 Year #03-SSC-8933Get a Quote
-
SonicWall NSM On-Prem 365 Day Advanced Reporting And Analytics For NSv XS - 5 Year #03-SSC-8935Get a Quote
Advanced Reporting and Analytics (SaaS)
The same reporting hosted by SonicWall, in 7, 30, 90 and 365-day retention tiers. The retention period is part of the part number, so check it against the retention your auditor asks for.
SonicWall Advanced Reporting and Analytics (SaaS) (Service subscription - appliance required)
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv XS - 1 Year #03-SSC-4826Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv XS - 2 Year #03-SSC-4836Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv XS - 3 Year #03-SSC-4849Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv XS - 4 Year #03-SSC-4862Get a Quote
-
SonicWall 7 Days Of Advanced Reporting And Analytics For NSv XS - 5 Year #03-SSC-4875Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv XS - 1 Year #03-SSC-4825Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv XS - 2 Year #03-SSC-4834Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv XS - 3 Year #03-SSC-4847Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv XS - 4 Year #03-SSC-4860Get a Quote
-
SonicWall 30 Days Of Advanced Reporting And Analytics For NSv XS - 5 Year #03-SSC-4873Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv XS - 1 Year #03-SSC-8952Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv XS - 2 Year #03-SSC-8954Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv XS - 3 Year #03-SSC-8956Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv XS - 4 Year #03-SSC-8958Get a Quote
-
SonicWall 90 Days Of Advanced Reporting And Analytics For NSv XS - 5 Year #03-SSC-8960Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv XS - 1 Year #03-SSC-8951Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv XS - 2 Year #03-SSC-8953Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv XS - 3 Year #03-SSC-8955Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv XS - 4 Year #03-SSC-8957Get a Quote
-
SonicWall 365 Days Of Advanced Reporting And Analytics For NSv XS - 5 Year #03-SSC-8959Get a Quote
Secure Connect Security Suite
The suite built around Cloud Secure Edge: the gateway services plus SonicWall’s private-access connector, for a virtual firewall whose job is remote and site-to-site access rather than a physical perimeter.
SonicWall Secure Connect Security Suite (Service subscription - licence required)
-
SonicWall Secure Connect Service Suite For NSv XS - 1 Year #03-SSC-4822Get a Quote
-
SonicWall Secure Connect Service Suite For NSv XS - 2 Year #03-SSC-4831Get a Quote
-
SonicWall Secure Connect Service Suite For NSv XS - 3 Year #03-SSC-4844Get a Quote
-
SonicWall Secure Connect Service Suite For NSv XS - 4 Year #03-SSC-4857Get a Quote
-
SonicWall Secure Connect Service Suite For NSv XS - 5 Year #03-SSC-4870Get a Quote
SonicWall NSv XS Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOSX 8 |
|---|---|
| Supported Hypervisors | VMware ESXi, Microsoft Hyper-V, KVM (Ubuntu/CentOS), Proxmox |
| Supported Public Clouds | AWS and Microsoft Azure, including the AWS and Azure US Government regions (US East and West) |
| Supported AWS Instance Types | t3a.small, m7a.medium, c7a.medium, r7a.medium |
| Supported Azure Instance Types | Standard_DS1_v2, Standard_B1ms, Standard_DC1ds_v3, Standard_DC1s_v3, Standard_F1, Standard_DS12-1_v2 |
| Licensing | BYOL and PAYG (PAYG is currently available on AWS only) |
| Maximum Supported vCPUs | 1 |
| Interface Count (ESXi / Hyper-V / KVM / Proxmox / AWS / Azure) | 8 / 8 / 8 / 8 / 2 / 2 |
| Management and Data Plane Cores | 1 |
| Minimum Memory | 2 GB (with jumbo frames disabled) |
| Maximum Memory | 4 GB (with jumbo frames enabled; not supported on Azure or AWS) |
| Supported IP Addresses / Nodes | Unlimited |
| Minimum Storage | 60 GB |
| Single Sign-On Users | 100 |
| Logging | Analyzer, local log, Syslog |
| High Availability | Active/Passive. Available on VMware ESXi, KVM, Azure, Microsoft Hyper-V and Proxmox; the NSv S uses a D3v2 VM size. Not supported on AWS. |
Firewall and VPN Performance
| Firewall Inspection Throughput | 2 Gbps |
|---|---|
| Threat Prevention Throughput | 800 Mbps |
| IPS Throughput | 1 Gbps |
| TLS/SSL Inspection and Decryption Throughput (DPI SSL) | 400 Mbps |
| VPN Throughput | 700 Mbps |
| Connections per Second | 6,500 |
| Maximum Connections (SPI) | 40,000 |
| Maximum Connections (DPI) | 25,000 |
| Maximum Connections (DPI SSL) | 4,000 |
VPN and Remote Access
| Site-to-Site VPN Policies | 25 |
|---|---|
| Site-to-Site VPN Tunnels | 700 |
| IPSec VPN Clients | 25 (100 maximum) |
| SSL VPN Clients Included | 2 |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-1, Suite B Cryptography, Common Access Card (CAC) |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-Based VPN | RIP, OSPF, BGP |
| SSL VPN Clients (Maximum) | 25 |
Security Services
| Deep Packet Inspection Services | Gateway anti-virus, anti-spyware, intrusion prevention, TLS/SSL/SSH decryption and inspection |
|---|---|
| Content Filtering Service | Reputation-based Content Filtering Service (CFS 5.0), URL filtering, proxy avoidance, keyword blocking, policy-based filtering, HTTP header insertion |
| DNS Security | DNS filtering and DNS proxy |
| Application Identification and Control | Application control, application bandwidth management, custom application signatures, data leakage prevention, reporting over NetFlow/IPFIX |
| Capture Advanced Threat Protection | Real-Time Deep Memory Inspection, cloud multi-engine analysis, virtualized sandboxing, hypervisor-level analysis, full system emulation, block until verdict |
| SD-WAN and ZTNA | Secure SD-WAN with intelligent routing, auto-provision VPN, Secure Private Access to Cloud Secure Edge |
Networking
| IP Address Assignment | Static, DHCP, internal DHCP server and DHCP relay (DHCP server and relay are supported on private cloud, not on public cloud) |
|---|---|
| NAT Modes | 1:1, many:1, 1:many, flexible NAT (overlapping IPs), PAT |
| Logical VLAN and Tunnel Interfaces | 128 maximum. VLAN interfaces are not supported on Azure or AWS. |
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1 |
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix |
| Local User Database | 100 |
Figures are SonicWall’s published NSv XS/S/M/L specifications (datasheet, August 2026). Throughput is measured per RFC 2544 with default settings; actual performance depends on the host and on which services are enabled.
Public cloud is not the same deployment as private: VLAN interfaces are unavailable on AWS and Azure, jumbo frames are unsupported on both, high availability is unavailable on AWS, and the interface count is lower on the XS, S and M.
NSv XS
The smallest virtual firewall in the range: one vCPU, 2 Gbps of firewall inspection and 2 GB of memory, for a single cloud workload or a small branch.
Where the NSv XS fits
The entry point to the NSv range, and the only model SonicWall sizes for a single vCPU. 2 Gbps of firewall inspection and 40,000 SPI connections suit one cloud workload, a small branch or a lab — not a busy edge. Every NSv runs the same SonicOSX 8 build and the same security services, so the step up through S, M and L buys capacity and nothing else. Note the AWS and Azure caveats that apply to the whole range: no VLAN interfaces on either, no high availability on AWS, and two interfaces rather than eight on the public clouds at this size.
Interested in the SonicWall NSv XS?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote