SonicWall · Firewalls
SonicWall NSv XS
Single-core virtual firewall for small environments, branches and lightweight workloads; requires an active subscription and connectivity for licensing.
Overview
Virtual firewall for small deployments and smaller-scale workloads. Final selection must consider the environment, configuration, licensing and the controls to be enabled.
Key features
- VMware ESXi, Microsoft Hyper-V, KVM Ubuntu/CentOS and ProxmoxVMware ESXi, Microsoft Hyper-V, KVM Ubuntu/CentOS and Proxmox
- AWS and Microsoft Azure; US government clouds depending on the regionAWS and Microsoft Azure; US government clouds depending on the region
- VPN, SD-WAN, segmentation and BGP/OSPF/RIP routingVPN, SD-WAN, segmentation and BGP/OSPF/RIP routing
- Application inspection, IPS, web/DNS filtering and Capture ATP/RTDMI depending on the subscriptionApplication inspection, IPS, web/DNS filtering and Capture ATP/RTDMI depending on the subscription
- Centralised management with NSM/Unified ManagementCentralised management with NSM/Unified Management
- Cloud Secure Edge connector in Global/Classic mode, depending on the licenceCloud Secure Edge connector in Global/Classic mode, depending on the licence
- Active/passive HA on ESXi, Hyper-V, KVM, Proxmox and Azure, subject to platform requirementsActive/passive HA on ESXi, Hyper-V, KVM, Proxmox and Azure, subject to platform requirements
- Design conditionAn active subscription is required to operate
- Design conditionAWS: BYOL or PAYG; Azure: BYOL; confirm available image and region
- Design conditionSecure Connect, APSS or MPSS plans; advanced protection depends on the plan
- Design conditionThe licence cannot be migrated directly between BYOL and PAYG
- Design conditionXS does not support operation in closed/isolated networks
- Design conditionPAYG is available only on AWS; government clouds support BYOL only
- Design conditionJumbo Frames and VLAN are not supported on AWS/Azure
- Design conditionDHCP server and relay are available in private clouds, not in public clouds
- Design conditionHA is not supported on AWS; HA on Azure requires an instance type with three or more interfaces
- Design conditionAzure Backup is not supported
- Design conditionAzure Standard_B instance intended for laboratory use; caution is required for production use
- Design conditionRegional availability, SKU, accessories and licences must be confirmed in the proposal
Technical specifications
| Firewall inspection | 2 Gb/s |
|---|---|
| Threat prevention | 800 Mb/s |
| IPS | 1 Gb/s |
| TLS/SSL inspection | 400 Mb/s |
| IPsec VPN | 700 Mb/s |
| Site-to-site VPN policies | 25 |
| Maximum logical VLAN/tunnel interfaces | 128; VLAN not supported on AWS/Azure |
| Minimum storage | 60 GB |
| Supported vCPUs | 1 |
| RAM without Jumbo Frames | 2 GB |
| RAM with Jumbo Frames | 4 GB; Jumbo Frames unavailable on AWS/Azure |
| Virtual interfaces by platform | 8 on ESXi, Hyper-V, KVM and Proxmox; 2 on AWS and Azure according to the datasheet |
| Physical Ethernet ports | Not applicable to the virtual appliance |
| Physical USB | Not applicable to the virtual appliance |
| Physical console port | Not applicable to the virtual appliance |
| Physical management port | Not applicable to the virtual appliance |
| Physical SFP | Not applicable to the virtual appliance |
| WWAN via USB modem | Not applicable to the virtual appliance |
| Wi-Fi radio | Not applicable to the virtual appliance |
| PoE | Not applicable to the virtual appliance |
| Physical TPM | Not applicable to the virtual appliance |
| Maximum SPI connections | 40000 |
| New connections per second | 6500 |
| Site-to-site VPN tunnels | 700 |
| Included IPsec clients | 25 |
| Maximum IPsec clients | 100 |
| Included SSL VPN clients | 2 |
| Maximum SSL VPN clients | 25 |
| Maximum SSO users | 100 |
| Maximum DPI connections | 25000 |
| Maximum TLS/SSL DPI connections | 4000 |
| Local database users | 100 |
| Private-cloud virtual interfaces | 8 |
| AWS/Azure virtual interfaces | 2 |
| Management/data-plane cores | 1 core in total |
| Supported nodes/IPs | Unlimited |
| Compatible AWS instances | t3a.small, m7a.medium, c7a.medium, r7a.medium |
| Compatible Azure instances | Standard_DS1_v2, Standard_B1ms, Standard_DC1ds_v3, Standard_DC1s_v3, Standard_F1S, Standard_DS12-1_v2 |
| Dimensions | Not applicable: virtual appliance |
| Power supply | Not applicable: uses host or cloud instance resources |
| Deployment resource 1 | 1 vCPU |
| Deployment resource 2 | RAM: 2 GB without Jumbo Frames; 4 GB with Jumbo Frames on compatible platforms |
| Deployment resource 3 | Minimum disk capacity of 60 GB |
| Deployment resource 4 | Reserved host resources and instance type must be sized for actual traffic |
| Deployment resource 5 | Supported IPs/nodes: unlimited |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.