The NSa 3800 is a Gen 7 next-generation firewall designed for mid-to-large enterprise deployments. It provides 9.0 Gbps of firewall inspection throughput and 5.0 Gbps of full threat prevention for networks that cannot afford performance trade-offs when security services are active.

Yes. The NSa 3800 performs full TLS 1.3 decryption and deep packet inspection as part of its standard security pipeline. Traffic is decrypted, inspected by the full security stack including IPS and anti-malware, and re-encrypted before forwarding.

The NSa 3800 is available as a standalone appliance or bundled with the Essential Protection Service Suite (EPSS) or Advanced Protection Service Suite (APSS). EPSS covers Gateway Anti-Virus, IPS, Application Control, Content Filtering, and Capture ATP. APSS adds enhanced threat intelligence and advanced cloud app visibility.

Yes. The NSa 3800 supports active/passive and active/active high-availability configurations with stateful session failover. Both units are managed as a logical pair within SonicWall NSM.

The NSa 3800 supports up to 8,000 IPSec VPN tunnels. Site-to-site and remote access VPN can be configured simultaneously, and SSL VPN user licenses can be added alongside the IPSec tunnel capacity.