NetworkTigers: Reliable, Quality-Tested Network Equipment
Supporting network managers with high quality switches, routers, PDUs, and firewalls since 1996
SonicWall NSsp Series Firewalls - Refurbished, Used, New
The SonicWall NSsp Series sits at the top of the SonicWall firewall range, built for large enterprises, data centers, service providers and government networks. These are the only SonicWall appliances with 40 and 100 gigabit interfaces and connection tables measured in tens of millions.
Which NSsp model do you need?
| Model | Firewall | Threat prevention | IPS | Max connections | New conn/sec | High-speed ports |
|---|---|---|---|---|---|---|
| NSsp 10700 | 42 Gbps | 28 Gbps | 28 Gbps | 15,000,000 | 280,000 | 8x 25G, 2x 100/40G, 4x 10G |
| NSsp 11700 | 47 Gbps | 37 Gbps | 37 Gbps | 20,000,000 | 280,000 | 8x 25G, 2x 100/40G, 4x 10G |
| NSsp 13700 | 60 Gbps | 45.5 Gbps | 48 Gbps | 25,000,000 | 280,000 | 8x 25G, 2x 100/40G, 4x 10G |
| NSsp 15700 | 105 Gbps | 82 Gbps | 76.5 Gbps | 40,000,000 | 800,000 | 6x 100G, 4x 40G, 16x 10G |
The 10700, 11700 and 13700 are the same chassis. Identical interface layout, identical 280,000 new connections per second, identical fan count. What separates them is inspection throughput and connection table size. That makes the choice unusually clean: pick by the inspection load you need, not by ports, because the ports do not change.
The 15700 is a different machine. It nearly doubles the 13700 on throughput, but the real difference is elsewhere. New connections per second goes from 280,000 to 800,000, and the interface mix changes from 25 gigabit SFP28 to six 100 gigabit QSFP28 ports. It also carries ten fans against three. If your workload is characterized by connection churn rather than sustained bandwidth, which describes most service provider and large multi-tenant environments, the 15700 is the only model in the family that addresses it.
New connections per second is the specification to watch at this tier. At enterprise scale a firewall rarely fails because it ran out of bandwidth. It fails because it could not set up sessions fast enough during a traffic spike, a reconnect storm or a scan. Three of the four models here share the same 280,000 figure, so stepping from a 10700 to a 13700 buys inspection capacity but no additional session setup rate.
All NSsp models run SonicOS 7 with Secure SD-WAN, advanced routing, full TLS 1.3 decryption at scale, high availability clustering and SonicWall's patented RTDMI engine for real-time deep memory inspection. Unified policy management lets one team run the core and the branch TZ and NSa appliances together.
Transfer ready or non-transferable?
Every SonicWall we list states its registration status, because on the secondary market that matters as much as physical condition.
TRANSFER READY means the unit can be registered into your own MySonicWall account. From there you can add support, security service subscriptions and warranty, the same as a unit bought new.
NON-TRANSFERABLE means the unit cannot be moved into your MySonicWall account. It still works, and it is still managed locally through its own interface with the full configuration under your control. What you cannot do is add services, subscriptions or warranty to it. We price these as hardware accordingly, and they suit a lab, a cold spare, or a site that needs firewalling and VPN without subscription services.
At NetworkTigers, we supply refurbished, used, and new SonicWall NSsp Series firewalls, each fully tested, serialized, and production-ready, with fast shipping and a 365-day warranty. Enterprise-class SonicWall capacity at a fraction of new-equipment cost.