Firewall vendor SonicWall today introduced the SonicWall Network Security Appliance Series (NSA), a trio of multifunction firewalls aimed at the mid-enterprise.

The NSA Series are multi-core platforms that work with a reassembly-free deep packet inspection engine. Together, they examine all traffic coming in for real-time inspection without slowing down network traffic.

"UTM brings multiple security technologies into a single solution to inspect these packets at a detailed level," said Jon Kuhn, director of product marketing at SonicWall. But it's not easy, he adds. "When you do that level of inspection you will have a dramatic impact on the performance of a network. So while people want all the aspects of protection today, they have the consequence of poor performance."

One way it achieves maximum performance is by scanning the file as it comes in, rather than waiting for an entire file to download before scanning it. That way, if a hint of malware is detected in the first stages of an incoming file, it is more closely inspected as it comes in.

This allows the NSA servers to scan unlimited file sizes and virtually hundreds of thousands of concurrent file packets coming in over any TCP port. It examines both the packet envelope and its contents at the same time. SonicWall calls this its unified threat management (UTM) technology.

In addition to stopping malware from coming in, the NSA application firewall comes with a set of tools to prevent vital data from going out. These tools let administrators configure the firewall to set security on a per user, e-mail user, per schedule and per IP subnet (define) level.

There are a total of eight cores in the appliance, and the appliances have load-balancing capabilities so none of the cores is overly burdened. The three products in the NSA line are the 3500, 4500 and 5000. One of their main differentiators is how much traffic they can handle; the 3500 can handle 170 megabits per second of streaming data, the 4500 can take 300 Mbps and the 5000 up to 350 Mbps.

Ron Baker, president of JFG Systems, a solutions provider for small and medium-size businesses in Nevada and California, has been impressed with his tests of the NSA firewall. Baker told InternetNews.com that he was able to retire a pair of firewall devices and replace them with one NSA server.

"The older generation of firewalls was hitting limits with faster Internet connections that are becoming commonly available," he said, referring to pipes of up to 10 megabits or greater. The NSA servers "easily handle the bandwidth and have a lot of headroom. The performance of the box is much higher than what we had prior."

The NSA 3500, 4500 and 5000 are available now from SonicWall.