SonicWall TZ670 Series
Comprehensive Entry Level Next-Generation Firewall

SonicWall TZ670 Series

SonicWall Products

Capture Advanced Threat Protection for NSA 2650 Model Back to top

SonicWall Capture Advanced Threat Protection for NSa 2650, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1935
Price: ~~$1,090.15~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 3600 Model Back to top

SonicWall Capture Advanced Threat Protection for NSa 3600, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1485
Price: ~~$2,254.61~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 3650 Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for NSa 3650, 1 Year
A CLOUD BASED SERVICEFORADVANCED THREAT DETECTION THROUGH SANDBOXING WITH A MULTI-ENGINE APPROACH TO STOP UNKNOWN AND ZERO-DAY ATTACKS AT THE GATEWAY. REQUIRES PURCHASE OF GATEWAY ANTI-VIRUS, ANTI-SPYWARE, INTRUSION PREVENTION AND APPLICATION FIREWALL SERVICE (GAV)

#01-SSC-3457
Price: ~~$1,929.61~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 4600 Model Back to top

SonicWall Capture Advanced Threat Protection for NSa 4600, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1495
Price: ~~$3,020.30~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 4650 Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for NSa 4650, 1 Year
A CLOUD BASED SERVICEFORADVANCED THREAT DETECTION THROUGH SANDBOXING WITH A MULTI-ENGINE APPROACH TO STOP UNKNOWN AND ZERO-DAY ATTACKS AT THE GATEWAY. REQUIRES PURCHASE OF GATEWAY ANTI-VIRUS, ANTI-SPYWARE, INTRUSION PREVENTION AND APPLICATION FIREWALL SERVICE (GAV)

#01-SSC-3499
Price: ~~$2,739.18~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 5600 Model Back to top

SonicWall Capture Advanced Threat Protection for NSa 5600, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1555
Price: ~~$5,723.35~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 5650 Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for NSa 5650, 1 Year
A CLOUD BASED SERVICEFORADVANCED THREAT DETECTION THROUGH SANDBOXING WITH A MULTI-ENGINE APPROACH TO STOP UNKNOWN AND ZERO-DAY ATTACKS AT THE GATEWAY. REQUIRES PURCHASE OF GATEWAY ANTI-VIRUS, ANTI-SPYWARE, INTRUSION PREVENTION AND APPLICATION FIREWALL SERVICE (GAV)

#01-SSC-3680
Price: ~~$4,344.90~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 6600 Model Back to top

SonicWall Capture Advanced Threat Protection for NSa 6600, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1565
Price: ~~$10,408.19~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 6650 Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for NSa 6650, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-8930
Price: ~~$9,067.61~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 9250 Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for NSa 9250, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-0121
Price: ~~$11,076.91~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 9450 Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for NSa 9450, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-0855
Price: ~~$14,425.74~~
Add to Cart for Pricing

Capture Advanced Threat Protection for NSA 9650 Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for NSa 9650, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-2042
Price: ~~$18,890.86~~
Add to Cart for Pricing

Capture Advanced Threat Protection for SOHO 250 Series Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for SOHO 250 Series, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#02-SSC-1732
Price: ~~$358.16~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 300 Model Back to top

SonicWall Capture Advanced Threat Protection for TZ300 Series, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1435
Price: ~~$594.54~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 350 Series Back to top

Note: Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

SonicWall Capture Advanced Threat Protection for TZ350 Series, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#02-SSC-1779
Price: ~~$596.90~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 400 Model Back to top

SonicWall Capture Advanced Threat Protection for TZ400 Series, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1445
Price: ~~$594.54~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 500 Model Back to top

SonicWall Capture Advanced Threat Protection for TZ500 Series, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1455
Price: ~~$594.54~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 570 Model Back to top

SonicWall Capture Advanced Threat Protection Service for TZ570 Series, 1 Year

#02-SSC-5083
Price: ~~$392.70~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ570 Series, 3 Years

#02-SSC-5085
Price: ~~$942.48~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ570 Series, 5 Years

#02-SSC-5087
Price: ~~$1,570.80~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 570P Model Back to top

SonicWall Capture Advanced Threat Protection Service for TZ570P (PoE) Series, 1 Year

#02-SSC-5089
Price: ~~$415.80~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ570P (PoE) Series, 3 Years

#02-SSC-5091
Price: ~~$997.92~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ570P (PoE) Series, 5 Years

#02-SSC-5093
Price: ~~$1,663.20~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 570 Wireless Model Back to top

SonicWall Capture Advanced Threat Protection Service for TZ570 Wireless-AC, 1 Year

#02-SSC-5095
Price: ~~$434.28~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ570 Wireless-AC, 3 Years

#02-SSC-5097
Price: ~~$1,042.27~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ570 Wireless-AC, 5 Years

#02-SSC-5099
Price: ~~$1,737.12~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 600 Model Back to top

SonicWall Capture Advanced Threat Protection for TZ600 Series, 1 Year
A cloud based serviceforadvanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service (GAV)

#01-SSC-1465
Price: ~~$785.56~~
Add to Cart for Pricing

Capture Advanced Threat Protection for TZ 670 Model Back to top

SonicWall Capture Advanced Threat Protection Service for TZ670 Series, 1 Year

#02-SSC-5035
Price: ~~$485.10~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ670 Series, 3 Years

#02-SSC-5037
Price: ~~$1,164.24~~
Add to Cart for Pricing

SonicWall Capture Advanced Threat Protection Service for TZ670 Series, 5 Years

#02-SSC-5039
Price: ~~$1,940.40~~
Add to Cart for Pricing

More pricing below, click here!

Security Services & Management

Documentation

Overview:

The latest SonicWall TZ series, are the first desktop form factor nextgeneration firewalls (NGFW) with 10 or 5 Gigabit Ethernet interfaces. The series consist of a wide range of products to suit a variety of use cases.

Designed for small, mid-sized organizations and distributed enterprise with SD-Branch locations, the 7th generation (Gen 7) TZ series delivers industry-validated security effectiveness with best-in-class priceperformance. These NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The Gen 7 TZ series are highly scalable, with high port density of up to 10 ports. It features both inbuilt and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure on select models.

Deployment of Gen 7 TZs are further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling, switching and wireless capabilities, plus provides single-pane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

SonicOS and Security Services

The SonicOS architecture is at the core of TZ NGFWs. Gen 7 TZs are powered by the feature rich SonicOS 7.0 operating system with new modern looking UX/UI, advanced security, networking and management capabilities. Gen 7 TZ features integrated SD-WAN, TLS 1.3 support, real-time visualization, high-speed virtual private networking (VPN) and other robust security features.

Unknown threats are sent to SonicWall’s cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. Enhancing Capture ATP is our patentpending Real-Time Deep Memory Inspection (RTDMI™) technology. As one of Capture ATP’s engine, RTDMI detects and blocks malware and zero-day threats by inspecting directly in memory.

By leveraging Capture ATP with RTDMI technology, in addition to security services such as ReassemblyFree Deep Packet Inspection (RFDPI), Anti-virus and Anti-spyware Protection, intrusion prevention system, Application Intelligence and Control, Content Filtering Services, DPI-SSL, TZ series firewalls stop malware, ransomware and other advanced threats at the gateway.

Highlights

10/5/2.5/1 GbE interfaces in a desktop form factor
SD-Branch ready
Secure SD-WAN capability
SonicExpress App onboarding
Zero-Touch Deployment
Single-pane-of-glass-management through cloud or firewall
SonicWall Switch, SonicWave Access Point and Capture Client integration
Built-in and expandable storage
Redundant power

High port density
Cellular failover
SonicOS 7.0
TLS 1.3 support
Groundbreaking performance
High connection count
Fast DPI performance
Low TCO

Deployments

Small to Medium size Business

Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities
Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass
Attain business continuity by providing failover to cellular connectivity
Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more
Leverage high port density to power on multiple PoE devices such as IP phones and IP cameras with TZ570P
Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies

SonicWall Small to Medium size Business

Distributed Enterprise with SD-Branches

Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch
Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape
Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3
Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client
Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations
Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ’s hardware and software enhancements, plus features such SD-WAN technology
Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment
Ensure business continuity by providing failover to cellular connectivity
Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes

SonicWall Distributed Enterprise with SD-Branches

Specifications:

SonicWall TZ270 Series

Firewall General	TZ270 SERIES	TZ370 SERIES	TZ470 SERIES	TZ570 SERIES	TZ670 SERIES
Operating system	SonicOS 7.0
Interfaces	8x1GbE, 2 USB 3.0, 1 Console	8x1GbE, 2 USB 3.0, 1 Console	8x1GbE, 2x2.5G SFP+, 2 USB 3.0, 1 Console	8x1GbE, 2x5G SFP+, 2 USB 3.0, 1 Console	8x1GbE, 2x10G SFP+, 2 USB 3.0, 1 Console
Wireless support	2x2 802.11ac Wave 2 (TZ270W)	2x2 802.11ac Wave 2 (TZ370W)	2x2 802.11ac Wave 2 (TZ470W)	2x2 802.11ac Wave 2 (TZ570W)	N/A
Power over Ethernet (PoE) support	N/A	N/A	N/A	5 PoE or 3PoE+ (TZ570P)	N/A
Storage Expansion slot	Optional up to 256GB				Optional up to 256GB, 32GB included
Management	Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs
Redundant power supply	N/A	N/A	N/A	Yes	Yes
Single Sign-On (SSO) Users	1,000	1,000	2,500	2,500	2,500
VLAN interfaces	64	128	128	256	256
Access points supported (maximum)	16	16	32	32	32
Firewall/VPN Performance	TZ270 SERIES	TZ370 SERIES	TZ470 SERIES	TZ570 SERIES	TZ670 SERIES
Firewall inspection throughput¹	2 Gbps	3 Gbps	3.5 Gbps	4 Gbps	5 Gbps
Threat Prevention throughput²	750 Mbps	1 Gbps	1.5 Gbps	2 Gbps	2.5 Gbps
Application inspection throughput²	1 Gbps	1.5 Gbps	2 Gbps	2.5 Gbps	3 Gbps
IPS throughput²	1 Gbps	1.5 Gbps	2 Gbps	2.5 Gbps	3 Gbps
Anti-malware inspection throughput²	750 Mbps	1 Gbps	1.5 Gbps	2 Gbps	2.5 Gbps
TLS/SSL inspection and decryption throughput (DPI SSL)²	300 Mbps	500 Mbps	600 Mbps	750 Mbps	800 Mbps
IPSec VPN throughput³	750 Mbps	1.38 Gbps	1.5 Gbps	1.8 Gbps	2.1 Gbps
Connections per second	6,000	9,000	12,000	16,000	25,000
Maximum connections (SPI)	750,000	900,000	1,000,000	1,250,000	1,500,000
Maximum connections (DPI)	150,000	200,000	550,000	400,000	500,000
Maximum connections (DPI SSL)	25,000	30,000	35,000	50,000	75,000
VPN	TZ270 SERIES	TZ370 SERIES	TZ470 SERIES	TZ570 SERIES	TZ670 SERIES
Site-to-site VPN tunnels	50	100	150	200	250
IPSec VPN clients (maximum)	5 (200)	5 (200)	5 (200)	10 (500)	10 (500)
SSL VPN licenses (maximum)	1 (50)	2 (100)	2 (150)	2 (200)	2 (250)
Encryption/authentication	DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange	Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN	RIP, OSPF, BGP
Certificate support	Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
VPN features	Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported	Microsoft® Windows 10
NetExtender	Microsoft Windows 10, Linux
Mobile Connect	Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10
Security Services	TZ270 SERIES	TZ370 SERIES	TZ470 SERIES	TZ570 SERIES	TZ670 SERIES
Deep Packet Inspection services	Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS)	HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service	Yes
Application Visualization	Yes
Application Control	Yes
Capture Advanced Threat Protection	Yes
Networking	TZ270 SERIES	TZ370 SERIES	TZ470 SERIES	TZ570 SERIES	TZ670 SERIES
IP address assignment	Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes	1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols⁴	BGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoS	Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
Local user database	150	250	250	250	250
VoIP	Full H.323v1-5, SIP
Standards	TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications	Granted: FIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware Pending: Common Criteria NDPP (with VPN and IPS), DoDIN, CSfC
High availability	Active/Standby with stateful synchronization
Hardware	TZ270 SERIES	TZ370 SERIES	TZ470 SERIES	TZ570 SERIES	TZ670 SERIES
Form factor	Desktop⁴
Power supply	36W external	36W external	36W external	60W external (TZ570/570W), 180W external (TZ570P only)	60W external
Maximum power consumption (W)	16.84 (TZ270), 18.91 (TZ270W)	16.84 (TZ370), 18.91 (TZ370W)	19.95 (TZ470), 21.98 (TZ470W)	13.4 (TZ570), 15.3 (TZ570W), 108.75 (TZ570P)	13.1
Input power	100-240 VAC, 50-60 Hz, 3A	100-240 VAC, 50-60 Hz, 3A	100-240 VAC, 50-60 Hz, 3A	100-240 VAC, 50-60 Hz	100-240 VAC, 50-60 Hz
Total heat dissipation (BTU)	57.42 (TZ270), 64.48 (TZ270W)	57.42 (TZ270), 64.48 (TZ270W)	68.03 (TZ470), 74.95 (TZ470W)	44.7 (TZ570), 52.17 (TZ570W), 370.84 (TZ570P)	55.1
Dimensions	3.5x13.5x19 (cm) 1.8x5.3x7.5 (in)	3.5x13.5x19 (cm) 1.8x5.3x7.5 (in)	3.5x13.5x19 (cm) 1.8x5.3x7.5 (in)	3.5x15x22.5 (cm) 1.38x5.91x8.85 in	3.5x15x22.5 (cm) 1.38x5.91x 8.85 in
Weight	0.82 kg / 1.81 lbs (TZ270), 0.85 kg / 1.87 lbs (TZ270W)	0.82 kg / 1.81 lbs (TZ370), 0.85 kg / 1.87 lbs (TZ370W)	0.83 kg / 1.82 lbs (TZ470), 0.87 kg / 1.92 lbs (TZ470W)	0.97 kg / 2.14 lbs (TZ570), 0.99 kg / 2.18 lbs (TZ570W), 1.05 kg / 2.31 lbs (TZ570P)	0.97 kg / 2.14 lbs
WEEE weight	1.18 kg / 2.6 lbs (TZ270), 1.24 kg / 2.73 lbs (TZ270W)	1.18 kg / 2.6 lbs (TZ370), 1.24 kg / 2.73 lbs (TZ370W)	1.24 kg / 2.73 lbs (TZ470), 1.27 kg / 2.8 lbs (TZ470W)	1.42 kg / 3.13 lbs (TZ570), 1.47 kg / 3.24 lbs (TZ570W), 1.57 kg / 3.46 lbs (TZ570P)	1.42 kg / 3.13 lbs
Shipping weight	1.41 kg / 3.11 lbs (TZ270), 1.47 kg / 3.25 lbs (TZ270W)	1.41 kg / 3.11 lbs (TZ370), 1.47 kg / 3.25 lbs (TZ370W)	1.43 kg / 3.15 lbs (TZ470), 1.51 kg / 3.33 lbs (TZ470W)	1.93 kg / 4.25 lbs (TZ570), 1.98 kg / 4.36 lbs (TZ570W), 2.08 kg / 4.58 lbs (TZ570P)	1.93 kg / 4.25 lbs
MTBF (in years)	51.1 (TZ270), 27.1 (TZ270W)	51.1 (TZ370), 27.1 (TZ370W)	46 (TZ470), 24.1 (TZ470W)	26.1 (TZ570), 23.3 (TZ570W), 31.7 (TZ570P)	43.9
Environment (Operating/Storage)	32°-105° F (0°-40° C) / -40° to 158° F (-40° to 70° C)
Humidity	5-95% non-condensing
Regulatory	TZ270 SERIES	TZ370 SERIES	TZ470 SERIES	TZ570 SERIES	TZ670 SERIES
Major regulatory compliance (wired models)	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC MSIP, ANATEL	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL	FCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL	FCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL
Major regulatory compliance (wireless models)	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/ TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL	FCC Class B, FCC P15C, FCC P15E, ICES Class B, ISED/ IC, CE (RED, RoHS), C-Tick, VCCI Class B, Japan Wireless, UL/cUL, TUV GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, NCC (TW) KCC/MSIP, SRRC, ANATEL	N/A
Major regulatory compliance (PoE models)	N/A	N/A	N/A	FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, UL/ cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL	N/A
Integrated Wireless⁵	(TZ270W / 370W/ 470W / 570W ONLY)
Standards	802.11a/b/g/n/ac Wave 2, WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
Frequency bands	802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 5.180-5.825 GHz
Operating channels	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64; 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
Transmit output power	Based on the regulatory domain specified by the system administrator
Transmit power control	Yes
Data rates supported	802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel
Modulation technology spectrum	802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)

*Future use.

¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

² Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

³ VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

⁴ BGP is available only on SonicWall TZ400, TZ500 and TZ470.

⁵ All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products

SonicOS 7.0 Feature Summary:

Firewall

Stateful packet inspection
Reassembly-Free Deep Packet Inspection
DDoS attack protection (UDP/ ICMP/SYN flood)
IPv4/IPv6 support
Biometric authentication for remote access
DNS proxy
Full API support
SonicWall Switch integration
SD-WAN scalability
SD-WAN Usability Wizard¹
SonicCoreX and SonicOS containerization¹
Connections scalability (SPI, DPI, DPI SSL)

Enhanced dashboard¹

Enhanced device view
Top traffic and user summary
Insights to threats
Notification center

TLS/SSL/SSH decryption and inspection

TLS 1.3 with enhanced security¹
Deep packet inspection for TLS/SSL/SSH
Inclusion/exclusion of objects, groups or hostnames
SSL control
Enhancements for DPI-SSL with CFS
Granular DPI SSL controls per zone or rule

Capture advanced threat protection²

Real-Time Deep Memory Inspection
Cloud-based multi-engine analysis
Virtualized sandboxing
Hypervisor level analysis
Full system emulation
Broad file type examination
Automated and manual submission
Real-time threat intelligence updates
Block until verdict
Capture Client

Intrusion prevention²

Signature-based scanning
Automatic signature updates
Bi-directional inspection
Granular IPS rule capability
GeoIP enforcement
Botnet filtering with dynamic list
Regular expression matching

Anti-malware²

Stream-based malware scanning
Gateway anti-virus
Gateway anti-spyware
Bi-directional inspection
No file size limitation
Cloud malware database

Application identification²

Application control
Application bandwidth management
Custom application signature creation
Data leakage prevention
Application reporting over NetFlow/IPFIX
Comprehensive application signature database

Traffic visualization and analytics

User activity
Application/bandwidth/threat usage
Cloud-based analytics

HTTP/HTTPS Web content filtering²

URL filtering
Proxy avoidance
Keyword blocking
Policy-based filtering (exclusion/inclusion)
HTTP header insertion
Bandwidth manage CFS rating categories
Unified policy model with app control
Content Filtering Client

VPN

Secure SD-WAN
Auto-provision VPN
IPSec VPN for site-to-site connectivity
SSL VPN and IPSec client remote access
Redundant VPN gateway
Mobile Connect for iOS, Mac OS X, Windows, Chrome, Android and Kindle Fire
Route-based VPN (OSPF, RIP, BGP)

Networking

PortShield
Path MTU discovery
Enhanced logging
VLAN trunking
Port mirroring (NSa 2650 and above)
Layer-2 QoS
Port security
Dynamic routing (RIP/OSPF/BGP)
SonicWall wireless controller
Policy-based routing (ToS/ metric and ECMP)
NAT
DHCP server
Bandwidth management
A/P high availability with state sync
Inbound/outbound load balancing
High availability - Active/Standby with state sync
L2 bridge, wire/virtual wire mode, tap mode, NAT mode
Asymmetric routing
Common Access Card (CAC) support

VoIP

Granular QoS control
Bandwidth management
DPI for VoIP traffic
H.323 gatekeeper and SIP proxy support

Debugging and diagnostics

Enhanced packet monitoring
SSH terminal on UI

Management, monitoring and support

Capture Security Appliance (CSa) support
Capture Threat Assessment (CTA) v2.0
New design or template
Industry and global average comparison
New UI/UX, Intuitive feature layout¹
Dashboard
Device information, application, threats
Topology view
Simplified policy creation and management
Policy/Objects usage statistics¹
Used vs Un-used
Active vs Inactive
Global search for static data
Storage support¹
Internal and external storage management¹
WWAN USB card support (5G/LTE/4G/3G)
Network Security Manager (NSM) support
Web GUI
Command line interface (CLI)
Zero-Touch registration & provisioning
CSC Simple Reporting¹
SonicExpress mobile app support
SNMPv2/v3
Centralized management and reporting with SonicWall Global Management System (GMS)²
Logging
Netflow/IPFix exporting
Cloud-based configuration backup
BlueCoat security analytics platform
Application and bandwidth visualization
IPv4 and IPv6 management
CD management screen
Dell N-Series and X-Series switch management including cascaded switches

Wireless

SonicWave AP cloud management
WIDS/WIPS
Rogue AP prevention
Fast roaming (802.11k/r/v)
802.11s mesh networking
Auto-channel selection
RF spectrum analysis
Floor plan view
Topology view
Band steering
Beamforming
AirTime fairness
Bluetooth Low Energy
MiFi extender
RF enhancements and improvements
Guest cyclic quota

Integrated Wireless (TZ270/370/470/570W only)

802.11ac Wave 2 wireless
Dual-band (2.4 GHz and 5.0 GHz)
802.11 a/b/g/n/ac wireless standards
Wireless intrusion detection and prevention
Wireless guest services
Lightweight hotspot messaging
Virtual access point segmentation
Captive portal
Cloud ACL

¹ New feature, available on SonicOS 7.0

² Requires added subscription

Security Services & Management:

SonicWall offers Essential and Advanced security subscription bundles on Gen 7 TZ Series firewalls. Add SonicWall Essential Protection Service Suite to your TZ series firewall to gain essential security services needed to protect against known and unknown cyberattacks. Upgrade to the Advanced Protection Service Suite for enhanced protection that extends the security of your network with essential cloud security services.

FEATURE	ESSENTIAL	ADVANCED
GAV, IPS, Application Control
Content Filtering Service
Anti-Spam
24 x 7 Support
Network Visibility (Topology with Host Info)
Capture ATP (Multi-Engine) Sandboxing
RTDMI Technology
DNS Security
Cloud Management	O
Cloud-Based Reporting – 7 Days	O
Premier Support		O

O Optional

Not Available

Included

SonicWall Advanced Gateway Security Suite (AGSS) integrates a wide range of network security services into a convenient, affordable package. AGSS is available as an add-on service for all physical and virtual SonicWall firewalls, including our NSsp, NSa, TZ and NSv Series to protect against the most advanced and unknown threats.

Features

Complete network security solution that includes the multi-engine Capture Advanced Threat Protection (ATP) cloud sandbox service with RTDMI
Cutting-edge IPS technology
Content filtering

ICSA-certified gateway anti-virus and anti-spyware protection
Application intelligence and control
24×7 support with firmware updates and hardware replacement

Mitigate the risk of zero-day threats with SonicWall Capture Advanced Threat Protection (ATP) sandbox, a cloud-based service that detects and blocks unknown threats at the gateway until a verdict is rendered.

This service is the only advanced threat detection offering that combines multi-layer sandboxing, including SonicWall Real-Time Deep Memory Inspection (RTDMI™), full system emulation and virtualization techniques, to analyze suspicious code behavior. This powerful combination detects more threats than single-engine sandbox solutions, which are compute-environment specific and susceptible to evasion.

SonicWall Content Filtering Service (CFS), running on SonicWall next-generation firewalls (NGFWs) is a powerful protection and productivity solution that delivers unequaled content filtering enforcement for educational institutions, businesses, libraries and government agencies. Using SonicWall CFS, organizations have control over the websites students, faculty and employees can access.

SonicWall Comprehensive Anti-Spam Service offers small- to medium-sized businesses comprehensive protection from spam and viruses, with instant deployment over existing SonicWall firewalls. The service speeds deployment, eases administration and reduces overhead by consolidating solutions, providing one-click anti-spam services, with advanced configuration.

The anti-spam service offers complete inbound anti-spam, anti-phishing, anti-malware protection and features, IP-reputation lookup, advanced content management, denial of service prevention, full quarantine and customizable per-user junk summaries.

Documentation:

Download the SonicWall TZ Series (Gen 7) Datasheet (PDF).

Download the SonicWall SonicOS 7.0 Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.