SonicWall TZ680 Series
Integrated SD-Branch platform with high efficacy next-gen firewalls for SMBs & branch offices

SonicWall TZ Series are designed for small and mid-sized organizations, and distributed enterprises with SD-Branch locations. The latest series deliver best-in-class performance at a low TCO.

These NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution in desktop form-factor that meets the need for automated, real-time breach detection and prevention.

The Gen 8 TZ series are highly scalable, with high port density of up to 10 ports. It features both in-built and an expandable storage of up to 512 GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure on select models.

Deployment of Gen 8 TZs are further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling, switching and wireless capabilities, plus provides single-pane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

• Up to 10/5/2.5/1 GbE interfaces in a desktop form factor
• SD-Branch ready
• Secure SD-WAN capability
• SonicExpress App onboarding
• Zero-Touch Deployment
• SonicWall Unified Management ready
• Centralized, simplified management via Network Security Manager (NSM)
• SonicWall Switch, SonicWave Access Point and Capture Client integration
• Built-in and expandable storage
• Redundant power
• DNS security
• Reputation-based Content Filtering Service (CFS 5.0)

• Wi-Fi 6 firewall management
• Network access control integration with Aruba ClearPass
• High port density
• Cellular failover
• TLS 1.3 support
• Groundbreaking performance
• High connection count
• Fast DPI performance
• Low TCO
• Cloud Secure Edge Connector support
• Embedded cyber warranty

Distributed Enterprise with SD-Branches

• Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch
• Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape
• Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3
• Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client
• Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations
• Improve business efficiency, performance and reduce costs by leveraging Gen 8 TZ’s hardware and software enhancements, plus features such SD-WAN technology
• Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment
• Ensure business continuity by providing failover to cellular connectivity
• Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes.

Firewall

• Stateful packet inspection
• Reassembly-Free Deep Packet Inspection
• DDoS attack protection (UDP/ ICMP/SYN flood)
• IPv4/IPv6 support
• Biometric authentication for remote access
• DNS proxy
• Full API support
• SonicWall Switch integration
• SonicWall Wi-Fi 6 AP integration
• SD-WAN scalability
• SD-WAN Usability Wizard
• Connections scalability (SPI, DPI, TLS)

Enhanced dashboard

• Enhanced device view
• Top traffic and user summary
• Insights to threats
• Notification center

TLS/SSL/SSH decryption and inspection

• TLS 1.3 with enhanced security
• Deep packet inspection for TLS/SSL/SSH
• Inclusion/exclusion of objects, groups or hostnames
• SSL control
• Enhancements for DPI-SSL with CFS
• Granular DPI SSL controls per zone or rule

Capture advanced threat protection ¹

• Real-Time Deep Memory Inspection
• Cloud-based multi-engine analysis
• Virtualized sandboxing
• Hypervisor level analysis
• Full system emulation
• Broad file type examination
• Automated and manual submission
• Real-time threat intelligence updates1
• Block until verdict
• Capture Client¹

Intrusion prevention¹

• Signature-based scanning
• Network access control integration with Aruba ClearPass
• Automatic signature updates
• Bi-directional inspection
• Granular IPS rule capability
• GeoIP enforcement
• Botnet filtering with dynamic list
• Regular expression matching

Anti-malware¹

• Stream-based malware scanning
• Gateway anti-virus
• Gateway anti-spyware
• Bi-directional inspection
• No file size limitation
• Cloud malware database

Application identification¹

• Application control
• Application bandwidth management
• Custom application signature creation
• Data leakage prevention
• Application reporting over NetFlow/IPFIX
• Comprehensive application signature database

Traffic visualization and analytics

User activity

• Application/bandwidth/threat usage
• Cloud-based analytics

HTTP/HTTPS Web content filtering¹

• URL filtering
• Proxy avoidance
• Keyword blocking
• Reputation-based Content Filtering Service (CFS 5.0)
• DNS filtering
• Policy-based filtering (exclusion/inclusion)
• HTTP header insertion
• Bandwidth manage CFS rating categories
• Unified policy model with app control
• Content Filtering Client

VPN & ZTNA

• Secure SD-WAN
• Auto-provision VPN
• IPSec VPN for site-to-site connectivity
• SSL VPN and IPSec client remote access
• Redundant VPN gateway
• Mobile Connect for iOS, Mac OS X, Windows, Android
• Route-based VPN (OSPF, RIP, BGP)
• Secure Private Access by Cloud Secure Edge

Networking

• PortShield
• Path MTU discovery
• Enhanced logging
• VLAN trunking
• Port mirroring (NSa 2650 and above)
• Layer-2 QoS
• Port security
• Dynamic routing (RIP/OSPF/BGP)
• SonicWall wireless controller
• Policy-based routing (ToS/ metric and ECMP)
• NAT
• DHCP server
• Bandwidth management
• A/P high availability with state sync
• Inbound/outbound load balancing
• High availability - Active/Standby with state sync
• L2 bridge, wire/virtual wire mode, tap mode, NAT mode
• Asymmetric routing
• Common Access Card (CAC) support

VoIP

• Granular QoS control
• Bandwidth management
• DPI for VoIP traffic
• H.323 gatekeeper and SIP proxy support

Management, monitoring and support

• Capture Security Appliance (CSa) support
• Capture Threat Assessment (CTA) v2.0
  • New design or template
  • Industry and global average comparison
• New UI/UX, Intuitive feature layout
  • Device information, application, threats
  • Topology view
  • Simplified policy creation and management
• Policy/Objects usage statistics
  • Used vs Un-used
  • Active vs Inactive
• Global search for static data
• Storage support
• Internal and external storage management
• WWAN USB card support (5G/LTE/4G/3G)
• Network Security Manager (NSM) support
• Web GUI
• Command line interface (CLI)
• Zero-Touch registration & provisioning
• CSC Simple Reporting
• SonicExpress mobile app support
• SNMPv2/v3
• Logging
• Netflow/IPFix exporting
• Cloud-based configuration backup
• BlueCoat security analytics platform
• Application and bandwidth visualization
• IPv4 and IPv6 management
• CD management screen
• Dell N-Series and X-Series switch management including cascaded switches

Debugging and diagnostics

• Enhanced packet monitoring
• SSH terminal on UI

Wireless

• SonicWave AP cloud and firewall management
• WIDS/WIPS
• Rogue AP prevention
• Fast roaming (802.11k/r/v)
• 802.11s mesh networking
• Auto-channel selection
• RF spectrum analysis
• Floor plan view
• Topology view
• Band steering
• Beamforming
• AirTime fairness
• Bluetooth Low Energy
• MiFi extender
• RF enhancements and improvements
• Guest cyclic quota

Integrated Wireless (TZ380W only)

• 802.11ax
• Dual-band (2.4 GHz and 5.0 GHz)
• 802.11 a/b/g/n/ac wireless standards
• Wireless intrusion detection and prevention
• Wireless guest services
• Lightweight hotspot messaging
• Virtual access point segmentation
• Captive portal
• Cloud ACL