SonicWall TZ670 Series
Comprehensive Entry Level Next-Generation Firewall
SonicWall TZ670 Appliance
Our Price: $4,243.46
Our Price: Request a Quote
SonicWall TZ670 Appliance with 2 Years of Essential Protection Services Suite. Essential Protection Service Suite includes Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Premium Services, Anti-Spam and 24x7 Support with firmware.
Our Price: $7,282.56
SonicWall TZ670 Appliance with 3 Years of Essential Protection Services Suite. Essential Protection Service Suite includes Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Premium Services, Anti-Spam and 24x7 Support with firmware.
Our Price: $9,885.90
SonicWall TZ670 Appliance with 2 Years of Advanced Protection Services Suite. Advanced Protection Service Suite (APSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, NSM Essential with Management & 7-Day Reporting and 24x7 Support with firmware.
Our Price: $8,195.00
SonicWall TZ670 Appliance with 3 Years of Advanced Protection Services Suite. Advanced Protection Service Suite (APSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, NSM Essential with Management & 7-Day Reporting and 24x7 Support with firmware.
Our Price: $11,578.21
SonicWall TZ670 High Availability Appliance
Our Price: $2,967.18
Enables Stateful High Availability feature
Our Price: $932.18
Converts HA unit to the basic standalone appliance (no services)
Our Price: $1,276.28
SonicWall TZ670 Appliance with 1 Year of Essential Protection Service Suite. Essential Protection Service Suite (EPSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam and 24x7 Support with firmware.
Our Price: $6,846.79
SonicWall TZ670 Appliance with 1 Year of Advanced Protection Service Suite. Advanced Protection Service Suite (APSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, NSM Essential with Management & 7-Day Reporting and 24x7 Support with firmware.
Our Price: $7,626.67
More pricing below, click here!
Please Note: All Prices are Inclusive of GST
Overview:
The SonicWall TZ670 is the first desktop-form-factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces.
Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class price performance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.
The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.
Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.
SonicOS and Security Services
The SonicOS architecture is at the core of TZ NGFWs. Gen 7 TZs are powered by the feature rich SonicOS 7.0 operating system with new modern looking UX/UI, advanced security, networking and management capabilities. Gen 7 TZ features integrated SD-WAN, TLS 1.3 support, real-time visualization, high-speed virtual private networking (VPN) and other robust security features.
Unknown threats are sent to SonicWall's cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. Enhancing Capture ATP is our patentpending Real-Time Deep Memory Inspection (RTDMI™) technology. As one of Capture ATP's engine, RTDMI detects and blocks malware and zero-day threats by inspecting directly in memory.
By leveraging Capture ATP with RTDMI technology, in addition to security services such as ReassemblyFree Deep Packet Inspection (RFDPI), Anti-virus and Anti-spyware Protection, intrusion prevention system, Application Intelligence and Control, Content Filtering Services, DPI-SSL, TZ series firewalls stop malware, ransomware and other advanced threats at the gateway.
Highlights
- 10 GbE interfaces in a desktop form factor
- SD-Branch ready
- Secure SD-WAN capability
- SonicExpress App onboarding
- Zero-Touch Deployment
- Single-pane-of-glass-management through cloud or firewall
- SonicWall Switch, SonicWave Access Point and Capture Client integration
- Built-in and expandable storage
- Redundant power
- High port density
- Cellular failover
- SonicOS 7.0
- TLS 1.3 support
- Groundbreaking performance
- High connection count
- Fast DPI performance
- Low TCO
Deployments
Small to Medium size Business
- Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities
- Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass
- Attain business continuity by providing failover to cellular connectivity
- Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more
- Leverage high port density to power on multiple PoE devices such as IP phones and IP cameras with TZ570P
- Boost employee productivity by blocking unauthorised access with traffic segmentation and access policies
Distributed Enterprise with SD-Branches
- Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch
- Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape
- Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3
- Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client
- Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations
- Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ’s hardware and software enhancements, plus features such SD-WAN technology
- Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment
- Ensure business continuity by providing failover to cellular connectivity
- Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes
Specifications:
Firewall General | TZ270 SERIES | TZ370 SERIES | TZ470 SERIES | TZ570 SERIES | TZ670 SERIES | |||
---|---|---|---|---|---|---|---|---|
Operating system | SonicOS 7.0 | |||||||
Interfaces | 8x1GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2x2.5GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2x5GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console | |||
Wireless support | 2x2 802.11ac Wave 2 (TZ270W) |
2x2 802.11ac Wave 2 (TZ370W) |
2x2 802.11ac Wave 2 (TZ470W) |
2x2 802.11ac Wave 2 (TZ570W) |
N/A | |||
Power over Ethernet (PoE) support | N/A | N/A | N/A | 5 PoE or 3PoE+ (TZ570P) | N/A | |||
Storage Expansion slot | Optional up to 256GB | Optional up to 256GB, 32GB included | ||||||
Management | Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs | |||||||
Redundant power supply | N/A | N/A | N/A | Yes | Yes | |||
Single Sign-On (SSO) Users | 1,000 | 1,000 | 2,500 | 2,500 | 2,500 | |||
VLAN interfaces | 64 | 128 | 128 | 256 | 256 | |||
Access points supported (maximum) | 16 | 16 | 32 | 32 | 32 | |||
Firewall/VPN Performance | TZ270 SERIES | TZ370 SERIES | TZ470 SERIES | TZ570 SERIES | TZ670 SERIES | |||
Firewall inspection throughput1 | 2 Gbps | 3 Gbps | 3.5 Gbps | 4 Gbps | 5 Gbps | |||
Threat Prevention throughput2 | 750 Mbps | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | |||
Application inspection throughput2 | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | 3 Gbps | |||
IPS throughput2 | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | 3 Gbps | |||
Anti-malware inspection throughput2 | 750 Mbps | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | |||
TLS/SSL inspection and decryption throughput (DPI SSL)2 | 300 Mbps | 500 Mbps | 600 Mbps | 750 Mbps | 800 Mbps | |||
IPSec VPN throughput3 | 750 Mbps | 1.38 Gbps | 1.5 Gbps | 1.8 Gbps | 2.1 Gbps | |||
Connections per second | 6,000 | 9,000 | 12,000 | 16,000 | 25,000 | |||
Maximum connections (SPI) | 750,000 | 900,000 | 1,000,000 | 1,250,000 | 1,500,000 | |||
Maximum connections (DPI) | 150,000 | 200,000 | 550,000 | 400,000 | 500,000 | |||
Maximum connections (DPI SSL) | 25,000 | 30,000 | 35,000 | 50,000 | 75,000 | |||
VPN | TZ270 SERIES | TZ370 SERIES | TZ470 SERIES | TZ570 SERIES | TZ670 SERIES | |||
Site-to-site VPN tunnels | 50 | 100 | 150 | 200 | 250 | |||
IPSec VPN clients (maximum) | 5 (200) | 5 (200) | 5 (200) | 10 (500) | 10 (500) | |||
SSL VPN licenses (maximum) | 1 (50) | 2 (100) | 2 (150) | 2 (200) | 2 (250) | |||
Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography | |||||||
Key exchange | Diffie Hellman Groups 1, 2, 5, 14v | |||||||
Route-based VPN | RIP, OSPF, BGP | |||||||
Certificate support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP | |||||||
VPN features | Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN | |||||||
Global VPN client platforms supported | Microsoft® Windows 10 | |||||||
NetExtender | Microsoft Windows 10, Linux | |||||||
Mobile Connect | Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10 | |||||||
Security Services | TZ270 SERIES | TZ370 SERIES | TZ470 SERIES | TZ570 SERIES | TZ670 SERIES | |||
Deep Packet Inspection services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL | |||||||
Content Filtering Service (CFS) | HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists | |||||||
Comprehensive Anti-Spam Service | Yes | |||||||
Application Visualization | Yes | |||||||
Application Control | Yes | |||||||
Capture Advanced Threat Protection | Yes | |||||||
Networking | TZ270 SERIES | TZ370 SERIES | TZ470 SERIES | TZ570 SERIES | TZ670 SERIES | |||
IP address assignment | Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay | |||||||
NAT modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode | |||||||
Routing protocols4 | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | |||||||
QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) | |||||||
Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | |||||||
Local user database | 150 | 250 | 250 | 250 | 250 | |||
VoIP | Full H.323v1-5, SIP | |||||||
Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 | |||||||
Certifications (pending) | FIPS 140-2 (with Suite B) Level 2, UC APL, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS) | |||||||
High availability | Active/Standby with stateful synchronization | |||||||
Hardware | TZ270 SERIES | TZ370 SERIES | TZ470 SERIES | TZ570 SERIES | TZ670 SERIES | |||
Form factor | Desktop4 | |||||||
Power supply | 36W external | 36W external | 36W external | 60W external (TZ570/570W), 180W external (TZ570P only) |
60W external | |||
Maximum power consumption (W) | 16.84 (TZ270), 18.91 (TZ270W) |
16.84 (TZ370), 18.91 (TZ370W) |
19.95 (TZ470), 21.98 (TZ470W) |
13.4 (TZ570), 15.3 (TZ570W), 108.75 (TZ570P) |
13.1 | |||
Input power | 100-240 VAC, 50-60 Hz, 3A |
100-240 VAC, 50-60 Hz, 3A |
100-240 VAC, 50-60 Hz, 3A |
100-240 VAC, 50-60 Hz |
100-240 VAC, 50-60 Hz |
|||
Total heat dissipation (BTU) | 57.42 (TZ270), 64.48 (TZ270W) |
57.42 (TZ270), 64.48 (TZ270W) |
68.03 (TZ470), 74.95 (TZ470W) |
44.7 (TZ570), 52.17 (TZ570W), 370.84 (TZ570P) |
55.1 | |||
Dimensions | 3.5x13.5x19 (cm) 1.8x5.3x7.5 (in) |
3.5x13.5x19 (cm) 1.8x5.3x7.5 (in) |
3.5x13.5x19 (cm) 1.8x5.3x7.5 (in) |
3.5x15x22.5 (cm) 1.38x5.91x8.85 in |
3.5x15x22.5 (cm) 1.38x5.91x 8.85 in |
|||
Weight | 0.82 kg / 1.81
lbs (TZ270), 0.85 kg / 1.87 lbs (TZ270W) |
0.82 kg / 1.81
lbs (TZ370), 0.85 kg / 1.87 lbs (TZ370W) |
0.83 kg / 1.82
lbs (TZ470), 0.87 kg / 1.92 lbs (TZ470W) |
0.97 kg / 2.14
lbs (TZ570), 0.99 kg / 2.18 lbs (TZ570W), 1.05 kg / 2.31 lbs (TZ570P) |
0.97 kg / 2.14 lbs | |||
WEEE weight | 1.18 kg / 2.6 lbs
(TZ270), 1.24 kg / 2.73 lbs (TZ270W) |
1.18 kg / 2.6 lbs
(TZ370), 1.24 kg / 2.73 lbs (TZ370W) |
1.24 kg / 2.73 lbs
(TZ470), 1.27 kg / 2.8 lbs (TZ470W) |
1.42 kg / 3.13 lbs
(TZ570), 1.47 kg / 3.24 lbs (TZ570W), 1.57 kg / 3.46 lbs (TZ570P) |
1.42 kg / 3.13 lbs | |||
Shipping weight | 1.41 kg / 3.11 lbs
(TZ270), 1.47 kg / 3.25 lbs (TZ270W) |
1.41 kg / 3.11 lbs
(TZ370), 1.47 kg / 3.25 lbs (TZ370W) |
1.43 kg / 3.15 lbs
(TZ470), 1.51 kg / 3.33 lbs (TZ470W) |
1.93 kg / 4.25 lbs
(TZ570), 1.98 kg / 4.36 lbs (TZ570W), 2.08 kg / 4.58 lbs (TZ570P) |
1.93 kg / 4.25 lbs | |||
MTBF (in years) | 51.1 (TZ270), 27.1 (TZ270W) |
51.1 (TZ370), 27.1 (TZ370W) |
46 (TZ470), 24.1 (TZ470W) |
26.1 (TZ570), 23.3 (TZ570W), 31.7 (TZ570P) |
43.9 | |||
Environment (Operating/Storage) | 32°-105° F (0°-40° C) / -40° to 158° F (-40° to 70° C) | |||||||
Humidity | 5-95% non-condensing | |||||||
Regulatory | TZ270 SERIES | TZ370 SERIES | TZ470 SERIES | TZ570 SERIES | TZ670 SERIES | |||
Major regulatory compliance (wired models) | FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL | FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC MSIP, ANATEL | FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL | FCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL | FCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL | |||
Major regulatory compliance (wireless models) | FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL | FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/ TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL | FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL | FCC Class B, FCC P15C, FCC P15E, ICES Class B, ISED/ IC, CE (RED, RoHS), C-Tick, VCCI Class B, Japan Wireless, UL/cUL, TUV GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, NCC (TW) KCC/MSIP, SRRC, ANATEL | N/A | |||
Major regulatory compliance (PoE models) | N/A | N/A | N/A | FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, UL/ cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL | N/A | |||
Integrated Wireless5 | (TZ270W / 370W/ 470W / 570W ONLY) | |||||||
Standards | 802.11a/b/g/n/ac Wave 2, WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | |||||||
Frequency bands | 802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 5.180-5.825 GHz | |||||||
Operating channels | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64; 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | |||||||
Transmit output power | Based on the regulatory domain specified by the system administrator | |||||||
Transmit power control | Yes | |||||||
Data rates supported | 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | |||||||
Modulation technology spectrum | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) |
1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Keysight HTTP performance test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled with default firewall settings.
3 VPN throughput measured with UDP traffic using 1418 byte packet size AESGMAC16-256 Encryption adhering to RFC 2544. All specifications, features and availability are subject to change.
4 For rack mount, separate rack mount kit available.
5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products.
SonicOS 7.0 Feature Summary:
Firewall
- Stateful packet inspection
- Reassembly-Free Deep Packet Inspection
- DDoS attack protection (UDP/ ICMP/SYN flood)
- IPv4/IPv6 support
- Biometric authentication for remote access
- DNS proxy
- Full API support
- SonicWall Switch integration
- SD-WAN scalability
- SD-WAN Usability Wizard1
- SonicCoreX and SonicOS containerization1
- Connections scalability (SPI, DPI, DPI SSL)
Enhanced dashboard1
- Enhanced device view
- Top traffic and user summary
- Insights to threats
- Notification center
TLS/SSL/SSH decryption and inspection
- TLS 1.3 with enhanced security1
- Deep packet inspection for TLS/SSL/SSH
- Inclusion/exclusion of objects, groups or hostnames
- SSL control
- Enhancements for DPI-SSL with CFS
- Granular DPI SSL controls per zone or rule
Capture advanced threat protection2
- Real-Time Deep Memory Inspection
- Cloud-based multi-engine analysis
- Virtualized sandboxing
- Hypervisor level analysis
- Full system emulation
- Broad file type examination
- Automated and manual submission
- Real-time threat intelligence updates
- Block until verdict
- Capture Client
Intrusion prevention2
- Signature-based scanning
- Automatic signature updates
- Bi-directional inspection
- Granular IPS rule capability
- GeoIP enforcement
- Botnet filtering with dynamic list
- Regular expression matching
Anti-malware2
- Stream-based malware scanning
- Gateway anti-virus
- Gateway anti-spyware
- Bi-directional inspection
- No file size limitation
- Cloud malware database
Application identification2
- Application control
- Application bandwidth management
- Custom application signature creation
- Data leakage prevention
- Application reporting over NetFlow/IPFIX
- Comprehensive application signature database
Traffic visualization and analytics
- User activity
- Application/bandwidth/threat usage
- Cloud-based analytics
HTTP/HTTPS Web content filtering2
- URL filtering
- Proxy avoidance
- Keyword blocking
- Policy-based filtering (exclusion/inclusion)
- HTTP header insertion
- Bandwidth manage CFS rating categories
- Unified policy model with app control
- Content Filtering Client
VPN
- Secure SD-WAN
- Auto-provision VPN
- IPSec VPN for site-to-site connectivity
- SSL VPN and IPSec client remote access
- Redundant VPN gateway
- Mobile Connect for iOS, Mac OS X, Windows, Chrome, Android and Kindle Fire
- Route-based VPN (OSPF, RIP, BGP)
Networking
- PortShield
- Path MTU discovery
- Enhanced logging
- VLAN trunking
- Port mirroring (NSA 2650 and above)
- Layer-2 QoS
- Port security
- Dynamic routing (RIP/OSPF/BGP)
- SonicWall wireless controller
- Policy-based routing (ToS/ metric and ECMP)
- NAT
- DHCP server
- Bandwidth management
- A/P high availability with state sync
- Inbound/outbound load balancing
- High availability - Active/Standby with state sync
- L2 bridge, wire/virtual wire mode, tap mode, NAT mode
- Asymmetric routing
- Common Access Card (CAC) support
VoIP
- Granular QoS control
- Bandwidth management
- DPI for VoIP traffic
- H.323 gatekeeper and SIP proxy support
Debugging and diagnostics
- Enhanced packet monitoring
- SSH terminal on UI
Management, monitoring and support
- Capture Security Appliance (CSa) support
- Capture Threat Assessment (CTA) v2.0
- New design or template
- Industry and global average comparison
- New UI/UX, Intuitive feature layout1
- Dashboard
- Device information, application, threats
- Topology view
- Simplified policy creation and management
- Policy/Objects usage statistics1
- Used vs Un-used
- Active vs Inactive
- Global search for static data
- Storage support1
- Internal and external storage management1
- WWAN USB card support (5G/LTE/4G/3G)
- Network Security Manager (NSM) support
- Web GUI
- Command line interface (CLI)
- Zero-Touch registration & provisioning
- CSC Simple Reporting1
- SonicExpress mobile app support
- SNMPv2/v3
- Centralized management and reporting with SonicWall Global Management System (GMS)2
- Logging
- Netflow/IPFix exporting
- Cloud-based configuration backup
- BlueCoat security analytics platform
- Application and bandwidth visualization
- IPv4 and IPv6 management
- CD management screen
- Dell N-Series and X-Series switch management including cascaded switches
Wireless
- SonicWave AP cloud management
- WIDS/WIPS
- Rogue AP prevention
- Fast roaming (802.11k/r/v)
- 802.11s mesh networking
- Auto-channel selection
- RF spectrum analysis
- Floor plan view
- Topology view
- Band steering
- Beamforming
- AirTime fairness
- Bluetooth Low Energy
- MiFi extender
- RF enhancements and improvements
- Guest cyclic quota
Integrated Wireless (TZ270/370/470/570W only)
- 802.11ac Wave 2 wireless
- Dual-band (2.4 GHz and 5.0 GHz)
- 802.11 a/b/g/n/ac wireless standards
- Wireless intrusion detection and prevention
- Wireless guest services
- Lightweight hotspot messaging
- Virtual access point segmentation
- Captive portal
- Cloud ACL
1 New feature, available on SonicOS 7.0
2 Requires added subscription
Documentation:
Download the SonicWall TZ Series (Gen 7) Datasheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing and product availability subject to change without notice.
SonicWall TZ670 Appliance
Our Price: $4,243.46
Our Price: Request a Quote
SonicWall TZ670 Appliance with 2 Years of Essential Protection Services Suite. Essential Protection Service Suite includes Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Premium Services, Anti-Spam and 24x7 Support with firmware.
Our Price: $7,282.56
SonicWall TZ670 Appliance with 3 Years of Essential Protection Services Suite. Essential Protection Service Suite includes Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Premium Services, Anti-Spam and 24x7 Support with firmware.
Our Price: $9,885.90
SonicWall TZ670 Appliance with 2 Years of Advanced Protection Services Suite. Advanced Protection Service Suite (APSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, NSM Essential with Management & 7-Day Reporting and 24x7 Support with firmware.
Our Price: $8,195.00
SonicWall TZ670 Appliance with 3 Years of Advanced Protection Services Suite. Advanced Protection Service Suite (APSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, NSM Essential with Management & 7-Day Reporting and 24x7 Support with firmware.
Our Price: $11,578.21
SonicWall TZ670 High Availability Appliance
Our Price: $2,967.18
Enables Stateful High Availability feature
Our Price: $932.18
Converts HA unit to the basic standalone appliance (no services)
Our Price: $1,276.28
SonicWall TZ670 Appliance with 1 Year of Essential Protection Service Suite. Essential Protection Service Suite (EPSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam and 24x7 Support with firmware.
Our Price: $6,846.79
SonicWall TZ670 Appliance with 1 Year of Advanced Protection Service Suite. Advanced Protection Service Suite (APSS) includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, NSM Essential with Management & 7-Day Reporting and 24x7 Support with firmware.
Our Price: $7,626.67
Our Price: $3,673.72
Our Price: $8,816.92
Our Price: $4,656.67
Our Price: $11,174.87
Our Price: $1,228.33
Our Price: $2,948.85
Our Price: $4,913.33
Our Price: $1,228.33
Our Price: $2,948.85
Our Price: $4,913.33
Our Price: $1,228.33
Our Price: $2,948.85
Our Price: $4,913.33
Our Price: $1,965.90
Our Price: $4,717.31
Our Price: $7,862.18
Our Price: $1,122.56
Our Price: $2,695.00
Our Price: $4,493.08
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: $181.92
Our Price: $232.69
Our Price: $303.21
Our Price: $547.18
Our Price: $9.87
Our Price: $111.41
SonicWall TZ670/570 Rackmount Kit
Our Price: $435.77
Our Price: $658.59
Our Price: $101.54
Our Price: $435.77
Our Price: $699.49
Our Price: $760.13
Our Price: $911.03
Our Price: $101.54
Our Price: $435.77