TZ Series Next-
generation
Firewall (NGFW)

Protect your small business or branch location from intrusion, malware and ransomware with an easy-to-use, integrated security solution designed specifically for your needs. SonicWall TZ firewalls deliver enterprise-grade protection without the cost or complexity.

Try Our Live Demo How to Buy

Overview

In an era of the ever-evolving security landscape, small- and medium-sized businesses (SMB) face large challenges when it comes to defending their networks, data and reputation. Keeping up with changes in technology can be as difficult as tracking the growing number of threats.

The SonicWall TZ series of firewalls is designed specifically for the needs of SMBs and branch locations, delivering enterprise-class security without the enterprise-grade complexity. With Zero-Touch Deployment and simplified centralized management, installation and operation is easy. Detect sophisticated threats, including encrypted attacks, with advanced networking and security features, like the multi-engine Capture Advanced Threat Protection (ATP) cloud-based sandbox service with patent-pending Real-Time Deep Memory Inspection (RTDMI™). With optional features like PoE/PoE+ support and 802.11ac Wi-Fi, create a unified security solution for wired and wireless networks.

Simply plug in and enjoy the advanced protection of the cost-effective SonicWall TZ series firewall without worrying about complex management — or the next threat.

Demo for Free

Features

‘Single-pane-of-glass’ Management & Reporting

Manage everything from one location with Network Security Manager, a unified firewall management system that scales for any environment.

SD-WAN and Zero-Touch Deployment Capabilities

SonicWall Secure SD-WAN integrates with TZ firewalls without requiring an additional license, and scales quickly with Zero-Touch Deployment capability.

Deep Memory Inspection

Block even the most advanced attacks with Real-Time Deep Memory Inspection (RTDMI™) and Capture Advanced Threat Protection (ATP).

SSL/TLS Decryption and Inspection

Leverage industry-leading decryption and inspection of TLS/SSL-encrypted traffic in real time, along with TLS 1.3 support.

Superior Performance and Features

Get advanced threat protection at lightning speeds without compromising on performance. The latest generation of TZ firewalls offer expandable storage, redundant power, SonicExpress App onboarding, and more.

Integrated Security Solution

Choose optional PoE and Wi-Fi options with deep integration of SonicOS operating system to deliver an integrated gateway security solution.

Benefits



Advanced Threat Prevention with Deep Memory Inspection

  • Get lightning-fast performance with security processors optimized for speed
  • Gain a deeper level of threat prevention through Real-Time Deep Memory Inspection (RTDMI™)
  • Leverage shared threat intelligence for continuously updated security
  • Rely on a wide range of rich features in SonicWall’s powerful SonicOS operating system

Superior
Performance

  • Leverage multi-core, parallel-processing hardware architecture
  • Achieve fast performance using gigabit and multi-gigabit Ethernet interfaces
  • Take advantage of single-pass, stream-based inspection
  • Inspect simultaneous network streams using deep packet inspection

Network Control and Flexibility

  • Get your firewall up and running quickly with Zero-Touch Deployment
  • Grow your distributed network while lowering costs with Secure SD-WAN
  • Power your PoE-enabled devices with integrated PoE/PoE+ support
  • Gain insight into and control over application usage across the network

Secure, Easy-to-Use Mobile Connectivity

  • Access resources behind the firewall remotely and securely using native 802.11ac wireless SSL VPN
  • Connect from virtually any operating system
  • Detect and remove hidden threats over the VPN connection

TZ Series Models

TZ670

Firewall Inspection Throughput 5.00 Gbps
Application Inspection Throughput 3.0 Gbps
IPS Throughput 3.0 Gbps
Threat Prevention Throughput 2.50 Gbps
VPN Throughput 2.1 Gbps
Maximum Connections 1,500,000
New Connections/Sec 25,000
Ethernet Ports 8x1-GbE, 2x10-GbE
USB Ports 2 USB 3.0
SFP/SFP+ Ports 2
Expansion Slot Storage - up to 256 GB with 32 GB included
Wi-Fi Option
Wireless WAN Support WWAN USB module support (5G/LTE/4G/3G)
Power over Ethernet (PoE) Support 4 ports (4 PoE or 4 PoE+) Applies to TZ600P only
More specs

TZ570/TZ570P/TZ570W

Firewall Inspection Throughput 4.00 Gbps
Application Inspection Throughput 2.5 Gbps
IPS Throughput 2.5 Gbps
Threat Prevention Throughput 2.00 Gbps
VPN Throughput 1.8 Gbps
Maximum Connections 1,250,000
New Connections/Sec 16,000
Ethernet Ports 8x1GbE, 2x5GbE
USB Ports 2 USB 3.0
SFP/SFP+ Ports 2
Expansion Slot Storage - up to 256 GB
Wi-Fi Option 802.11a/b/g/n/ac Wave 2, applies to TZ570W only
Wireless WAN Support WWAN USB module support (5G/LTE/4G/3G)
Power over Ethernet (PoE) Support 5 ports (5 PoE or 3 PoE+) applies to TZ570P only
More specs

TZ470/TZ470W

Firewall Inspection Throughput 3.50 Gbps
Application Inspection Throughput 2.00 Gbps
IPS Throughput 2.00 Gbps
Threat Prevention Throughput 1.50 Gbps
VPN Throughput 1.50 Gbps
Maximum Connections 1,000,000
New Connections/Sec 12,000
Ethernet Ports 8x1GbE, 2x2.5GbE
USB Ports 2 USB 3.0
SFP/SFP+ Ports 2
Expansion Slot Storage - up to 256 GB
Wi-Fi Option 802.11a/b/g/n/ac Wave 2 applies to TZ470W only
Wireless WAN Support WWAN USB module support (5G/LTE/4G/3G)
Power over Ethernet (PoE) Support N/A
More specs

TZ370/TZ370W

Firewall Inspection Throughput 3.00 Gbps
Application Inspection Throughput 1.50 Gbps
IPS Throughput 1.50 Gbps
Threat Prevention Throughput 1.00 Gbps
VPN Throughput 1.30 Gbps
Maximum Connections 900,000
New Connections/Sec 9,000
Ethernet Ports 8x1GbE
USB Ports 2 USB 3.0
SFP/SFP+ Ports N/A
Expansion Slot Storage - up to 256 GB
Wi-Fi Option 802.11a/b/g/n/ac Wave 2 applies to TZ370W only
Wireless WAN Support WWAN USB module support (5G/LTE/4G/3G)
Power over Ethernet (PoE) Support N/A
More specs

TZ270/TZ270W

Firewall Inspection Throughput 2.00 Gbps
Application Inspection Throughput 1.00 Gbps
IPS Throughput 1.00 Gbps
Threat Prevention Throughput 750 Mbps
VPN Throughput 750 Mbps
Maximum Connections 750,000
New Connections/Sec 6,000
Ethernet Ports 8x1GbE
USB Ports 2 USB 3.0
SFP/SFP+ Ports N/A
Expansion Slot Storage - up to 256 GB
Wi-Fi Option 802.11a/b/g/n/ac Wave 2 applies to TZ270W only
Wireless WAN Support WWAN USB module support (5G/LTE/4G/3G)
Power over Ethernet (PoE) Support N/A
More specs

TZ600/TZ600P

Firewall Inspection Throughput 1.9 Gbps
Application Inspection Throughput 1.8 Gbps
IPS Throughput 1.2 Gbps
Threat Prevention Throughput 800 Mbps
VPN Throughput 1.1 Gbps
Maximum Connections 150,000
New Connections/Sec 12,000
Ethernet Ports 10x1-GbE
USB Ports 2 USB
SFP/SFP+ Ports
Expansion Slot 1 Expansion Slot
Wi-Fi Option
Wireless WAN Support WWAN USB module support (LTE/4G/3G)
Power over Ethernet (PoE) Support 4 ports (4 PoE or 4 PoE+) applies to TZ600P only
More specs

TZ500/TZ500W

Firewall Inspection Throughput 1.4 Gbps
Application Inspection Throughput 1.3 Gbps
IPS Throughput 1.0 Gbps
Threat Prevention Throughput 700 Mbps
VPN Throughput 1.0 Gbps
Maximum Connections 150,000
New Connections/Sec 8,000
Ethernet Ports 8x1-GbE
USB Ports 2 USB
SFP/SFP+ Ports
Expansion Slot
Wi-Fi Option 802.11a/b/g/n/ac applies to TZ500W only
Wireless WAN Support WWAN USB module support (LTE/4G/3G)
Power over Ethernet (PoE) Support
More specs

TZ400/TZ400W

Firewall Inspection Throughput 1.3 Gbps
Application Inspection Throughput 1.2 Gbps
IPS Throughput 900 Mbps
Threat Prevention Throughput 600 Mbps
VPN Throughput 900 Mbps
Maximum Connections 150,000
New Connections/Sec 6,000
Ethernet Ports 7x1-GbE
USB Ports 1 USB
SFP/SFP+ Ports
Expansion Slot N/A
Wi-Fi Option 802.11a/b/g/n/ac applies to TZ400W only
Wireless WAN Support WWAN USB module support (LTE/4G/3G)
Power over Ethernet (PoE) Support 4 ports (4 PoE or 4 PoE+) Applies to TZ600P only
More specs

TZ350/TZ350W

Firewall Inspection Throughput 1.0 Gbps
Application Inspection Throughput 600 Mbps
IPS Throughput 400 Mbps
Threat Prevention Throughput 335 Mbps
VPN Throughput 430 Mbps
Maximum Connections 100,000
New Connections/Sec 6,000
Ethernet Ports 5x1-GbE
USB Ports 1 x USB
SFP/SFP+ Ports
Expansion Slot
Wi-Fi Option 802.11a/b/g/n/ac applies to TZ350W only
Wireless WAN Support WWAN USB module support (LTE/4G/3G)
Power over Ethernet (PoE) Support
More specs

TZ300/TZ300P/TZ300W

Firewall Inspection Throughput 750 Mbps
Application Inspection Throughput 375 Mbps
IPS Throughput 300 Mbps
Threat Prevention Throughput 235 Mbps
VPN Throughput 300 Mbps
Maximum Connections 100,000
New Connections/Sec 5,000
Ethernet Ports 5x1-GbE
USB Ports 1 x USB
SFP/SFP+ Ports
Expansion Slot
Wi-Fi Option 802.11a/b/g/n/ac applies to TZ300W only
Wireless WAN Support WWAN USB module support (LTE/4G/3G)
Power over Ethernet (PoE) Support 2 ports (2 PoE or 1 PoE+) applies to TZ300P only
More specs

SOHO 250/SOHO 250W

Firewall Inspection Throughput 600 Mbps
Application Inspection Throughput 275 Mbps
IPS Throughput 250 Mbps
Threat Prevention Throughput 200 Mbps
VPN Throughput 200 Mbps
Maximum Connections 50,000
New Connections/Sec 3,000
Ethernet Ports 5x1-GbE
USB Ports 1 x USB
SFP/SFP+ Ports
Expansion Slot
Wi-Fi Option 802.11a/b/g/n applies to SOHO 250W only
Wireless WAN Support WWAN USB module support (LTE/4G/3G)
Power over Ethernet (PoE) Support
More specs

Security Services & Management

SonicWall Security Subscription Bundles

SonicWall offers Essential and Advanced security subscription bundles on Gen 7 TZ Series firewalls. Add SonicWall Essential Protection Service Suite to your TZ series firewall to gain essential security services needed to protect against known and unknown cyberattacks. Upgrade to the Advanced Protection Service Suite for enhanced protection that extends the security of your network with essential cloud security services.

FEATUREESSENTIALADVANCED
GAV, IPS, Application Control
Content Filtering Service
Anti-Spam
24 x 7 Support
Network Visibility (Topology with Host Info)
Capture ATP (Multi-Engine) Sandboxing
RTDMI Technology
DNS Security
Advanced DNS Security (DNS Filtering)O
Cloud ManagementO
Cloud-Based Reporting – 7 DaysO
Premier SupportO
O  Optional    Not Available    Included
Contact Sales

SonicWall Advanced Gateway Security Suite (AGSS)

SonicWall Advanced Gateway Security Suite (AGSS) integrates a wide range of network security services into a convenient, affordable package. AGSS is available as an add-on service for all physical and virtual SonicWall firewalls, including our NSsp, NSa, TZ and NSv Series to protect against the most advanced and unknown threats.

Features:
  • Complete network security solution that includes the multi-engine Capture Advanced Threat Protection (ATP) cloud sandbox service with RTDMI
  • ICSA-certified gateway anti-virus and anti-spyware protection
  • Cutting-edge IPS technology
  • Application intelligence and control
  • Content filtering
  • 24x7 support with firmware updates and hardware replacement

Learn More

SonicWall Capture Advanced Threat Protection Service (Capture ATP)

Mitigate the risk of zero-day threats with SonicWall Capture Advanced Threat Protection (ATP) sandbox, a cloud-based service that detects and blocks unknown threats at the gateway until a verdict is rendered. This service is the only advanced threat detection offering that combines multi-layer sandboxing, including SonicWall Real-Time Deep Memory Inspection (RTDMI™), full system emulation and virtualization techniques, to analyze suspicious code behavior. This powerful combination detects more threats than single-engine sandbox solutions, which are compute-environment specific and susceptible to evasion.

Learn More

Content Filtering Service (CFS)

SonicWall Content Filtering Service (CFS), running on SonicWall next-generation firewalls (NGFWs) is a powerful protection and productivity solution that delivers unequaled content filtering enforcement for educational institutions, businesses, libraries and government agencies. Using SonicWall CFS, organizations have control over the websites students, faculty and employees can access.

Learn More

Comprehensive Anti-Spam Service

SonicWall Comprehensive Anti-Spam Service offers small- to medium-sized businesses comprehensive protection from spam and viruses, with instant deployment over existing SonicWall firewalls. The service speeds deployment, eases administration and reduces overhead by consolidating solutions, providing one-click anti-spam services, with advanced configuration. The anti-spam service offers complete inbound anti-spam, anti-phishing, anti-malware protection and features, IP-reputation lookup, advanced content management, denial of service prevention, full quarantine and customizable per-user junk summaries.

Learn More

Accessories

Order replacement parts and upgrades, including power supplies and rack-mount kits, for your SonicWall TZ series firewall.

See all Accessories

Centrally Manage Your
Firewalls with Network
Security Manager

SonicWall Network Security Manager (NSM) gives you everything
you need for comprehensive firewall management.

  • SonicWall Network Security Manager (NSM) gives you everything you need for comprehensive firewall management.
  • Deploy and administer firewalls remotely with Zero-Touch Deployment
  • Identify and remedy security risks through detailed analytics and intuitive dashboards
  • Simplify set-up with configuration wizards

Gen 7 Firewalls:
Our Platform-Ready
NGFW

SonicWall’s Gen 7 NGFWs offer vastly improved stability, performance, and threat protection regardless of encryption or file size. Features like stateful high-availability and power supply redundancy deliver ‘always-on’ continuity, while superior UX and simpler, single-pane-of-glass management ease complexity. These firewalls deliver superior UX and simpler, single-pane-of-glass management. And with SD-WAN and DPI-SSL included, they offer an industry-leading TCO.

Read More

Secure SD-Branch

SonicWall Secure Software-Defined Branch (SD-Branch) improves user experience and secures connectivity at branch offices. This integrated solution combines SD-LAN, SD-WAN and security for distributed enter-prises, allowing you to take advantage of cheaper connec-tivity between HQ and branches, safeguard BYOD and SaaS applications, and scale easily with the rise in mobile devices.

Learn More

Try a
Live Demo

Explore the features and interface of the SonicWall TZ series firewall in a functional live demo.

See For Yourself

Resources

Solution Brief

Choosing the Best Firewall for SMB and Branch Office

Read More
Case Study

Data-Sec


Read More
Blog

SonicWall TZ270/370/470: Accelerating Digital Transformation for SMBs & Secure SD-Branches

Read More

What Our Customers
Are Saying about us: