FIREWALL
SECURITY SERVICES
Add advanced, real-time threat protection and management to your SonicWall firewall.
Understanding and managing effective network security can be challenging and complex. SonicWall firewall security services deliver real-time, expert-managed protection against modern threats like ransomware, malware, and intrusions, simplifying security for businesses of all sizes. With Managed Protection Security Suite (MPSS), organizations gain 24/7 monitoring and expert configuration to prevent missteps.
Feature Highlights
Enhance Attack Protection with Proven Services
These services, in tandem with our next-gen firewalls, help address the reality that over 90% of breaches stem from human error and attackers exploit vulnerabilities within 48 hours. Misconfigurations alone account for over 60% of security incidents. An unmanaged or mis-managed firewall can create an avoidable risk to an organization. SonicWall empowers businesses to reduce risk, stay compliant, and scale securely with smarter, co-managed cybersecurity - providing the peace of mind customers need in today's threat landscape.
Fully Managed Firewall with MPSS
- Ensure your firewall is always delivering the protection you expect with 24/7 alerts of firewall events, including going offline or being changed locally.
- Never miss an update. The SonicWall Managed Security Suite team will notify you when firmware updates need to be applied and will handle them at your convenience.
- 30-day reporting and analytics
Security Service Bundles
A Complete Threat Prevention Stack
Every SonicWall security service bundle layers multiple protection technologies into one easy-to-manage subscription. Services apply to Gen 7 and Gen 8 firewall platforms.
Essential Protection Security Suite
Advanced Protection Security Suite
Managed Protection Security Suite
Secure Connectivity Options
SonicWall Secure Connectivity licenses are purpose-built subscription tiers for organizations that need reliable, managed network connectivity without the complexity of a full threat prevention stack. Designed exclusively for the Gen 8 platform, they provide a straightforward on-ramp for small branch offices, remote sites, and cloud-edge deployments that connect back to a centralized security environment or SASE architecture.
Secure Connect Lite (for TZ80 Only)
Available for the TZ80 and NSv XS, this option builds on the foundation for connectivity and network policy enforcement with centralized management and full 24/7 around-the-clock support, making it well-suited for branch sites that must maintain consistent uptime and integrate into a larger, centrally managed network.
Highlights:
- SD-WAN and advanced routing for optimized WAN performance
- Business-hours web, chat, and email support
- Low total cost of ownership for micro-branches and remote sites
Secure Connect (for TZ80 and NSv XS)
Available for the TZ80 and NSv XS, this option builds on the foundation for connectivity and network policy enforcement with centralized management and full 24/7 around-the-clock support, making it well-suited for branch sites that must maintain consistent uptime and integrate into a larger, centrally managed network.
Highlights:
- SD-WAN and advanced routing
- Centralized cloud management across all connected sites
- 24/7 around-the-clock support for always-on availability
- Natural upgrade path to Security Suites as security needs grow
Firewall Licensing
Gen 7 & Gen 8 Licensing
Feature Highlights across Secure Connect Lite / Secure Connect / EPSS / APSS / MPSS
| Feature Highlights | Secure Connect Lite* | Secure Connect** | EPSS*** | APSS | MPSS |
|---|---|---|---|---|---|
| Low cost, biz-hours support (TZ80 only) | HQ/SASE deployments (TZ80 & NSv XS) | Essential security services | Advanced security services | 24/7 Managed Firewall | |
| Solution Support | Web / Chat / Email | 24x7 Round-Clock |  | | |
| Centralized Management and Alerting | | | | | |
| Stateful Firewall | | | | | |
| SD-WAN & Advanced Routing | | | | | |
| Intrusion Detection & Prevention (IPS) | | | | ||
| Content & Reputation Based Filtering | | | | ||
| Capture ATP Sandboxing | | | | ||
| DNS Filtering | Add-On | | | ||
| Summarized Reporting | | N/A | N/A | ||
| Centralized Reporting (Advanced) & Full Logging† | Add-On | 7 Days | 30 Days | ||
| Centralized Analytics & Network Forensics† | Add-On | 7 Days | 30 Days | ||
| Embedded Cyber-Warranty by Cysurance | Up to $100,000 | Up to $100,000 | Up to $200,000 | ||
| 24x7 Managed Firewall & Enhanced Support | | ||||
| Firewall Configuration Management | | ||||
| After Hours Critical Support | |
* Secure Connect Lite is only available for TZ80
** Secure Connect is available for both TZ80 and NSv XS
*** EPSS is only available for Gen 7 TZ Series, starting May 1, 2026
† Reporting and analytics are extendable to 30, 90, or 365 days
Datasheets
Managed Protection Security Suite Bundle
Augment Your NOC and Scale Your MSP Business with the Managed Protection Security Suite
SonicWall Protection Security Suites
Resources
