Description
For larger branch office locations, the SonicWall TZ500 series delivers enterprise-grade protection. Flexible wireless deployment is available with optional 802.11ac dual-band wireless integrated into the firewall.
A high-performance integrated threat prevention platform for small/medium organizations and distributed enterprises.
Get high-speed threat prevention in a flexible, integrated security solution with the SonicWall TZ Series. Designed for small networks and distributed enterprises with remote and branch locations, the TZ Series offers five different models that can be tuned to meet your specific needs. Advanced networking and management features such as Secure SD-WAN and Zero-Touch Deployment make it easy to bring up new sites as you need. Add optional capabilities including PoE/PoE+ support and 802.11ac WiFi to create a unified security solution that protects your network and data from the latest threats over wired and wireless connections.
INTEGRATED THREAT PREVENTION AND SD-WAN PLATFORM
- Consolidate essential security and networking capabilities in a single, integrated solution
- Protect against known and unknown attacks with cloud-based and on-box threat prevention
- Decrypt and inspect TLS/SSL and SSH encrypted traffic in real time
- Gain enhanced flexibility by adding optional integrated 802.11ac wireless or PoE/PoE+
- Easily deploy and configure with Zero-Touch Deployment
- Centrally manage using cloud-based Capture Security Center
ADVANCED THREAT PREVENTION
- Block more attacks with Real-Time Deep Memory Inspection (RTDMI) & Reassembly-Free Deep Packet Inspection (RFDPI)
- Prevent advanced threats with cloud-based and on-box threat prevention
- Decrypt and inspect TLS/SSL-encrypted traffic in real time
- Inspect for threats on all ports and protocols without file size limitations
HIGH-SPEED PERFORMANCE
- Leverage multi-core parallel-processing hardware architecture
- Achieve fast performance using Gigabit Ethernet interfaces
- Take advantage of single-pass stream-based inspection
- Inspect simultaneous network streams using deep packet inspection
- Add integrated 802.11ac wireless
NETWORK CONTROL AND FLEXIBILITY
- Access a wide range of networking features in SonicWall’s powerful SonicOS operating system
- Grow your distributed network while lowering costs with Secure SD-WAN
- Power your PoE-enabled devices with integrated PoE/PoE+ support
- Gain insight into and control over application usage across the network
- Segment your network with VLANs
SECURE, EASY-TO-USE MOBILE CONNECTIVITY
- Access resources behind the firewall remotely and securely using native SSL VPN
- Connect from virtually any operating system – Apple® iOS, Google® Android, Windows® 8.1, Mac OS® X, Kindle Fire and Linux
- Scan for and remove hidden threats over the VPN connection
SONICWALL CAPTURE CLOUD PLATFORM
- Take advantage of threat intelligence consolidated from more than one million SonicWall sensors
- Stay protected in real time with automatically delivered signatures developed by SonicWall Capture Labs researchers
- Continually access the Capture Cloud Platform for millions of malware signatures
- Utilize single pane of glass management, licensing, reporting and analytics through the Capture Cloud Platform
Advanced Threat Protection Option
11 Cool Things Your Firewall Should Do
Decryption and Inspection of Encrypted Traffic
Visit the SonicWALL Worldwide Security Center
Legend: S — Standard, O — Optional, N — Not Available
| SOHO | TZ300 | TZ400 | TZ500 | TZ600 | |
|---|---|---|---|---|---|
| TotalSecure Firewall Overview | |||||
| Deep Packet Inspection Firewall | S | S | S | S | S |
| Stateful Packet Inspection Firewall | S | S | S | S | S |
| Unlimited File Size Protection | S | S | S | S | S |
| Protocols Scanned | S | S | S | S | S |
| Security Services Included | |||||
| Application Intelligence and Control | S | S | S | S | S |
| Intrusion Prevention Service | S | S | S | S | S |
| Gateway Anti-Virus and Anti-Spyware | S | S | S | S | S |
| Content & URL Filtering (CFS) | S | S | S | S | S |
| SSL Inspection (DPI SSL) | S | S | S | S | S |
| Content Filtering Client (CFC)1 | O | O | O | O | O |
| Analyzer Reporting1 | O | O | O | O | O |
| Capture Advance Threat Protection1 | N | O | O | O | O |
| Enforced Client Anti-Virus and Anti-Spyware1 | O | O | O | O | O |
| 24×7 Support | S | S | S | S | S |
| Firewall General | |||||
| Interfaces | 5×1-GbE, 1 USB, 1 Console | 5×1-GbE, 1 USB, 1 Console | 7×1-GbE, 1 USB, 1 Console | 8×1-GbE, 2 USB, 1 Console | 10×1-GbE, 2 USB, 1 Console, 1 Expansion Slot |
| Management | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| Site-to-Site VPN Tunnels | 10 | 10 | 20 | 25 | 50 |
| IPSec VPN Clients (Maximum) | 1 (5) | 1 (10) | 2 (25) | 2 (25) | 2 (25) |
| SSL VPN Licenses (Maximum) | 1 (10) | 1 (50) | 2 (100) | 2 (150) | 2 (200) |
| VLAN Interfaces | 25 | 25 | 50 | 50 | 50 |
| Wireless Controller | S | S | S | S | S |
| WWAN Failover (4G/LTE) | S | S | S | S | S |
| Network Switch Management | N | S | S | S | S |
| Firewall/VPN Performance | |||||
| Firewall Inspection Throughput2 | 300 Mbps | 750 Mbps | 1.3 Gbps | 1.4 Gbps | 1.5 Gbps |
| Threat Prevention Throughput3 | 50 Mbps | 100 Mbps | 300 Mbps | 400 Mbps | 500 Mbps |
| Application Inspection Throughput3 | – | 300 Mbps | 900 Mbps | 1.0 Gbps | 1.1 Gbps |
| IPS Throughput3 | 100 Mbps | 300 Mbps | 900 Mbps | 1.0 Gbps | 1.1 Gbps |
| Anti-Malware Inspection Throughput3 | 50 Mbps | 100 Mbps | 300 Mbps | 400 Mbps | 500 Mbps |
| IMIX Throughput | 60 Mbps | 200 Mbps | 500 Mbps | 700 Mbps | 900 Mbps |
| DPI SSL Throughput | 15 Mbps | 45 Mbps | 100 Mbps | 150 Mbps | 200 Mbps |
| VPN Throughput4 | 100 Mbps | 300 Mbps | 900 Mbps | 1.0 Gbps | 1.1 Gbps |
| Maximum Connections (SPI) | 10,000 | 50,000 | 100,000 | 125,000 | 150,000 |
| Maximum Connections (DPI) | 10,000 | 50,000 | 90,000 | 100,000 | 125,000 |
| Maximum Connections (DPI SSL) | 100 | 500 | 500 | 750 | 750 |
| New Connections/Sec | 1,800 | 5,000 | 6,000 | 8,000 | 12,000 |
| Features | |||||
| Logging | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog |
| Network Traffic Visualization | S | S | S | S | S |
| Netflow/IPFIX Reporting | N | S | S | S | S |
| SNMP | S | S | S | S | S |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| Dynamic Routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| Secure SD-WAN | S | S | S | S | S |
| Single Sign-on (SSO) | S | S | S | S | S |
| Voice over IP (VoIP) Security | S | S | S | S | S |
| Interface to Interface Scanning | S | S | S | S | S |
| PortShield Security | S | S | S | S | S |
| Link Redundancy | S | S | S | S | S |
| Policy-based Routing | S | S | S | S | S |
| Route-based VPN | S | S | S | S | S |
| Dynamic Bandwidth Management | S | S | S | S | S |
| Stateful High Availability | N | N | N | O | O |
| Multi-WAN | S | S | S | S | S |
| Load Balancing | S | S | S | S | S |
| Object-based Management | S | S | S | S | S |
| Policy-based NAT | S | S | S | S | S |
| Inbound Load Balancing | S | S | S | S | S |
| IKEv2 VPN | S | S | S | S | S |
| TLS/SSL/SSH Decryption and Inspection | S | S | S | S | S |
| SSL Control | S | S | S | S | S |
| Auto-provision VPN | S | S | S | S | S |
| Biometric Authentication | S | S | S | S | S |
| DNS Proxy | S | S | S | S | S |
| Hardware Failover | N | Active/Standby | Active/Standby | Active/Standby with stateful synchronization | Active/Standby with stateful synchronization |
| Integrated Wireless | |||||
| Standards | 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | – |
| Frequency bands5 | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | — |
| “ | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | |
| “ | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | |
| “ | — | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | — |
| Operating Channels | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | |
| “ | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | — |
| “ | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | — |
| “ | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | — |
| “ | — | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | — |
| Transmit output power | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | |
| Transmit power control | Supported | Supported | Supported | Supported | – |
| Data rates supported | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | – |
| “ | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | — |
| “ | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | — |
| “ | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | — |
| “ | — | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | — |
| “ | — | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | — |
| Modulation technology spectrum | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | – |
| “ | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | — |
| “ | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | — |
| “ | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | — |
| “ | — | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | — |
1. Services must be purchased separately.
2. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3. Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
4. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall’s wireless access point products.
*Future use. All specifications, features and availability are subject to change.
Advanced Threat Protection Option
Why layered cybersecurity matters
Want to see the firewall in action? Checkout this amazing virtual trail of a TZ series firewall!
