TZ600/TZ500/TZ400/TZ300/ SOHO

Complete wired and wireless security and performance in an entry-level firewall.

Get comprehensive protection and lightning-fast performance in an entry level next-generation firewall with the SonicWall TZ Series. Designed for small networks including remote and branch offices, the TZ Series offers five different models that can be tuned to meet your specific needs. Advanced unified threat management (UTM) security, networking and management features plus optional 802.11ac Wi-Fi ensure your network and data are protected from the latest threats over wired and wireless connections.

Move forward confidently

  • Patented Reassembly-Free Deep Packet Inspection (RFDPI) technology
  • Consolidated threat prevention: Cloud-based multi-engine sandboxing, anti-malware, intrusion prevention, web filtering and more
  • Feature-rich SonicOS operating system with intuitive user interface
    Gigabit Ethernet ports
  • SSL, TLS and SSH decryption and inspection
  • Native SSL VPN secure remote access
  • Integrated 802.11ac wireless (optional)

Get advanced threat protection

Threat detection alone isn’t enough. That’s why every SonicWall firewall utilizes our patented Reassembly-Free Deep Packet Inspection technology to scan traffic for the latest threats and prevent them. The TZ Series examines every byte of every packet on all ports and protocols with no file size limitations. SonicWall Capture Advanced Threat Protection service, our award-winning cloud-based multi-engine sandbox, provides an additional layer of security by blocking unknown and zero-day attacks at the gateway.

Take advantage of high-speed performance

Built on a multi-core parallel-processing hardware architecture featuring gigabit Ethernet ports, SonicWall TZ firewalls deliver high-speed deep packet inspection firewall performance. The TZ Series uses single-pass, stream-based inspection technology to deliver latency-free performance for deep packet inspection of simultaneous network streams. Optional 802.11ac wireless extends secure high-speed networking to Wi-Fi enabled devices.

Enable secure, easy-to-use mobile connectivity

Provide remote and mobile users with native VPN access to allowed network resources behind your TZ firewall. TZ firewalls support secure SSL VPN connections for Apple® iOS, Google® Android, Windows® 8.1, Mac OS® X, Kindle Fire and Linux devices. This lets users easily access the files, applications and resources they need to be productive from any location. The SSL VPN connection is scanned and any hidden threats are removed, ensuring maximum security.

TZ Series Appliances & Services

SonicWall TZ600

For emerging enterprises, retail and branch offices looking for security performance at a value price, the SonicWall TZ600 next generation firewall secures networks with enterprise-class features and uncompromising performance.

SonicWall TZ500 Series

For growing branch offices and SMBs, the SonicWall TZ500 series delivers highly effective, no-compromise protection with network productivity and optional integrated 802.11ac dual-band wireless.

SonicWall TZ400 Series

For small business, retail and branch office locations, the SonicWall TZ400 series delivers enterprise-grade protection. Flexible wireless deployment is available with optional 802.11ac dual-band wireless integrated into the firewall.

SonicWall TZ300 Series

The SonicWall TZ300 series offers an all-in-one solution that protects networks from attack. Unlike consumer grade products, the SonicWall TZ300 series firewall combines effective intrusion prevention, anti-malware and content/URL filtering with optional 802.11ac integrated wireless and broadest secure mobile platforms support for laptops, smartphones and tablets.

SonicWall SOHO Series

For wired and wireless small and home office environments, the SonicWall SOHO series delivers the same business-class protection large organizations require at a more affordable price point.

TotalSecure

Combine a next-generation firewall with the basic network security services (CGSS) required to stop known threats.

With SonicWall TotalSecure Advanced Edition, you get the power of a next-generation firewall and the complete suite of the network security services you need. TotalSecure Advanced Edition helps you stop known and unknown threats like ransomware, viruses, spyware, worms, Trojans and other malware, in a single convenient bundle.

Comprehensive Gateway Security Suite

An integrated package of security technologies that features Gateway Security, Content Filtering Service, 24×7 support to stop known threats.

SonicWall Comprehensive Gateway Security Suite (CGSS) provides you with a single integrated bundle of security technologies designed to stop known threats. Secure your network at the gateway against threats such as intrusions, viruses, spyware, worms, Trojans, adware, keyloggers, malicious mobile code, and other dangerous applications. Enjoy total protection in a convenient, affordable subscription-based service.

Advanced Gateway Security Suite (AGSS)

A complete suite of security services for SonicWall firewalls that features Capture Advanced Threat Protection, Gateway Security, Content Filtering Service and 24×7 support to stop known and unknown threats.

SonicWall Advanced Gateway Security Suite (AGSS) is a complete suite of security services for SonicWall firewalls. An upgrade over SonicWall Comprehensive Gateway Security Suite (CGSS), it features Capture Advanced Threat Protection, a multi-engine sandbox that runs and inspects suspicious files and code in an isolated cloud-based environment.

Gateway Security Services

Combine gateway anti-virus, anti-spyware, intrusion prevention and application intelligence and control for real-time protection against sophisticated attacks.

Discover how SonicWall firewalls with Gateway Security Services combine gateway security anti-virus, anti-spyware, intrusion prevention and application intelligence and control for real-time protection against sophisticated attacks. This service blocked over 2.6 trillion IPS attacks in 2016.

Content Filtering Services

Blocks and manages inappropriate, unproductive, and even illegal and malicious web content for network-based devices.

SonicWall Content Filtering Service (CFS) is a subscription-based add-on service for SonicWall firewall products. This web filtering service blocks inappropriate, unproductive and even illegal and malicious web content for SonicWall customers around the globe.

SonicWall Enforced Anti-Virus and Anti-Spyware

Deploy an innovative multi-layered anti-virus internet security strategy with SonicWall firewalls and Enforced Client Anti-Virus and Anti-Spyware service. You can redirect any user with a non-compliant endpoint to a web page to install the latest Enforced Client Anti-Virus and Anti-Spyware software. Customers around the globe trust it as one of the best anti-spyware software solutions.

Comprehensive Anti-Spam Service (CASS)

Remove junk email at the gateway with one-click activation, and ensure that only legitimate emails reach your email server.

Block email threats and stop spam at the gateway, by adding SonicWall Comprehensive Anti-Spam Service (CASS) to your SonicWall firewall. Rapidly deploy with one-click activation of up to 250 users.

Deep Packet Inspection of SSL Encrypted Traffic (DPI-SSL)

Safeguard your network from encrypted threats with SonicWall Deep Packet Inspection of SSL/TLS and SSH. These add-on security services are available on all SonicWall Next-Generation Firewall (NGFW) and Unified Threat Management (UTM) firewalls. DPI-SSL delivers deep protection against encrypted threats, and scalable SSL decryption and deep packet inspection SSL performance without limitation. It leverages the SonicWall patented Reassembly-Free Deep Packet Inspection engine, a full-stack streaming inspection technology that scans a broad array of encryption protocols including HTTPS, SMTPS, NNTPS, LDAPS, FTPS, Telnets, IMAPS, IRCS, and POPS. For high traffic or highly-regulated deployments, DPI-SSL can exclude trusted sources to optimize network performance, and conform to privacy and/or legal requirements.

Application Control

SonicWall Application Intelligence and Control Service provides the tools administrators need to easily manage privileges and bandwidth for applications, users, groups or devices.

Content Filtering Client

Blocks and manages web content for devices outside the network and can enforce policies established for Content Filtering Service.

The SonicWall Content Filtering Client is a web filtering service that blocks inappropriate, unproductive, illegal and malicious web content for devices outside the network.

Capture Advance Threat Protection

SonicWall Capture Advanced Threat Protection is a cloud-based multi-engine sandbox designed to discover and stop unknown zero-day attacks like ransomware at the gateway with automated remediation.

TZ Series Product Comparison

Specification TZ600 TZ500 TZ400 TZ300 SOHO
Firewall throughput 1.5 Gbps 1.4 Gbps 1.3 Gbps 750 Mbps 300 Mbps
Full DPI throughput 500 Mbps 400 Mbps 300 Mbps 100 Mbps 50 Mbps
Anti-malware throughput 500 Mbps 400 Mbps 300 Mbps 100 Mbps 50 Mbps
IPS throughput 1.1 Gbps 1.0 Gbps 900 Mbps 300 Mbps 100 Mbps
IMIX throughput 900 Mbps 700 Mbps 500 Mbps 200 Mbps 60 Mbps
Max DPI connections 125,000 100,000 90,000 50,000 10,000
New connections/sec 12,000 8,000 6,000 5,000 1,800

Legend: S — Standard,  O — Optional,  N — Not Available

_productName SOHO TZ300 TZ400 TZ500 TZ600
TotalSecure Firewall Overview
Deep Packet Inspection Firewall TotalSecure Firewall Overview S S S S S
Stateful Packet Inspection Firewall TotalSecure Firewall Overview S S S S S
Unlimited File Size Protection TotalSecure Firewall Overview S S S S S
Protocols Scanned TotalSecure Firewall Overview S S S S S
Security Services Included
Application Intelligence and Control Security Services Included S S S S S
Intrusion Prevention Service Security Services Included S S S S S
Gateway Anti-Virus and Anti-Spyware Security Services Included S S S S S
Content & URL Filtering (CFS) Security Services Included S S S S S
SSL Inspection (DPI SSL) Security Services Included S S S S S
Content Filtering Client (CFC)1 Security Services Included O O O O O
Analyzer Reporting1 Security Services Included O O O O O
Capture Advance Threat Protection1 Security Services Included N O O O O
Enforced Client Anti-Virus and Anti-Spyware 1 Security Services Included O O O O O
24×7 Support Security Services Included S S S S S
Firewall General
Interfaces Firewall General 5×1-GbE, 1 USB, 1 Console 5×1-GbE, 1 USB, 1 Console 7×1-GbE, 1 USB, 1 Console 8×1-GbE, 2 USB, 1 Console 10×1-GbE, 2 USB, 1 Console, 1 Expansion Slot
Management Firewall General CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS
Nodes Supported Firewall General Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted
Site-to-Site VPN Tunnels Firewall General 10 10 20 25 50
IPSec VPN Clients (Maximum) Firewall General 1 (5) 1 (10) 2 (25) 2 (25) 2 (25)
SSL VPN Licenses (Maximum) Firewall General 1 (10) 1 (50) 2 (100) 2 (150) 2 (200)
VLAN Interfaces Firewall General 25 25 50 50 50
Wireless Controller Firewall General S S S S S
WWAN Failover (4G/LTE) Firewall General S S S S S
Network Switch Management Firewall General N S S S S
Firewall/VPN Performance
Firewall Inspection Throughput2 Firewall/VPN Performance 300 Mbps 750 Mbps 1.3 Gbps 1.4 Gbps 1.5 Gbps
Full DPI Throughput (GAV/GAS/IPS)3 Firewall/VPN Performance 50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps
Application Inspection Throughput3 Firewall/VPN Performance 300 Mbps 900 Mbps 1.0 Gbps 1.1 Gbps
IPS Throughput3 Firewall/VPN Performance 100 Mbps 300 Mbps 900 Mbps 1.0 Gbps 1.1 Gbps
Anti-Malware Inspection Throughput3 Firewall/VPN Performance 50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps
IMIX Throughput Firewall/VPN Performance 60 Mbps 200 Mbps 500 Mbps 700 Mbps 900 Mbps
SSL DPI Throughput Firewall/VPN Performance 15 Mbps 45 Mbps 100 Mbps 150 Mbps 200 Mbps
VPN Throughput4 Firewall/VPN Performance 100 Mbps 300 Mbps 900 Mbps 1.0 Gbps 1.1 Gbps
Maximum Connections (SPI) Firewall/VPN Performance 10K 50K 100K 125K 150K
Maximum DPI Connections Firewall/VPN Performance 10K 50K 90K 100K 125K
Maximum Connections (DPI SSL) Firewall/VPN Performance 100 500 500 750 750
New Connections/Sec Firewall/VPN Performance 1,800 5,000 6,000 8,000 12,000
Features
Logging Features Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog
Network Traffic Visualization Features S S S S S
Netflow/IPFIX Reporting Features N S S S S
SNMP Features S S S S S
Authentication Features LDAP (multiple domains), XAUTH/RADIUS, SSO,
Novell, internal user database
LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database,
Terminal Services, Citrix
LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database,
Terminal Services, Citrix
LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database,
Terminal Services, Citrix
LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database,
Terminal Services, Citrix
Dynamic Routing Features BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing
Single Sign-on (SSO) Features S S S S S
Voice over IP (VoIP) Security Features S S S S S
Interface to Interface Scanning Features S S S S S
PortShield Security Features S S S S S
Link Redundancy Features S S S S S
Policy-based Routing Features S S S S S
Route-based VPN Features S S S S S
Dynamic Bandwidth Management Features S S S S S
Stateful High Availability Features N N N O O
Multi-WAN Features S S S S S
Load Balancing Features S S S S S
Object-based Management Features S S S S S
Policy-based NAT Features S S S S S
Inbound Load Balancing Features S S S S S
IKEv2 VPN Features S S S S S
TLS/SSL/SSH Decryption and Inspection Features S S S S S
SSL Control Features S S S S S
Auto-provision VPN Features S S S S S
Biometric Authentication Features S S S S S
DNS Proxy Features S S S S S
Hardware Failover Features N Active/Passive Active/Passive Active/Passive with stateful synchronization Active/Passive with stateful synchronization
Integrated Wireless
Standards Integrated Wireless 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
Frequency bands5 Integrated Wireless 802.11a: 5.180-5.825 GHz 802.11a: 5.180-5.825 GHz 802.11a: 5.180-5.825 GHz 802.11a: 5.180-5.825 GHz
Integrated Wireless 802.11b/g: 2.412-2.472 GHz 802.11b/g: 2.412-2.472 GHz 802.11b/g: 2.412-2.472 GHz 802.11b/g: 2.412-2.472 GHz
Integrated Wireless 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz
Integrated Wireless 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz
Operating Channels Integrated Wireless 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4
Integrated Wireless 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)
Integrated Wireless 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13
Integrated Wireless 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
Integrated Wireless 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
Transmit output power Integrated Wireless Based on the regulatory domain specified by the system administrator Based on the regulatory domain specified by the system administrator Based on the regulatory domain specified by the system administrator Based on the regulatory domain specified by the system administrator
Transmit power control Integrated Wireless Supported Supported Supported Supported
Data rates supported Integrated Wireless 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel
Integrated Wireless 802.11b: 1,2,5.5,11 Mbps per channel 802.11b: 1,2,5.5,11 Mbps per channel 802.11b: 1,2,5.5,11 Mbps per channel 802.11b: 1,2,5.5,11 Mbps per channel
Integrated Wireless 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel
Integrated Wireless 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel
Integrated Wireless 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,
Integrated Wireless 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel
Modulation technology spectrum Integrated Wireless 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) 802.11a: Orthogonal Frequency Division Multiplexing (OFDM)
Integrated Wireless 802.11b: Direct Sequence Spread Spectrum (DSSS) 802.11b: Direct Sequence Spread Spectrum (DSSS) 802.11b: Direct Sequence Spread Spectrum (DSSS) 802.11b: Direct Sequence Spread Spectrum (DSSS)
Integrated Wireless 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)
Integrated Wireless 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) 802.11n: Orthogonal Frequency Division Multiplexing (OFDM)
Integrated Wireless 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)
1. Services must be purchased separately.
2. Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
3. Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
4. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall’s wireless access points products

TZ Series Purchase Options