WIXLIB

SonicWall TZ Series (Gen 7)Integrated SD-Branch platform for next-gen SMBs & branchesThe latest SonicWall TZ series, arethe first desktop form factor nextgeneration firewalls (NGFW) with10 or 5 Gigabit Ethernet interfaces.The series consist of a wide range ofproducts to suit a variety of use cases.Designed for small, mid-sizedorganizations and distributedenterprise with SD-Branch locations,the 7th generation (Gen 7) TZ seriesdelivers industry-validated securityeffectiveness with best-in-class priceperformance. These NGFWs addressthe growing trends in web encryption,connected devices and high-speedmobility by delivering a solution thatmeets the need for automated, realtime breach detection and prevention.The Gen 7 TZ series are highlyscalable, with high port density ofup to 10 ports. It features both inbuilt and an expandable storage ofup to 256GB, that enables variousfeatures including logging, reporting,caching, firmware backup and more.An optional second power supplyprovides added redundancy in case offailure on select models.Deployment of Gen 7 TZs are furthersimplified by Zero-Touch Deployment,with the ability to simultaneouslyroll out these devices across multiplelocations with minimal IT support.Built on next-gen hardware, itintegrates firewalling, switching andwireless capabilities, plus providessingle-pane-of-glass management forSonicWall Switches and SonicWaveAccess Points. It allows tightintegration with Capture Client forseamless endpoint security.SonicOS and Security ServicesThe SonicOS architecture is at thecore of TZ NGFWs. Gen 7 TZsare powered by the feature richSonicOS 7.0 operating system withnew modern looking UX/UI, advancedsecurity, networking and managementcapabilities. Gen 7 TZ featuresintegrated SD-WAN, TLS 1.3 support,real-time visualization, high-speedvirtual private networking (VPN) andother robust security features.Unknown threats are sent to SonicWall’scloud-based Capture Advanced ThreatProtection (ATP) multiengine sandbox foranalysis. Enhancing Capture ATP is ourpatent-pending Real-Time Deep MemoryInspection (RTDMI ) technology. As oneof Capture ATP’s engine, RTDMI detectsand blocks malware and zero-day threatsby inspecting directly in memory.By leveraging Capture ATP withRTDMI technology, in addition tosecurity services such as ReassemblyFree Deep Packet Inspection (RFDPI),Anti-virus and Anti-spywareProtection, intrusion preventionsystem, Application Intelligence andControl, Content Filtering Services,DPI-SSL, TZ series firewalls stopmalware, ransomware and otheradvanced threats at the gateway. Formore information, refer the SonicOSand Security Services Datasheet.Highlights: 10/5/2.5/1 GbE interfaces in adesktop form factor SD-Branch ready Secure SD-WAN capability SonicExpress App onboarding Zero-Touch Deployment Single-pane-of-glass-managementthrough cloud or firewall SonicWall Switch, SonicWave AccessPoint and Capture Client integration Built-in and expandable storage Redundant power High port density Cellular failover SonicOS 7.0 TLS 1.3 support Groundbreaking performance High connection count Fast DPI performance Low TCO

DeploymentsSmall to Medium size Business Save space and money with an integrated gatewaysecurity solution with firewalling, switching andwireless capabilities Reduce complexity and get the business runningwithout relying on IT personnel with easy onboardingusing SonicExpress App and Zero-Touch Deployment,and easy management through a single pane of glassTZ570PInternet Attain business continuity by providing failoverto cellular connectivity Protect network from attacks with a comprehensivesecurity solution that incorporates VPN, IPS, CFS, AVand much morePoE devicesRetail store / small office LAN Leverage high port density to power on multiplePoE devices such as IP phones and IP cameraswith TZ570P Boost employee productivity by blockingunauthorized access with traffic segmentationand access policiesDistributed Enterprise with SD-BranchesCapture Security Center Enhance customer experience and adapt to thechanging business needs by enabling next-genbranch connectivity with SD-BranchCloud Securityand Management Drive business growth by investing in next-genappliances with multi-gigabit and advanced securityfeatures, to future-proof against the changingnetwork and security landscape Secure networks from the most advanced attackswith advanced security features and automaticallyblock threats on decrypted traffic using protocolssuch as TLS 1.3Cloud AppSecuritySD-WAN enabled transportSonicWall FirewallZero-Touch Deployment Capable Leverage end-to-end network security withseamless integration of SonicWave access points,SonicWall Switches and Capture ClientSonicWall Switch Ensure seamless communication as stores talkto HQ via easy VPN connectivity which allowsIT administrators to create a hub and spokeconfiguration for the safe transport of databetween all locationsZero-Touch Deployment CapableSonicWave Access PointZero-Touch Deployment CapableIP Phone Scale quickly and effortlessly with SonicExpressApp and Zero-Touch Deployment Maintain compliance with security features, andleverage built-in and expandable storage to storelogs for audit purposes2Access SecurityCamera Improve business efficiency, performance andreduce costs by leveraging Gen 7 TZ’s hardware andsoftware enhancements, plus features such SD-WANtechnology Ensure business continuity by providing failoverto cellular connectivityEdge SecurityCapture ClientLaptopSmartphoneEndpoint Security

SonicWall TZ270 seriesDesigned for home offices and lean branches, the TZ270 series deliver industry-validated security effectiveness with best-inclass price-performance.TZ270W Rear PanelTZ270W Front PanelUSB 3.0SuperSpeedportsPower LEDTest LEDSecurity LEDStorage LEDWireless W0 WLAN LED(Wireless TZ270W only)RJ45PortLEDsX4/X5/X6/X7RJ45 PortsU0 WWAN LEDsWAN X1 and for USB 5G/LTEX2 Port LEDsLAN/MGMTX0 Port LEDRJ45ConsolePortX2 WANRJ45 PortX3 RJ45PortX0 LANRJ45 PortX1 WANRJ45 l TZ370 seriesDesigned for small organizations and lean branches, the TZ370 series deliver industry-validated security effectiveness with bestin-class price-performance.TZ370W Front PanelUSB 3.0SuperSpeedportsPower LEDTest LEDSecurity LEDStorage LEDWireless W0 WLAN LED(Wireless TZ370W only)TZ370W Rear PanelRJ45PortLEDsX4/X5/X6/X7RJ45 PortsU0 WWAN LEDsWAN X1 and for USB 5G/LTEX2 Port LEDsLAN/MGMTX0 Port LEDRJ45ConsolePortX2 WANRJ45 PortX3 RJ45PortX0 LANRJ45 PortX1 WANRJ45 l TZ470 seriesDesigned for small organizations and distributed enterprise with SD-Branch locations, the TZ470 series deliver industry-validatedsecurity effectiveness with best-in-class price-performance.TZ470W Front PanelUSB 3.0SuperSpeedportsPower LEDTest LEDSecurity LEDStorage LEDWireless W0 WLAN LED(Wireless TZ470W only)3TZ470W Rear PanelRJ45PortLEDsX4/X5/X6/X7RJ45 PortsX2 WANRJ45 PortX0 LANRJ45 PortPowerInputU0 WWAN LEDsfor USB 5G/LTEWAN X1 andX2 Port LEDsLAN/MGMTX0 Port LEDSFP/SFP PortLEDsRJ45ConsolePortX3 RJ45 X1 WANPortRJ45 PortX8/X9SFP/SFP PortsGroundingScrewSafeModeButton

SonicWall TZ570 seriesDesigned for small to mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ570 series deliverindustry-validated security effectiveness with best-in-class price-performance.X2 WAN RJ45 PortX4/X5/X6/X7 RJ45 PortsX0 LAN RJ45WWAN LEDs for USB 5G/LTEUSB 3.0SuperSpeedPortsPowerLEDs-Test LED- LAN/MGMT X0 Port LED-Security LED - WAN X1 and X2 Port LEDs-M.2 SSD LED - X0–X7 RJ45 Port LEDs- X8 / X9 SFP/SFP Port LEDsRJ45ConsolePortX8/X9SFP/SFP PortsX3 RJ45 X1 WANPortRJ45PortMicro-USBConsole edundantPower InputSonicWall TZ670 seriesDesigned for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industryvalidated security effectiveness with best-in-class price-performance.X2 WAN RJ45 PortX0 LAN RJ45X4/X5/X6/X7 RJ45 PortsWWAN LEDs for USB 5G/LTEUSB 3.0SuperSpeedPortsPowerLEDs-Test LED-Security LED-Storage LED- LAN/MGMT X0 Port LED- WAN X1 and X2 Port LEDs- X0–X7 RJ45 Port LEDs- X8 / X9 SFP/SFP Port LEDsRJ45ConsolePortX8/X9SFP/SFP PortsX3 RJ45 X1 WANPortRJ45PortMicro-USBConsole PortTZ270 SERIESOperating systemInterfacesWireless supportPower over Ethernet (PoE) supportTZ570 SERIESTZ670 SERIES8x1GbE,2 USB 3.0,1 Console8x1GbE,2 USB 3.0,1 Console8x1GbE,2x2.5GbE,2 USB 3.0,1 Console8x1GbE,2x5GbE,2 USB 3.0,1 Console8x1GbE,2x10GbE,2 USB 3.0,1 Console2x2 802.11acWave 2(TZ270W)2x2 802.11acWave 2(TZ370W)2x2 802.11acWave 2(TZ470W)2x2 802.11acWave 2(TZ570W)N/AN/AN/AN/A5 PoE or3PoE (TZ570P)N/AOptional up to256GB, 32GBincludedOptional up to 256GBManagementNetwork Security Manager, CLI, SSH, Web UI, GMS, REST APIsN/AN/AN/AYesYes1,0001,0002,5002,5002,500VLAN interfaces64128128256256Access points supported (maximum)1616323232Single Sign-On (SSO) Users4TZ470 SERIESSonicOS 7.0Storage expansion slot (Bottom)Redundant power supplyTZ370 r InputSonicWall Gen 7 TZ series system specificationsFIREWALL GENERALSafeModeButton

SonicWall Gen 7 TZ series system specifications continuedFIREWALL/VPN PERFORMANCEFirewall inspection throughputTZ270 SERIES1Threat prevention throughput2Application inspection throughput2IPS throughputTZ370 SERIESTZ570 SERIESTZ670 SERIES2 Gbps3 Gbps3.5 Gbps4 Gbps5 Gbps750 Mbps1 Gbps1.5 Gbps2 Gbps2.5 Gbps1 Gbps1.5 Gbps2 Gbps2.5 Gbps3 Gbps1 Gbps1.5 Gbps2 Gbps2.5 Gbps3 GbpsAnti-malware inspection throughput2750 Mbps1 Gbps1.5 Gbps2 Gbps2.5 GbpsTLS/SSL inspection and decryption throughput (DPI SSL)2300 Mbps500 Mbps600 Mbps750 Mbps800 MbpsIPSec VPN throughput750 Mbps1.3 Gbps1.5 Gbps1.8 Gbps2.1 GbpsConnections per second6,0009,00012,00016,00025,000Maximum connections mum connections (DPI)150,000200,000250,000400,000500,000Maximum connections (DPI SSL)25,00030,00035,00050,00075,000TZ270 SERIESTZ370 SERIESTZ470 SERIESTZ570 SERIESTZ670 SERIES23VPNSite-to-site VPN tunnels50100150200250IPSec VPN clients (maximum)5 (200)5 (200)5 (200)10 (500)10 (500)SSL VPN licenses (maximum)1 (50)2 (100)2 (150)2 (200)2 (250)Encryption/authenticationDES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchangeDiffie Hellman Groups 1, 2, 5, 14vRoute-based VPNRIP, OSPF, BGPVerisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-toSonicWall VPN, SCEPDead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPNGateway, Route-based VPNCertificate supportVPN featuresGlobal VPN client platforms supportedMicrosoft Windows 10NetExtenderMicrosoft Windows 10, LinuxMobile ConnectSECURITY SERVICESApple iOS, Mac OS X, Google Android , Kindle Fire, Chrome OS, Windows 10TZ270 SERIESDeep Packet Inspection servicesContent Filtering Service (CFS)TZ370 SERIESTZ470 SERIESYesApplication VisualizationYesApplication ControlYesIP address assignmentNAT modesYesTZ270 SERIESAuthenticationLocal user databaseVoIPStandardsTZ370 SERIESTZ470 SERIESTZ570 SERIESTZ670 SERIESStatic (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent modeRouting protocolsQoSTZ670 SERIESHTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file typessuch as ActiveX, Java,Cookies for privacy, allow/forbid listsComprehensive Anti-Spam ServiceNETWORKINGTZ570 SERIESGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLCapture Advanced Threat Protection5TZ470 SERIESBGP, OSPF, RIPv1/v2, static routes, policy-based routingBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database,Terminal Services, Citrix, Common Access Card (CAC)150250250250250Full H323-v1-5, SIPTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS,IEEE 802.3