SonicWall GEN8 TZ and NSa Firewalls FAQ

Description

  • What models are available in the GEN8 TZ and NSa series?
     To learn more on the GEN8 firewall,visit the link: https://www.sonicwall.com/products/firewalls
  • What’s new in GEN8 compared to previous generations?
    GEN8 firewalls deliver significant upgrades over previous generations, including:
    • Improved threat prevention and throughput
    • Higher SFP port speeds (up to 10Gbps on TZs and NSa4800/5800)
    • Dual Power Supply Unit (PSU) support (TZ380+ and all NSa Models)
    • Enhanced wireless performance with Wi-Fi 6 for ‘W’ TZ models(eg: TZ380W)
    • Micro USB port for console access
    • Integrated Cysurance cyber warranty via MPSS
  •  Are they eligible for the cyber warranty?
    Yes. When purchased with Managed Protection Security Suite (MPSS), GEN8 TZ and NSa firewalls are eligible for Cysurance-backed cyber warranty (up to $200,000), offering financial protection against qualifying cyber incidents. Learn more about cyber warranty here: https://www.sonicwall.com/cysurance
  • What is MPSS?
    Managed Protection Security Suite (MPSS) simplifies firewall management by putting it in the hands of SonicWall experts. It includes 24/7 monitoring, configuration management, scheduled firmware updates, and monthly health check reports outlining threat activity, protection status, and cyber warranty compliance.
    For more information visit https://www.sonicwall.com/products/firewalls/managed-protection-security-suite
  • Are these firewalls SD-WAN capable?
    Yes. All GEN8 TZ and NSa firewalls have built-in Secure SD-WAN functionality—no extra licensing or hardware needed.
  • Does GEN8 TZ and NSa firewalls also support CSE and ZTNA?
    All GEN8 TZ and NSa firewalls support:
    • Cloud Secure Edge (CSE) integration for secure, cloud-delivered connectivity
    • Zero Trust Network Access (ZTNA) is supported through Cloud Secure Edge (CSE) using CSE connectors. These connectors integrate with GEN8 firewalls and enable granular, identity-based access control to private applications.
      These capabilities ensure secure access across hybrid and distributed environments, helping businesses transition to modern network architectures.
  • Can I manage GEN8 TZ and NSa firewalls using Network Security Manager(NSM)?
     Yes. All GEN8 TZ and NSa firewalls are fully supported by NSM 3.1(and above) [LT1] [GT2] and SonicWall Unified Management. This enables centralized cloud and on-premises management with:
  • Is there support for Zero Touch Deployment?
    Yes. All GEN8 TZ and NSa firewalls support Zero Touch Deployment to simplify initial setup and reduce manual configuration.
  • How many SFP ports are available on GEN8 firewalls?
  • What SFP speeds are supported across models?
    GEN8 TZ firewalls include 2 SFP/SFP+ ports on most models.
    • TZ280: 2 × SFP ports (up to 1Gbps)
    • TZ380 / TZ480:
      • 2 × Multi-Gig SFP+ ports ((5G / 2.5G / 1G))
    • TZ580 / TZ680:
      • 2 × Multi-Gig SFP+ ports (10G / 5G / 2.5G / 1G) 

    GEN8 NSa firewalls support Multi-Gig SFP/SFP+ ports with speeds up to 10/5/2.5/1 Gbps, but the number of ports varies by model:

    • NSa 2800: 3 × SFP/SFP+
    • NSa 3800: 10 × SFP/SFP+
    • NSa 4800 / NSa 5800: 8 × SFP/SFP+

    To learn more about the GEN8 Firewall, visit the link below:

    GEN8 TZ Datasheet: https://www.sonicwall.com/resources/datasheet/datasheet-sonicwall-tz-series-gen-8
    GEN8 NSa Datasheet: https://www.sonicwall.com/resources/datasheet/sonicwall-mid-range-gen-8-nsa-series
  • Do GEN8 TZs support Wi-Fi 6?
    Yes, wireless variants (TZ380W) support Wi-Fi 6 for faster, more efficient wireless connectivity.
    Benefits of Wi-Fi 6 include:
    • Higher throughput: Delivers faster speeds, especially in high-density environments.
    • Lower latency: Reduces lag for real-time applications like VoIP and video conferencing.
    • Improved efficiency: Handles more simultaneous device connections using technologies like OFDMA and MU-MIMO.
    • Better battery life: Devices benefit from Target Wake Time (TWT), conserving power on connected devices.
    • Enhanced security: Supports the latest encryption standards, including WPA3.
  • Can I migrate settings from my existing firewall?
    Yes. GEN8 TZ and NSa firewalls support in-product migration from Gen6.5 and Gen7 firewalls with supported firmware.
    NOTE: VLANs or tunnel interfaces must be removed before importing, unless you're using the SonicWall Migration Tool.” 
  • Where can I find the list of supported migration paths?
    For more information, click on the link here: https://www.sonicwall.com/support/knowledge-base/250728091649637
  • Are GEN8 TZ models DIN rail mountable?
    Yes. GEN8 TZ models support DIN rail mounting, offering more flexibility in installation.
  • What is the power supply configuration?
    • TZ280: Single PSU
    • TZ380/TZ380W+ and all NSa Firewalls: Dual PSU support for high availability (secondary PSU sold separately)
  • What licensing bundles are supported.
    GEN8 TZ and NSa firewalls support Hardware Only, Advanced Protection Security Suite (APSS) and Managed Protection Security Suite (MPSS) Licensing bundles. For more info, click on the link here: https://www.sonicwall.com/resources/datasheet/sonicwall-protection-service-suites
  • Do GEN8 TZ and NSa firewalls support Cellular dongles?
    Yes, SonicWall GEN8 TZ firewalls support USB Cellular dongles – both USB Type-A and Type-C. GEN8 NSa firewalls support only USB Type-A cellular dongles.
  • Does the SonicWall Express App support GEN8 TZ and NSa firewall?
    Yes, the SonicExpress mobile application supports all SonicWall GEN8 TZ and NSa firewalls.
    https://www.sonicwall.com/support/technical-documentation/docs/sonicexpress-user_guide/Content/User_Guide/gettingstarted.htm
  • Is subscription Mandatory for the GEN8 TZ and NSa firewalls to operate?
    TZ80 firewall is the only SonicWall model that currently requires an active subscription to operate. All Other Gen8 models like the previous generations can operate as a Hardware only option as well. For more details on the licensing, refer to this: https://www.sonicwall.com/resources/datasheet/sonicwall-protection-service-suites

Related Articles

  • SonicOS 8.1.0 FAQ
    Read More
  • SonicWall GEN8 TZs and GEN8 NSas Settings Migration
    Read More
  • Getting started with SonicWall firewalls
    Read More

Categories

Firewalls
NSa Series
Firewalls
TZ Series
not finding your answers?
Ask the Community