en-US
search-icon

TZ Entry Level Firewall Series

Get comprehensive protection and lightning-fast performance in an entry level next-generation firewall with the SonicWall TZ Series. Designed for small networks including remote and branch offices, the TZ Series offers five different models that can be tuned to meet your specific needs. Advanced unified threat management (UTM) security, networking and management features plus optional 802.11ac Wi-Fi ensure your network and data are protected from the latest threats over wired and wireless connections.
Entry Level Product Image

Complete security and performance in an entry level firewall

Get comprehensive protection and lightning-fast performance in an entry level next-generation firewall with the SonicWall TZ Series. Designed for small networks including remote and branch offices, the TZ Series offers five different models that can be tuned to meet your specific needs. Advanced unified threat management (UTM) security, networking and management features plus optional 802.11ac Wi-Fi ensure your network and data are protected from the latest threats over wired and wireless connections.

Legend: S — Standard,  O — Optional,  N — Not Available

_productName SOHO TZ300 TZ400 TZ500 TZ600
Deep Packet Inspection Firewall TotalSecure Firewall Overview S S S S S
Stateful Packet Inspection Firewall TotalSecure Firewall Overview S S S S S
Unlimited File Size Protection TotalSecure Firewall Overview S S S S S
Protocols Scanned TotalSecure Firewall Overview S S S S S
Application Intelligence and Control Security Services Included S S S S S
Intrusion Prevention Service Security Services Included S S S S S
Gateway Anti-Virus and Anti-Spyware Security Services Included S S S S S
Content & URL Filtering (CFS) Security Services Included S S S S S
SSL Inspection (DPI SSL) Security Services Included S S S S S
Content Filtering Client (CFC)1 Security Services Included O O O O O
Analyzer Reporting1 Security Services Included O O O O O
Capture Advance Threat Protection1 Security Services Included N O O O O
Enforced Client Anti-Virus and Anti-Spyware 1 Security Services Included O O O O O
24x7 Support Security Services Included S S S S S
Interfaces Firewall General 5x1-GbE, 1 USB, 1 Console 5x1-GbE, 1 USB, 1 Console 7x1-GbE, 1 USB, 1 Console 8x1-GbE, 2 USB, 1 Console 10x1-GbE, 2 USB, 1 Console, 1 Expansion Slot
Management Firewall General CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS CLI, SSH, GUI, GMS
Nodes Supported Firewall General Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted
Site-to-Site VPN Tunnels Firewall General 10 10 20 25 50
IPSec VPN Clients (Maximum) Firewall General 1 (5) 1 (10) 2 (25) 2 (25) 2 (25)
SSL VPN Licenses (Maximum) Firewall General 1 (10) 1 (50) 2 (100) 2 (150) 2 (200)
VLAN Interfaces Firewall General 25 25 50 50 50
Wireless Controller Firewall General S S S S S
WWAN Failover (4G/LTE) Firewall General S S S S S
Network Switch Management Firewall General N S S S S
Firewall Inspection Throughput2 Firewall/VPN Performance 300 Mbps 750 Mbps 1.3 Gbps 1.4 Gbps 1.5 Gbps
Full DPI Throughput (GAV/GAS/IPS)3 Firewall/VPN Performance 50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps
Application Inspection Throughput3 Firewall/VPN Performance - 300 Mbps 900 Mbps 1.0 Gbps 1.1 Gbps
IPS Throughput3 Firewall/VPN Performance 100 Mbps 300 Mbps 900 Mbps 1.0 Gbps 1.1 Gbps
Anti-Malware Inspection Throughput3 Firewall/VPN Performance 50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps
IMIX Throughput Firewall/VPN Performance 60 Mbps 200 Mbps 500 Mbps 700 Mbps 900 Mbps
SSL DPI Throughput Firewall/VPN Performance 15 Mbps 45 Mbps 100 Mbps 150 Mbps 200 Mbps
VPN Throughput4 Firewall/VPN Performance 100 Mbps 300 Mbps 900 Mbps 1.0 Gbps 1.1 Gbps
Maximum Connections (SPI) Firewall/VPN Performance 10K 50K 100K 125K 150K
Maximum DPI Connections Firewall/VPN Performance 10K 50K 90K 100K 125K
Maximum Connections (DPI SSL) Firewall/VPN Performance 100 500 500 750 750
New Connections/Sec Firewall/VPN Performance 1,800 5,000 6,000 8,000 12,000
Logging Features Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog
Network Traffic Visualization Features S S S S S
Netflow/IPFIX Reporting Features N S S S S
SNMP Features S S S S S
Authentication Features LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix
Dynamic Routing Features BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing BGP, OSPF, RIPv1/v2, static routes, policy-based routing
Single Sign-on (SSO) Features S S S S S
Voice over IP (VoIP) Security Features S S S S S
Interface to Interface Scanning Features S S S S S
PortShield Security Features S S S S S
Link Redundancy Features S S S S S
Policy-based Routing Features S S S S S
Route-based VPN Features S S S S S
Dynamic Bandwidth Management Features S S S S S
Stateful High Availability Features N N N O O
Multi-WAN Features S S S S S
Load Balancing Features S S S S S
Object-based Management Features S S S S S
Policy-based NAT Features S S S S S
Inbound Load Balancing Features S S S S S
IKEv2 VPN Features S S S S S
Terminal Services Authentication/Citrix Support Features S S S S S
TLS/SSL/SSH Decryption and Inspection Features S S S S S
SSL Control Features S S S S S
Auto-provision VPN Features S S S S S
Biometric Authentication Features S S S S S
DNS Proxy Features S S S S S
Hardware Failover Features N Active/Passive Active/Passive Active/Passive with stateful synchronization Active/Passive with stateful synchronization
Standards Integrated Wireless 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS -
Frequency bands Integrated Wireless 802.11a: 5.180-5.825 GHz 802.11a: 5.180-5.825 GHz 802.11a: 5.180-5.825 GHz 802.11a: 5.180-5.825 GHz --
" Integrated Wireless 802.11b/g: 2.412-2.472 GHz 802.11b/g: 2.412-2.472 GHz 802.11b/g: 2.412-2.472 GHz 802.11b/g: 2.412-2.472 GHz
" Integrated Wireless 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz
" Integrated Wireless -- 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz --
Operating Channels Integrated Wireless 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4
" Integrated Wireless 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) --
" Integrated Wireless 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 --
" Integrated Wireless 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 --
" Integrated Wireless -- 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 --
Transmit output power Integrated Wireless Based on the regulatory domain specified by the system administrator Based on the regulatory domain specified by the system administrator Based on the regulatory domain specified by the system administrator Based on the regulatory domain specified by the system administrator
Transmit power control Integrated Wireless Supported Supported Supported Supported -
Data rates supported Integrated Wireless 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel -
" Integrated Wireless 802.11b: 1,2,5.5,11 Mbps per channel 802.11b: 1,2,5.5,11 Mbps per channel 802.11b: 1,2,5.5,11 Mbps per channel 802.11b: 1,2,5.5,11 Mbps per channel --
" Integrated Wireless 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel --
" Integrated Wireless 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel --
" Integrated Wireless -- 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, --
" Integrated Wireless -- 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel --
Modulation technology spectrum Integrated Wireless 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) -
" Integrated Wireless 802.11b: Direct Sequence Spread Spectrum (DSSS) 802.11b: Direct Sequence Spread Spectrum (DSSS) 802.11b: Direct Sequence Spread Spectrum (DSSS) 802.11b: Direct Sequence Spread Spectrum (DSSS) --
" Integrated Wireless 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) --
" Integrated Wireless 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) --
" Integrated Wireless -- 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) --
1. Services must be purchased separately.
2. Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
3. Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
4. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
Close Overview
Move forward confidently Image

Move forward confidently

  • Patented Reassembly-Free Deep Packet Inspection (RFDPI) technology
  • Consolidated threat prevention: Cloud-based multi-engine sandboxing, anti-malware, intrusion prevention, web filtering and more
  • Feature-rich SonicOS operating system with intuitive user interface
  • Gigabit Ethernet ports
  • SSL, TLS and SSH decryption and inspection
  • Native SSL VPN secure remote access
  • Integrated 802.11ac wireless (optional)
Get advanced threat protection Image

Get advanced threat protection

Threat detection alone isn’t enough. That’s why every SonicWall firewall utilizes our patented Reassembly-Free Deep Packet Inspection technology to scan traffic for the latest threats and prevent them. The TZ Series examines every byte of every packet on all ports and protocols with no file size limitations. SonicWall Capture Advanced Threat Protection service, our award-winning cloud-based multi-engine sandbox, provides an additional layer of security by blocking unknown and zero-day attacks at the gateway.

Take advantage of high-speed performance Image

Take advantage of high-speed performance

Built on a multi-core parallel-processing hardware architecture featuring gigabit Ethernet ports, SonicWall TZ firewalls deliver high-speed deep packet inspection firewall performance. The TZ Series uses single-pass, stream-based inspection technology to deliver latency-free performance for deep packet inspection of simultaneous network streams. Optional 802.11ac wireless extends secure high-speed networking to Wi-Fi enabled devices.

Enable secure, easy-to-use mobile connectivity Image

Enable secure, easy-to-use mobile connectivity

Provide remote and mobile users with native VPN access to allowed network resources behind your TZ firewall. TZ firewalls support secure SSL VPN connections for Apple® iOS, Google® Android, Windows® 8.1, Mac OS® X, Kindle Fire and Linux devices. This lets users easily access the files, applications and resources they need to be productive from any location. The SSL VPN connection is scanned and any hidden threats are removed, ensuring maximum security.