TZ Entry Level Firewall Series Products Compare

	SOHO/ SOHO W	SOHO 250/ SOHO 250 W	TZ300/ TZ300 W	TZ300P	TZ350/ TZ350 W	TZ400/ TZ400 W	TZ500/ TZ500 W	TZ600	TZ600P
TotalSecure Firewall Overview
Deep Packet Inspection Firewall
Stateful Packet Inspection Firewall
Unlimited File Size Protection
Protocols Scanned
Security Services Included
Application Intelligence and Control
Intrusion Prevention Service
Gateway Anti-Virus and Anti-Spyware
Content & URL Filtering (CFS)
SSL Inspection (DPI SSL)
Content Filtering Client (CFC)¹	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional
Analyzer Reporting¹	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional
Capture Advance Threat Protection¹	N/A	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional
Real-Time Deep Memory Inspection (RTDMI)¹	N/A	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional
Enforced Client Anti-Virus and Anti-Spyware¹	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional	Optional
24x7 Support
Firewall General
Interfaces	5x1-GbE, 1 USB, 1 Console	5x1-GbE, 1 USB, 1 Console	5x1-GbE, 1 USB, 1 Console	5x1-GbE, 1 USB, 1 Console	5x1-GbE, 1 USB, 1 Console	7x1-GbE, 1 USB, 1 Console	8x1-GbE, 2 USB, 1 Console	10x1-GbE, 2 USB, 1 Console, 1 Expansion Slot	10x1-GbE, 2 USB, 1 Console, 1 Expansion Slot
Power over Ethernet (PoE) Support	–	–	–	2 ports (2 PoE or 1 PoE+)	–	–	–	–	4 ports (4 PoE or 4 PoE+)
Management	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs
Nodes Supported	Unrestricted	Unrestricted	Unrestricted	Unrestricted	Unrestricted	Unrestricted	Unrestricted	Unrestricted	Unrestricted
Site-to-Site VPN Tunnels	10	10	10	10	15	20	25	50	50
IPSec VPN Clients (Maximum)	1 (5)	1 (5)	1 (10)	1 (10)	1 (10)	2 (25)	2 (25)	2 (25)	2 (25)
SSL VPN Licenses (Maximum)	1 (10)	1 (25)	1 (50)	1 (50)	1 (75)	2 (100)	2 (150)	2 (200)	2 (200)
VLAN Interfaces	25	25	25	25	25	50	50	50	50
Wireless Controller
WWAN Failover (4G/LTE)
Network Switch Management	(wireless only)
Firewall/VPN Performance
Firewall Inspection Throughput²	300 Mbps	600 Mbps	750 Mbps	750 Mbps	1.0 Gbps	1.3 Gbps	1.4 Gbps	1.9 Gbps	1.9 Gbps
Threat Prevention Throughput³	150 Mbps	200 Mbps	235 Mbps	235 Mbps	335 Mbps	600 Mbps	700 Mbps	800 Mbps	800 Mbps
Application Inspection Throughput³	N/A	275 Mbps	375 Mbps	375 Mbps	600 Mbps	1.2 Gbps	1.3 Gbps	1.8 Gbps	1.8 Gbps
IPS Throughput³	200 Mbps	250 Mbps	300 Mbps	300 Mbps	400 Mbps	900 Mbps	1.0 Gbps	1.2 Gbps	1.2 Gbps
Anti-Malware Inspection Throughput³	150 Mbps	200 Mbps	235 Mbps	235 Mbps	335 Mbps	600 Mbps	700 Mbps	800 Mbps	800 Mbps
DPI SSL Throughput	30 Mbps	50 Mbps	60 Mbps	60 Mbps	65 Mbps	180 Mbps	225 Mbps	300 Mbps	300 Mbps
VPN Throughput⁴	150 Mbps	200 Mbps	300 Mbps	300 Mbps	430 Mbps	900 Mbps	1.0 Gbps	1.1 Gbps	1.1 Gbps
Maximum Connections (SPI)	10,000	50,000	100,000	100,000	100,000	150,000	150,000	150,000	150,000
Maximum Connections (DPI)	10,000	50,000	90,000	90,000	90,000	125,000	125,000	125,000	125,000
Maximum Connections (DPI SSL)	250	25,000	25,000	25,000	25,000	25,000	25,000	25,000	25,000
New Connections/Sec	1,800	3,000	5,000	5,000	6,000	6,000	8,000	12,000	12,000
Features
Logging	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog
Network Traffic Visualization
Netflow/IPFIX Reporting	N/A
SNMP
Authentication	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
Dynamic Routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing
Secure SD-WAN
Single Sign-on (SSO)
Voice over IP (VoIP) Security
Interface to Interface Scanning
PortShield Security
Link Redundancy
Policy-based Routing
Route-based VPN
Dynamic Bandwidth Management
Stateful High Availability	N/A	N/A	N/A	N/A	N/A	N/A	Optional	Optional	Optional
Multi-WAN
Load Balancing
Object-based Management
Policy-based NAT
Inbound Load Balancing
IKEv2 VPN
TLS/SSL/SSH Decryption and Inspection
SSL Control
Auto-provision VPN
Biometric Authentication
DNS Proxy
Hardware Failover	N/A	N/A	Active/Standby	Active/Standby	Active/Standby	Active/Standby	Active/Standby with stateful synchronization	Active/Standby with stateful synchronization	Active/Standby with stateful synchronization
Integrated Wireless
Standards	802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	N/A	802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	N/A	N/A
Frequency bands⁵	802.11a: 5.180-5.825 GHz	802.11a: 5.180-5.825 GHz	802.11a: 5.180-5.825 GHz	N/A	802.11a: 5.180-5.825 GHz	802.11a: 5.180-5.825 GHz	802.11a: 5.180-5.825 GHz	N/A	N/A
"	802.11b/g: 2.412-2.472 GHz	802.11b/g: 2.412-2.472 GHz	802.11b/g: 2.412-2.472 GHz	N/A	802.11b/g: 2.412-2.472 GHz	802.11b/g: 2.412-2.472 GHz	802.11b/g: 2.412-2.472 GHz	N/A	N/A
"	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	N/A	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	N/A	N/A
"	N/A	N/A	802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz	N/A	802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz	N/A	N/A
Operating Channels	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	N/A	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	N/A	N/A
"	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	N/A	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	N/A	N/A
"	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	N/A	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	N/A	N/A
"	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	N/A	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	N/A	N/A
"	N/A	N/A	802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	N/A	802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	N/A	N/A
Transmit output power	Based on the regulatory domain specified by the system administrator	Based on the regulatory domain specified by the system administrator	Based on the regulatory domain specified by the system administrator	N/A	Based on the regulatory domain specified by the system administrator	Based on the regulatory domain specified by the system administrator	Based on the regulatory domain specified by the system administrator	N/A	N/A
Transmit power control	Supported	Supported	Supported	N/A	Supported	Supported	Supported	N/A	N/A
Data rates supported	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	N/A	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	N/A	N/A
"	802.11b: 1,2,5.5,11 Mbps per channel	802.11b: 1,2,5.5,11 Mbps per channel	802.11b: 1,2,5.5,11 Mbps per channel	N/A	802.11b: 1,2,5.5,11 Mbps per channel	802.11b: 1,2,5.5,11 Mbps per channel	802.11b: 1,2,5.5,11 Mbps per channel	N/A	N/A
"	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	N/A	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	N/A	N/A
"	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	N/A	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	N/A	N/A
"	N/A	N/A	802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,	N/A	802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,	802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,	802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,	N/A	N/A
"	N/A	N/A	200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel	N/A	200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel	200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel	200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel	N/A	N/A
Modulation technology spectrum	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	N/A	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	N/A	N/A
"	802.11b: Direct Sequence Spread Spectrum (DSSS)	802.11b: Direct Sequence Spread Spectrum (DSSS)	802.11b: Direct Sequence Spread Spectrum (DSSS)	N/A	802.11b: Direct Sequence Spread Spectrum (DSSS)	802.11b: Direct Sequence Spread Spectrum (DSSS)	802.11b: Direct Sequence Spread Spectrum (DSSS)	N/A	N/A
"	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	N/A	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	N/A	N/A
"	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	N/A	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	N/A	N/A
"	N/A	N/A	802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)	N/A	802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)	802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)	802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)	N/A	N/A

1. Services must be purchased separately.
2. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3. Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
4. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall’s wireless access point products.
*Future use. All specifications, features and availability are subject to change.