| SOHO/ SOHO W | SOHO 250/ SOHO 250 W | TZ300/ TZ300 W | TZ300P | TZ350/ TZ350 W | TZ400/ TZ400 W | TZ500/ TZ500 W | TZ600 | TZ600P | |
|---|---|---|---|---|---|---|---|---|---|
| TotalSecure Firewall Overview | |||||||||
| Deep Packet Inspection Firewall | |||||||||
| Stateful Packet Inspection Firewall | |||||||||
| Unlimited File Size Protection | |||||||||
| Protocols Scanned | |||||||||
| Security Services Included | |||||||||
| Application Intelligence and Control | |||||||||
| Intrusion Prevention Service | |||||||||
| Gateway Anti-Virus and Anti-Spyware | |||||||||
| Content & URL Filtering (CFS) | |||||||||
| SSL Inspection (DPI SSL) | |||||||||
| Content Filtering Client (CFC) 1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| Analyzer Reporting 1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| Capture Advance Threat Protection 1 | N/A | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| Real-Time Deep Memory Inspection (RTDMI) 1 | N/A | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| Enforced Client Anti-Virus and Anti-Spyware 1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
| 24x7 Support | |||||||||
| Firewall General | |||||||||
| Interfaces | 5x1-GbE, 1 USB, 1 Console | 5x1-GbE, 1 USB, 1 Console | 5x1-GbE, 1 USB, 1 Console | 5x1-GbE, 1 USB, 1 Console | 5x1-GbE, 1 USB, 1 Console | 7x1-GbE, 1 USB, 1 Console | 8x1-GbE, 2 USB, 1 Console | 10x1-GbE, 2 USB, 1 Console, 1 Expansion Slot | 10x1-GbE, 2 USB, 1 Console, 1 Expansion Slot |
| Power over Ethernet (PoE) Support | – | – | – | 2 ports (2 PoE or 1 PoE+) | – | – | – | – | 4 ports (4 PoE or 4 PoE+) |
| Management | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| Site-to-Site VPN Tunnels | 10 | 10 | 10 | 10 | 15 | 20 | 25 | 50 | 50 |
| IPSec VPN Clients (Maximum) | 1 (5) | 1 (5) | 1 (10) | 1 (10) | 1 (10) | 2 (25) | 2 (25) | 2 (25) | 2 (25) |
| SSL VPN Licenses (Maximum) | 1 (10) | 1 (25) | 1 (50) | 1 (50) | 1 (75) | 2 (100) | 2 (150) | 2 (200) | 2 (200) |
| VLAN Interfaces | 25 | 25 | 25 | 25 | 25 | 50 | 50 | 50 | 50 |
| Wireless Controller | |||||||||
| WWAN Failover (4G/LTE) | |||||||||
| Network Switch Management | (wireless only) | ||||||||
| Firewall/VPN Performance | |||||||||
| Firewall Inspection Throughput 2 | 300 Mbps | 600 Mbps | 750 Mbps | 750 Mbps | 1.0 Gbps | 1.3 Gbps | 1.4 Gbps | 1.9 Gbps | 1.9 Gbps |
| Threat Prevention Throughput 3 | 150 Mbps | 200 Mbps | 235 Mbps | 235 Mbps | 335 Mbps | 600 Mbps | 700 Mbps | 800 Mbps | 800 Mbps |
| Application Inspection Throughput 3 | N/A | 275 Mbps | 375 Mbps | 375 Mbps | 600 Mbps | 1.2 Gbps | 1.3 Gbps | 1.8 Gbps | 1.8 Gbps |
| IPS Throughput 3 | 200 Mbps | 250 Mbps | 300 Mbps | 300 Mbps | 400 Mbps | 900 Mbps | 1.0 Gbps | 1.2 Gbps | 1.2 Gbps |
| Anti-Malware Inspection Throughput 3 | 150 Mbps | 200 Mbps | 235 Mbps | 235 Mbps | 335 Mbps | 600 Mbps | 700 Mbps | 800 Mbps | 800 Mbps |
| DPI SSL Throughput | 30 Mbps | 50 Mbps | 60 Mbps | 60 Mbps | 65 Mbps | 180 Mbps | 225 Mbps | 300 Mbps | 300 Mbps |
| VPN Throughput 4 | 150 Mbps | 200 Mbps | 300 Mbps | 300 Mbps | 430 Mbps | 900 Mbps | 1.0 Gbps | 1.1 Gbps | 1.1 Gbps |
| Maximum Connections (SPI) | 10,000 | 50,000 | 100,000 | 100,000 | 100,000 | 150,000 | 150,000 | 150,000 | 150,000 |
| Maximum Connections (DPI) | 10,000 | 50,000 | 90,000 | 90,000 | 90,000 | 125,000 | 125,000 | 125,000 | 125,000 |
| Maximum Connections (DPI SSL) | 250 | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 |
| New Connections/Sec | 1,800 | 3,000 | 5,000 | 5,000 | 6,000 | 6,000 | 8,000 | 12,000 | 12,000 |
| Features | |||||||||
| Logging | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog |
| Network Traffic Visualization | |||||||||
| Netflow/IPFIX Reporting | N/A | ||||||||
| SNMP | |||||||||
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| Dynamic Routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| Secure SD-WAN | |||||||||
| Single Sign-on (SSO) | |||||||||
| Voice over IP (VoIP) Security | |||||||||
| Interface to Interface Scanning | |||||||||
| PortShield Security | |||||||||
| Link Redundancy | |||||||||
| Policy-based Routing | |||||||||
| Route-based VPN | |||||||||
| Dynamic Bandwidth Management | |||||||||
| Stateful High Availability | N/A | N/A | N/A | N/A | N/A | N/A | Optional | Optional | Optional |
| Multi-WAN | |||||||||
| Load Balancing | |||||||||
| Object-based Management | |||||||||
| Policy-based NAT | |||||||||
| Inbound Load Balancing | |||||||||
| IKEv2 VPN | |||||||||
| TLS/SSL/SSH Decryption and Inspection | |||||||||
| SSL Control | |||||||||
| Auto-provision VPN | |||||||||
| Biometric Authentication | |||||||||
| DNS Proxy | |||||||||
| Hardware Failover | N/A | N/A | Active/Standby | Active/Standby | Active/Standby | Active/Standby | Active/Standby with stateful synchronization | Active/Standby with stateful synchronization | Active/Standby with stateful synchronization |
| Integrated Wireless | |||||||||
| Standards | 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | N/A | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | N/A | N/A |
| Frequency bands5 | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | N/A | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | N/A | N/A |
| " | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | N/A | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | N/A | N/A |
| " | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | N/A | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | N/A | N/A |
| " | N/A | N/A | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | N/A | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | N/A | N/A |
| Operating Channels | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | N/A | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | N/A | N/A |
| " | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | N/A | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | N/A | N/A |
| " | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | N/A | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | N/A | N/A |
| " | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | N/A | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | N/A | N/A |
| " | N/A | N/A | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | N/A | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | N/A | N/A |
| Transmit output power | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | N/A | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | N/A | N/A |
| Transmit power control | Supported | Supported | Supported | N/A | Supported | Supported | Supported | N/A | N/A |
| Data rates supported | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | N/A | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | N/A | N/A |
| " | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | N/A | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | N/A | N/A |
| " | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | N/A | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | N/A | N/A |
| " | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | N/A | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | N/A | N/A |
| " | N/A | N/A | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | N/A | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | N/A | N/A |
| " | N/A | N/A | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | N/A | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | N/A | N/A |
| Modulation technology spectrum | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | N/A | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | N/A | N/A |
| " | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | N/A | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | N/A | N/A |
| " | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | N/A | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | N/A | N/A |
| " | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | N/A | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | N/A | N/A |
| " | N/A | N/A | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | N/A | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | N/A | N/A |
1. Services must be purchased separately.
2. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3. Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
4. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall’s wireless access point products.
*Future use. All specifications, features and availability are subject to change.