SOHO | SOHO 250 | TZ300 | TZ350 | TZ400 | TZ500 | TZ600 | |
---|---|---|---|---|---|---|---|
TotalSecure Firewall Overview | |||||||
Deep Packet Inspection Firewall | |||||||
Stateful Packet Inspection Firewall | |||||||
Unlimited File Size Protection | |||||||
Protocols Scanned | |||||||
Security Services Included | |||||||
Application Intelligence and Control | |||||||
Intrusion Prevention Service | |||||||
Gateway Anti-Virus and Anti-Spyware | |||||||
Content & URL Filtering (CFS) | |||||||
SSL Inspection (DPI SSL) | |||||||
Content Filtering Client (CFC) 1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
Analyzer Reporting 1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
Capture Advance Threat Protection 1 | N/A | Optional | Optional | Optional | Optional | Optional | Optional |
Real-Time Deep Memory Inspection (RTDMI)1 | N/A | Optional | Optional | Optional | Optional | Optional | Optional |
Enforced Client Anti-Virus and Anti-Spyware 1 | Optional | Optional | Optional | Optional | Optional | Optional | Optional |
24x7 Support | |||||||
Firewall General | |||||||
Interfaces | 5x1-GbE, 1 USB, 1 Console | 5x1-GbE, 1 USB, 1 Console | 5x1-GbE, 1 USB, 1 Console | 5x1-GbE, 1 USB, 1 Console | 7x1-GbE, 1 USB, 1 Console | 8x1-GbE, 2 USB, 1 Console | 10x1-GbE, 2 USB, 1 Console, 1 Expansion Slot |
Management | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs | CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs |
Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
Site-to-Site VPN Tunnels | 10 | 10 | 10 | 15 | 20 | 25 | 50 |
IPSec VPN Clients (Maximum) | 1 (5) | 1 (5) | 1 (10) | 1 (10) | 2 (25) | 2 (25) | 2 (25) |
SSL VPN Licenses (Maximum) | 1 (10) | 1 (25) | 1 (50) | 1 (75) | 2 (100) | 2 (150) | 2 (200) |
VLAN Interfaces | 25 | 25 | 25 | 25 | 50 | 50 | 50 |
Wireless Controller | |||||||
WWAN Failover (4G/LTE) | |||||||
Network Switch Management | (wireless only) | ||||||
Firewall/VPN Performance | |||||||
Firewall Inspection Throughput 2 | 300 Mbps | 600 Mbps | 750 Mbps | 1.0 Gbps | 1.3 Gbps | 1.4 Gbps | 1.9 Gbps |
Threat Prevention Throughput 3 | 150 Mbps | 200 Mbps | 235 Mbps | 335 Mbps | 600 Mbps | 700 Mbps | 800 Mbps |
Application Inspection Throughput 3 | N/A | 275 Mbps | 375 Mbps | 600 Mbps | 1.2 Gbps | 1.3 Gbps | 1.8 Gbps |
IPS Throughput 3 | 100 Mbps | 250 Mbps | 300 Mbps | 400 Mbps | 900 Mbps | 1.0 Gbps | 1.2 Gbps |
Anti-Malware Inspection Throughput 3 | 50 Mbps | 100 Mbps | 200 Mbps | 300 Mbps | 600 Mbps | 700 Mbps | 800 Mbps |
DPI SSL Throughput | 30 Mbps | 50 Mbps | 60 Mbps | 65 Mbps | 180 Mbps | 225 Mbps | 300 Mbps |
VPN Throughput 4 | 100 Mbps | 200 Mbps | 300 Mbps | 430 Mbps | 900 Mbps | 1.0 Gbps | 1.1 Gbps |
Maximum Connections (SPI) | 10,000 | 50,000 | 100,000 | 100,000 | 150,000 | 150,000 | 150,000 |
Maximum Connections (DPI) | 10,000 | 50,000 | 90,000 | 90,000 | 125,000 | 125,000 | 125,000 |
Maximum Connections (DPI SSL) | 250 | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 |
New Connections/Sec | 1,800 | 3,000 | 5,000 | 6,000 | 6,000 | 8,000 | 12,000 |
Features | |||||||
Logging | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog | Analyzer, Local Log, Syslog |
Network Traffic Visualization | |||||||
Netflow/IPFIX Reporting | N/A | ||||||
SNMP | |||||||
Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
Dynamic Routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
Secure SD-WAN | |||||||
Single Sign-on (SSO) | |||||||
Voice over IP (VoIP) Security | |||||||
Interface to Interface Scanning | |||||||
PortShield Security | |||||||
Link Redundancy | |||||||
Policy-based Routing | |||||||
Route-based VPN | |||||||
Dynamic Bandwidth Management | |||||||
Stateful High Availability | N/A | N/A | N/A | N/A | N/A | Optional | Optional |
Multi-WAN | |||||||
Load Balancing | |||||||
Object-based Management | |||||||
Policy-based NAT | |||||||
Inbound Load Balancing | |||||||
IKEv2 VPN | |||||||
TLS/SSL/SSH Decryption and Inspection | |||||||
SSL Control | |||||||
Auto-provision VPN | |||||||
Biometric Authentication | |||||||
DNS Proxy | |||||||
Hardware Failover | N/A | N/A | Active/Standby | Active/Standby | Active/Standby | Active/Standby with stateful synchronization | Active/Standby with stateful synchronization |
Integrated Wireless | |||||||
Standards | 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS | |
Frequency bands 5 | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | 802.11a: 5.180-5.825 GHz | |
" | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | 802.11b/g: 2.412-2.472 GHz | |
" | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz | |
" | N/A | N/A | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz | |
Operating Channels | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4 | |
" | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only) | |
" | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13 | |
" | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | |
" | N/A | N/A | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 | |
Transmit output power | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | Based on the regulatory domain specified by the system administrator | |
Transmit power control | Supported | Supported | Supported | Supported | Supported | Supported | |
Data rates supported | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11a: 6,9,12,18,24,36,48,54 Mbps per channel | |
" | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | 802.11b: 1,2,5.5,11 Mbps per channel | |
" | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | 802.11g: 6,9,12,18,24,36,48,54 Mbps per channel | |
" | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel | |
" | N/A | N/A | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, | |
" | N/A | N/A | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel | |
Modulation technology spectrum | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) | |
" | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | 802.11b: Direct Sequence Spread Spectrum (DSSS) | |
" | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS) | |
" | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11n: Orthogonal Frequency Division Multiplexing (OFDM) | |
" | N/A | N/A | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) | 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) |
1. 服务必须单独购买。
2 使用行业标准 Spirent WebAvalanche HTTP 性能测试和 Ixia 测试工具测得威胁预防/网关防病毒/反间谍软件/入侵保护系统吞吐量。通过多个端口对进行多次流测试。启用网关防病毒、反间谍软件、入侵防护系统和应用程序控制测得的威胁预防吞吐量。
3. 使用行业标准 Spirent WebAvalanche HTTP 性能测试和 Ixia 测试工具测得完整 DPI/网关防病毒/反间谍软件/入侵防护系统吞吐量。通过多个端口对进行多次流测试。启用网关防病毒、反间谍软件、入侵防护系统和应用程序控制测得的威胁预防吞吐量。
4 在 1280 字节数据包大小下使用 UDP 流量测量的 VPN 吞吐量符合 RFC 2544 要求。
5. 所有 TZ 集成无线型号都可以支持 2.4GHz 或 5GHz 频段。要获得双频段支持,请使用 SonicWall 的无线接入点产品。
*将来使用。所有规格、功能和供货情况可能会有所变化。