SonicWall TZ Series Next-Generation Firewall (NGFW)
Enterprise-grade protection without the cost or complexity.
Protect your small business or branch location from intrusion, malware and ransomware with an easy-to-use, integrated security solution designed specifically for your needs.
TZ Series Models
Our most deployed TZ models for small and mid-sized businesses.
TZ Series Overview
Enterprise-class security designed specifically for SMBs and branch locations.
The SonicWall TZ series delivers enterprise-class security without the enterprise-grade complexity. With Zero-Touch Deployment and simplified centralized management, installation and operation is easy.
- Multi-engine Capture ATP with Real-Time Deep Memory Inspection (RTDMI)
- Zero-Touch Deployment for fast, simple setup
- Built-in Secure SD-WAN technology
- Centralized management via Network Security Manager
- Integrated wireless options for all-in-one deployments
Key Features
Why organizations choose TZ Series firewalls for their network security.
Superior Performance
Industry-leading threat prevention throughput with multi-core parallel processing. Inspect encrypted traffic without compromising speed.
Low Total Cost of Ownership
Reduce costs with zero-touch deployment, built-in SD-WAN, and enterprise security at SMB pricing. Get more protection for less.
Secure SD-WAN
Replace expensive MPLS with secure, cost-effective broadband connections. Built-in SD-WAN optimizes cloud and SaaS traffic.
Simplified Management
Deploy and manage distributed firewalls from a single pane with Network Security Manager. Zero-touch setup gets you protected fast.
Advanced Threat Prevention
Capture ATP with RTDMI stops ransomware, zero-days, and encrypted threats. Real-time cloud intelligence keeps you protected.
Zero Trust Ready
Built-in ZTNA connector enables secure access to private applications via Cloud Secure Edge. Support remote and hybrid workforces.
Which TZ is Right for You?
Select your use case to find the best firewall for your needs.
Gen 8 vs Gen 7: Which Generation?
Understand the differences to make the right choice.
Gen 8 Series
- Latest architecture with highest throughput
- Enhanced resilience and redundancy
- 802.11ax (WiFi 6) wireless options
- SonicOS 8 with simplified management
- Models: TZ80, TZ280-TZ680
Gen 7 Series
- Proven, stable platform
- Cost-effective pricing
- 802.11ac wireless options
- Full security feature set
- Models: TZ270-TZ670
Benefits
What you get with SonicWall TZ Series firewalls.
Advanced Threat Prevention with Deep Memory Inspection
- Get lightning-fast performance with security processors optimized for speed
- Gain a deeper level of threat prevention through Real-Time Deep Memory Inspection (RTDMI)
- Leverage shared threat intelligence for continuously updated security
- Rely on a wide range of rich features in SonicWall's powerful SonicOS operating system
Superior Performance
- Leverage multi-core, parallel-processing hardware architecture
- Achieve fast performance using gigabit and multi-gigabit Ethernet interfaces
- Take advantage of single-pass, stream-based inspection
- Inspect simultaneous network streams using deep packet inspection
Network Control and Flexibility
- Get your firewall up and running quickly with Zero-Touch Deployment
- Grow your distributed network while lowering costs with Secure SD-WAN
- Power your PoE-enabled devices with integrated PoE/PoE+ support
- Gain insight into and control over application usage across the network
Secure, Easy-to-Use Mobile Connectivity
- Access resources behind the firewall remotely and securely using native 802.11ac wireless SSL VPN
- Connect from virtually any operating system
- Detect and remove hidden threats over the VPN connection
Compare Gen 8 TZ Models
Find the right TZ Series firewall for your organization.
| Firewall General | TZ280 SERIES | TZ380 SERIES | TZ480 SERIES | TZ580 SERIES | TZ680 SERIES |
|---|---|---|---|---|---|
| Recommended For | Small offices | Most common pick | Multi-site businesses | Growing enterprises | High-throughput |
| Operating system | SonicOS 8 | ||||
| Interfaces | 8 * 1GbE Cu, 2*1G SFP | 8 * 1GbE Cu, 2*5G/2.5G/1G SFP+ | 8 * 1GbE Cu, 2*5G/2.5G/1G SFP+ | 8 * 1GbE Cu, 2*5G/2.5G/1G SFP+ | 8 * 1GbE Cu, 2*10G SFP |
| Wireless support | N/A | 2x2 802.11ax (TZ380W) | N/A | N/A | N/A |
| Storage (expansion) | (Optional: Up to 512 Gb) | (Optional: Up to 512 Gb) | (Optional: Up to 512 Gb) | (Optional: Up to 512 Gb) | (Optional: Up to 512 Gb) |
| Centralized Management | Network Security Manager (NSM) 3.0+, CLI, SSH, Web UI, REST APIs | ||||
| Logical VLAN and tunnel interfaces (max) | 64 | 128 | 128 | 256 | 256 |
| SAML Single Sign-On (SSO) Users | 1000 | 1000 | 2500 | 2500 | 2500 |
| Access points supported (max) | 16 | 16 | 32 | 32 | 32 |
| Firewall/VPN Performance | TZ280 | TZ380 | TZ480 | TZ580 | TZ680 |
|---|---|---|---|---|---|
| Firewall inspection throughput | 2.5 Gbps | 3.5 Gbps | 4 Gbps | 4.5 Gbps | 5 Gbps |
| Threat prevention throughput | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.2 Gbps | 2.5 Gbps |
| Application inspection throughput | 1.5 Gbps | 2.0 Gbps | 2.2 Gbps | 2.5 Gbps | 3 Gbps |
| IPS throughput | 1.5 Gbps | 2.0 Gbps | 2.2 Gbps | 2.5 Gbps | 3 Gbps |
| TLS/SSL inspection throughput | 430 Mbps | 600 Mbps | 650 Mbps | 750 Mbps | 800 Mbps |
| IPSec VPN throughput | 1.2 Gbps | 1.6 Gbps | 2 Gbps | 2.2 Gbps | 2.5 Gbps |
| Maximum connections (SPI) | 1,000,000 | 1,100,000 | 1,200,000 | 1,400,000 | 1,600,000 |
| Maximum connections (DPI) | 200,000 | 250,000 | 350,000 | 500,000 | 600,000 |
| VPN and ZTNA | |||||
| Site-to-site VPN tunnels | 200 | 200 | 200 | 250 | 250 |
| IPSec VPN clients (maximum) | 5 (200) | 5 (200) | 5 (200) | 10 (500) | 10 (500) |
| SSL VPN licenses (maximum) | 1 (50) | 2 (100) | 2 (150) | 2 (200) | 2 (250) |
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-256, SHA-384, Suite B Cryptography | ||||
| SonicWall Private Access (CSE) | Included in 3&Free Loyalty Program | ||||
| Security Services | |||||
| Deep Packet Inspection services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption | ||||
| Content Filtering Service (CFS) | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning | ||||
| Capture Advanced Threat Protection | Yes | ||||
| Advanced DNS Filtering | Yes | ||||
*Testing methodologies: Maximum performance based on RFC 2544. Actual performance may vary depending on network conditions and activated services.
Legacy TZ Models
Previous generation TZ Series firewalls for reference and renewal purposes.
Ready to Secure Your Network?
Connect with a SonicWall TZ Series specialist to find the right firewall for your business. We'll help you choose the model that fits your needs and budget.
We help size, deploy, and support SonicWall TZ firewalls every day.
Why Work With SonicGuard?
As an Authorized SonicWall Reseller and 2025 Partner of the Year, we provide expert guidance, competitive pricing, and ongoing support to ensure your security investment delivers results.
- SonicWall-certified engineers
- 24x7 technical support
- Fast shipping on all orders
- Custom quotes within 24 hours
Call us:
Toll Free: 800-886-4880
Local: 949-328-2855
Your Trusted TZ Series Partner
From firewall selection to deployment and ongoing management, SonicGuard helps you maximize your SonicWall investment. As SonicWall's 2025 Partner of the Year, we bring proven expertise to every stage of your network security journey.
Right-Sized Solutions
Expert guidance to match the right TZ firewall to your network size and security needs
Deployment Support
Configuration assistance and remote setup to get your firewall protecting traffic fast
Threat Prevention
Deep expertise in Capture ATP, IPS, and security services to stop ransomware and zero-days
Lifecycle Management
Ongoing license renewals, firmware updates, and upgrade planning as your network grows