SonicWall TZ600 Series
Comprehensive Entry Level Next-Generation Firewall

Overview:

The SonicWall TZ series enables small to mid-size organizations and distributed enterprises realize the benefits of an integrated security solution that checks all the boxes. Combining high-speed threat prevention and software-defined wide area networking (SD-WAN) technology with an extensive range of networking and wireless features plus simplified deployment and centralized management, the TZ series provides a unified security solution at a low total cost of ownership.

Flexible, integrated security solution

The foundation of the TZ series is SonicOS, SonicWall’s feature-rich operating system. SonicOS includes a powerful set of capabilities that provides organizations with the flexibility to tune these Unified Threat Management (UTM) firewalls to their specific network requirements. For example, creating a secure high-speed wireless network is simplified through a built-in wireless controller and support for the IEEE 802.11ac standard or by adding our SonicWave 802.11ac Wave 2 access points. To reduce the cost and complexity of connecting high-speed wireless access points and other Power over Ethernet (PoE)-enabled devices such as IP cameras, phones and printers, the TZ300P and TZ600P provide PoE/PoE+ power.

Distributed retail businesses and campus environments can take advantage of the many tools in SonicOS to gain even greater benefits. Branch locations are able to exchange information securely with the central office using virtual private networking (VPN). Creating virtual LANs (VLANs) enables segmentation of the network into separate corporate and customer groups with rules that determine the level of communication with devices on other VLANs. SD-WAN offers a secure alternative to costly MPLS circuits while delivering consistent application performance and availability. Deploying TZ firewalls to remote locations is easy using Zero-Touch Deployment which enables provisioning of the firewall remotely through the cloud.

Superior threat prevention and performance

Our vision for securing networks in today’s continually-evolving cyber threat landscape is automated, realtime threat detection and prevention. Through a combination of cloud-based and on-box technologies we deliver protection to our firewalls that’s been validated by independent third-party testing for its extremely high security effectiveness. Unknown threats are sent to SonicWall’s cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. Enhancing Capture ATP is our patent-pending Real-Time Deep Memory Inspection (RTDMI™) technology. The RTDMI engine detects and blocks malware and zero-day threats by inspecting directly in memory. RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks where the malware’s weaponry is exposed for less than 100 nanoseconds. In combination, our patented single-pass Reassembly-Free Deep Packet Inspection (RFDPI) engine examines every byte of every packet, inspecting both inbound and outbound traffic directly on the firewall. By leveraging Capture ATP with RTDMI technology in the SonicWall Capture Cloud Platform in addition to on-box capabilities including intrusion prevention, anti-malware and web/ URL filtering, TZ series firewalls stop malware, ransomware and other threats at the gateway. For mobile devices used outside the firewall perimeter, SonicWall Capture Client provides an added layer of protection by applying advanced threat protection techniques such as machine learning and system rollback. Capture Client also leverages the deep inspection of encrypted TLS traffic (DPI-SSL) on TZ series firewalls by installing and managing trusted TLS certificates.

The continued growth in the use of encryption to secure web sessions means it is imperative firewalls are able to scan encrypted traffic for threats. TZ series firewalls provide complete protection by performing full decryption and inspection of TLS/SSL and SSH encrypted connections regardless of port or protocol. The firewall searches for protocol non-compliance, threats, zerodays, intrusions, and even defined criteria by looking deep inside every packet. The deep packet inspection engine detects and prevents hidden attacks that leverage cryptography. It also blocks encrypted malware downloads, ceases the spread of infections and thwarts command and control (C&C) communications and data exfiltration. Inclusion and exclusion rules allow total control to customize which traffic is subjected to decryption and inspection based on specific organizational compliance and/or legal requirements.

Easy deployment, setup and ongoing management

SonicWall makes it easy to configure and manage TZ series firewalls and SonicWave 802.11ac Wave 2 access points no matter where you deploy them. Centralized management, reporting, licensing and analytics are handled through our cloud-based Capture Security Center which offers the ultimate in visibility, agility and capacity to centrally govern the entire SonicWall security ecosystem from a single pane of glass.

A key component of the Capture Security Center is Zero-Touch Deployment. This cloud-based feature simplifies and speeds the deployment and provisioning of SonicWall firewalls at remote and branch office locations. The process requires minimal user intervention, and is fully automated to operationalize firewalls at scale in just a few steps. This significantly reduces the time, cost and complexity associated with installation and configuration, while security and connectivity occurs instantly and automatically. Together, the simplified deployment and setup along with the ease of management enable organizations to lower their total cost of ownership and realize a high return on investment.

* 802.11ac currently not available on SOHO/SOHO 250 models; SOHO/SOHO 250 models support 802.11a/b/g/n

Benefits:

Flexible, integrated security solution

• Secure SD-WAN
• Powerful SonicOS operating system
• High-speed 802.11ac wireless
• Power over Ethernet (PoE/PoE+)
• Network segmentation with VLANs

Superior threat prevention and performance

• Patent-pending real-time deep memory inspection technology
• Patented reassembly-free deep packet inspection technology
• On-box and cloud-based threat prevention
• TLS/SSL decryption and inspection
• Industry-validated security effectiveness
• Dedicated Capture Labs threat research team
• Endpoint security with Capture Client

Easy deployment, setup and ongoing management

• Zero-Touch Deployment
• Cloud-based and on-premises centralized management
• Scalable line of firewalls
• Low total cost of ownership

Features and Benefits:

Deployment & Architecture:

Capture Cloud Platform

SonicWall's Capture Cloud Platform delivers cloud-based threat prevention and network management plus reporting and analytics for organizations of any size. The platform consolidates threat intelligence gathered from multiple sources including our award-winning multi-engine network sandboxing service, Capture Advanced Threat Protection, as well as more than 1 million SonicWall sensors located around the globe.

If data coming into the network is found to contain previously-unseen malicious code, SonicWall’s dedicated, in-house Capture Labs threat research team develops signatures that are stored in the Capture Cloud Platform database and deployed to customer firewalls for up-to-date protection. New updates take effect immediately without reboots or interruptions. The signatures resident on the appliance protect against wide classes of attacks, covering tens of thousands of individual threats. In addition to the countermeasures on the appliance, TZ firewalls also have continuous access to the Capture Cloud Platform database which extends the onboard signature intelligence with tens of millions of signatures.

In addition to providing threat prevention, the Capture Cloud Platform offers single pane of glass management and administrators can easily create both real-time and historical reports on network activity.

---

Advanced threat protection

At the center of SonicWall automated, real-time breach prevention is SonicWall Capture Advanced Threat Protection service, a cloud-based multi-engine sandbox that extends firewall threat protection to detect and prevent zeroday threats. Suspicious files are sent to the cloud where they are analyzed using deep learning algorithms with the option to hold them at the gateway until a verdict is determined. The multi-engine sandbox platform, which includes Real-Time Deep Memory Inspection, virtualized sandboxing, full system emulation and hypervisor level analysis technology, executes suspicious code and analyzes behavior. When a file is identified as malicious, it is blocked and a hash is immediately created within Capture ATP. Soon after, a signature is sent to firewalls to prevent follow-on attacks.

The service analyzes a broad range of operating systems and file types, including executable programs, DLL, PDFs, MS Office documents, archives, JAR and APK.

For complete endpoint protection, the SonicWall Capture Client combines next-generation anti-virus technology with SonicWall's cloud-based multi-engine sandbox.

---

Reassembly-Free Deep Packet Inspection engine

The SonicWall Reassembly-Free Deep Packet Inspection (RFDPI) is a singlepass, low latency inspection system that performs stream-based, bi-directional traffic analysis at high speed without proxying or buffering to effectively uncover intrusion attempts and malware downloads while identifying application traffic regardless of port and protocol. This proprietary engine relies on streaming traffic payload inspection to detect threats at Layers 3-7, and takes network streams through extensive and repeated normalization and decryption in order to neutralize advanced evasion techniques that seek to confuse detection engines and sneak malicious code into the network.

Once a packet undergoes the necessary pre-processing, including TLS/SSL decryption, it is analyzed against a single, proprietary memory representation of three signature databases: intrusion attacks, malware and applications. The connection state is then advanced to represent the position of the stream relative to these databases until it encounters a state of attack, or other “match” event, at which point a pre-set action is taken.

In most cases, the connection is terminated and proper logging and notification events are created. However, the engine can also be configured for inspection only or, in case of application detection, to provide Layer 7 bandwidth management services for the remainder of the application stream as soon as the application is identified.

---

Centralized management and reporting

For highly regulated organizations wanting to achieve a fully coordinated security governance, compliance and risk management strategy, SonicWall provides administrators a unified, secure and extensible platform to manage SonicWall firewalls, wireless access points and Dell N-Series and X-Series switches through a correlated and auditable workstream process. Enterprises can easily consolidate the management of security appliances, reduce administrative and troubleshooting complexities, and govern all operational aspects of the security infrastructure, including centralized policy management and enforcement; real-time event monitoring; user activities; application identifications; flow analytics and forensics; compliance and audit reporting; and more. In addition, enterprises meet the firewall’s change management requirements through workflow automation which provides the agility and confidence to deploy the right firewall policies at the right time and in conformance with compliance regulations. Available on premises as SonicWall Global Management System and in the cloud as Capture Security Center, SonicWall management and reporting solutions provide a coherent way to manage network security by business processes and service levels, dramatically simplifying lifecycle management of your overall security environments compared to managing on a device-by-device basis.

---

Distributed networks

Because of their flexibility, TZ series firewalls are ideally suited for both distributed enterprise and single site deployments. In distributed networks like those found in retail organizations, each site has its own TZ firewall which connects to the Internet often through a local provider using a DSL, cable or 3G/4G connection. In addition to Internet access, each firewall utilizes an Ethernet connection to transport packets between remote sites and the central headquarters. Web services and SaaS applications such as Office 365, Salesforce and others are served up from the data center. Through mesh VPN technology, IT administrators can create a hub and spoke configuration for the safe transport of data between all locations.

The SD-WAN technology in SonicOS is a perfect complement to TZ firewalls deployed at remote and branch sites. Instead of relying on more expensive legacy technologies such as MPLS and T1, organizations using SD-WAN can choose lower-cost public Internet services while continuing to achieve a high level of application availability and predictable performance.

---

Capture Security Center

Tying the distributed network together is SonicWall’s cloud-based Capture Security Center (CSC) which centralizes deployment, ongoing management and real-time analytics of the TZ firewalls. A key feature of CSC is ZeroTouch Deployment. Configuring and deploying firewalls across multiple sites is time-consuming and requires onsite personnel. However ZeroTouch Deployment removes these challenges by simplifying and speeding the deployment and provisioning of SonicWall firewalls remotely through the cloud. Similarly, CSC eases ongoing management by providing cloud-based single-pane-of-glass management for SonicWall devices on the network. For complete situational awareness of the network security environment, SonicWall Analytics offers a single-pane view into all activity occurring inside the network. Organizations gain a deeper understanding of application usage and performance while reducing the possibility of Shadow IT.

Single Sites

For single site deployments, having an integrated network security solution is highly beneficial. TZ series firewalls combine high security effectiveness with options such as built-in 802.11ac wireless and, in the case of the TZ300P and TZ600P, PoE/PoE+ support. The same security engine in our mid-range NSa series and high-end NSsp series is featured in TZ series firewall along with the broad feature set of SonicOS. Configuration and management is easy using the intuitive SonicOS UI. Organizations save valuable rack space due to the compact desktop form factor.

Specifications:

For emerging enterprises, retail and branch offices looking for security, performance and options such as 802.3at PoE+ support at a value price, the SonicWall TZ600 secures networks with enterprise-class features and uncompromising performance.

*Future use.

¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

² Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

³ VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

⁴ BGP is available only on SonicWall TZ400, TZ500 and TZ600.

⁵ All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products

Services & Add-Ons:

Advanced Gateway Security Suite (AGSS)

Leverage SonicWall Advanced Gateway Security Suite (AGSS) to deliver a multi-engine sandbox, powerful anti‐virus, anti‐spyware, intrusion prevention, content filtering, as well as application intelligence and control services. An upgrade over CGSS, this package features Capture Advanced Threat Protection (ATP), a multi-engine sandbox that runs and inspects suspicious files, programs and code in an isolated cloud-based environment.

TotalSecure hardware & services bundle

Enjoy the convenience and affordability of deploying your firewall as a SonicWall TotalSecure solution. This combines the hardware and all the services needed for comprehensive network protection from viruses, spyware, worms, Trojans, key loggers and more — before they enter your network — and without the complexity of building your own security package.

Comprehensive Gateway Security Suite (CGSS)

Get the most from your UTM firewall with the SonicWall Comprehensive Security Suite (CGSS) subscription. CGSS includes Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Intelligence and Control Service, Content/URL Filtering and 24x7 Support. Combine security, productivity and support in a single solution with a low cost of ownership and greater ROI compared with buying each of the services individually.

Gateway security services

Enable your small business firewall appliance to provide real-time network threat prevention with SonicWall Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, and Application Intelligence and Control. Block the latest blended threats, including viruses, spyware, worms, Trojans, software vulnerabilities and other malicious code. Also, guarantee bandwidth prioritization and ensure maximum network security and productivity, with the granular control and real-time visualization with Application Intelligence and Control.

Capture Advanced Threat Protection

The cloud-based SonicWall Capture Advanced Threat Protection Service scans a broad range of files to detect advanced threats, analyzes them in a multi-engine sandbox, blocks them prior to a security verdict, and rapidly deploys remediation signatures. The result is higher security effectiveness, faster response times and a lower total cost of ownership.

Content filtering services

Gain a cost-effective, easy-to-manage way to enforce protection and productivity policies, and block inappropriate, unproductive and dangerous web content in educational, business or government environments. SonicWall Content Filtering Service lets you control access to websites based on rating, IP address, URL and more. You get the ideal combination of control and flexibility to ensure the highest levels of protection and productivity, which you can configure and control from your small business firewall appliance, eliminating the need for a costly, dedicated filtering solution. Extend enforcement of your internal policies to devices located outside the firewall perimeter by blocking unwanted internet content with the Content Filtering Client.

Content Filtering Client

Extend the enforcement of web policies in IT-issued devices outside the network perimeter. Although it doesn't require a firewall, it can be optionally coupled with SonicWall Content Filtering Service as an ideal combination to keep students and employees off of dangerous or non-productive websites by switching to cloud-enforced policies even when they are using roaming devices.

Support Services

Keep your security infrastructure current and react swiftly to any problem that may occur. If you need advanced technical support and additional benefits of ongoing software and firmware updates, SonicWall 24x7 support gives you an around-the clock service that includes:

• Telephone and web-based support 24x7
• Direct access to a team of highly trained senior support engineers
• Advance exchange hardware replacement in the event of failure
• Access to Electronic support tools

Enforced client anti-virus and anti-spyware software

Execute an innovative, multi-layered anti-virus internet security strategy, with SonicWall firewalls and Enforced Client Anti-Virus and Anti-Spyware software. You get SonicWall Reassembly-Free Deep Packet Inspection anti-malware at the gateway, and enforced anti-virus protection at the endpoints. You can redirect any user with a non-compliant endpoint to a web page to install the latest Enforced Client Anti-Virus and Anti-Spyware software. Provide automatically updated security definitions to the endpoint as soon as they become available to protect against today's rapidly evolving threats. Automate enforcement to minimize administrative overhead.

Comprehensive anti-spam service

Block threats from your email server and stop spam at the gateway by adding SonicWall Comprehensive Anti-Spam Service (CASS) to your SonicWall firewall. Rapidly deploy your spam firewall software with one-click activation of up to 250 users.

Reporting software

Enjoy easy-to-use web-based traffic analytics and reporting, along with real-time and historical insight into the health, performance and security of your network. SonicWall Analyzer supports SonicWall firewalls and secure remote access devices while leveraging application traffic analytics for security event reports. Provide a complete solution that combines off-box application traffic analytics with granular statistical data generated by SonicWall firewalls.

Rackmount:

Rack mount kit for:

- SonicWall TZ600

The RM-SW-T6 gives you the ability to mount your SonicWall desktop firewalls in a 19" rack. The rack is tailored specifically for the listed models to guarantee a perfect fit. In addition, the connections are brought to the front for easy access. The power supply is fixated to prevent an accidental loss of power.

Assembly will take about 5 minutes. Simply slide your SonicWall device in the kit, place the retainers, connect the supplied cables to the keystones and fix the power supply to the rack.

Other colors can be delivered on project basis

Specifications
Color	RAL 9005 Jet Black
Height	1U
Dimensions (height x width x depth)	1.73 x 18.98 x 8.54 in.
Number of connections brought to the front	11
Console port to the front	Yes
Cables	11x 0.5m cables
Couplers	11x RJ45 couplers
Supported Models	- SonicWall TZ600
What's in the box	- 1x SW-Rack + RJ45 couplers - Cables - Assembly materials - Installation guide
EAN	8718868918062
UPC	852754006063

Download the RM-WG-T6 Datasheet (PDF).

Documentation:

Download the SonicWall TZ Series Datasheet (PDF).