SonicWall TZ470 Wireless-AC Secure Upgrade Plus - Essential Edition 3 Years
SonicWall TZ470 Wireless-AC with 3 Years of Essential Protection Services Suite
#02-SSC-6814 List Price: $7,488.00 Our Price: Request a Quote
SonicWall TZ470 Wireless-AC Secure Upgrade Plus - Advanced Edition 2 Years
SonicWall TZ470 Wireless-AC with 2 Years of Advanced Protection Services Suite
#02-SSC-6813 List Price: $6,109.00 Our Price: Request a Quote
SonicWall TZ470 Wireless-AC Secure Upgrade Plus - Advanced Edition 3 Years
SonicWall TZ470 Wireless-AC with 3 Years of Advanced Protection Services Suite
#02-SSC-6815 List Price: $8,452.00 Our Price: Request a Quote
The latest SonicWall TZ series, are
the first desktop form factor nextgeneration
firewalls (NGFW) with
10 or 5 Gigabit Ethernet interfaces.
The series consist of a wide range of
products to suit a variety of use cases.
Designed for small, mid-sized
organizations and distributed
enterprise with SD-Branch locations,
the 7th generation (Gen 7) TZ series
delivers industry-validated security
effectiveness with best-in-class priceperformance.
These NGFWs address
the growing trends in web encryption,
connected devices and high-speed
mobility by delivering a solution that
meets the need for automated, realtime
breach detection and prevention.
The Gen 7 TZ series are highly
scalable, with high port density of
up to 10 ports. It features both inbuilt
and an expandable storage of
up to 256GB, that enables various
features including logging, reporting,
caching, firmware backup and more.
An optional second power supply
provides added redundancy in case of
failure on select models.
Deployment of Gen 7 TZs are further
simplified by Zero-Touch Deployment,
with the ability to simultaneously
roll out these devices across multiple
locations with minimal IT support.
Built on next-gen hardware, it
integrates firewalling, switching and
wireless capabilities, plus provides
single-pane-of-glass management for
SonicWall Switches and SonicWave
Access Points. It allows tight
integration with Capture Client for
seamless endpoint security.
SonicOS and Security Services
The SonicOS architecture is at the
core of TZ NGFWs. Gen 7 TZs
are powered by the feature rich SonicOS 7.0 operating system with
new modern looking UX/UI, advanced
security, networking and management
capabilities. Gen 7 TZ features
integrated SD-WAN, TLS 1.3 support,
real-time visualization, high-speed
virtual private networking (VPN) and
other robust security features.
Unknown threats are sent to
SonicWall's cloud-based Capture
Advanced Threat Protection (ATP)
multiengine sandbox for analysis.
Enhancing Capture ATP is our patentpending Real-Time Deep Memory
Inspection (RTDMI™) technology.
As one of Capture ATP's engine,
RTDMI detects and blocks malware
and zero-day threats by inspecting
directly in memory.
By leveraging Capture ATP with
RTDMI technology, in addition to
security services such as ReassemblyFree Deep Packet Inspection (RFDPI),
Anti-virus and Anti-spyware
Protection, intrusion prevention
system, Application Intelligence and
Control, Content Filtering Services,
DPI-SSL, TZ series firewalls stop
malware, ransomware and other
advanced threats at the gateway.
Highlights
10/5/2.5/1 GbE interfaces in a
desktop form factor
SD-Branch ready
Secure SD-WAN capability
SonicExpress App onboarding
Zero-Touch Deployment
Single-pane-of-glass-management
through cloud or firewall
SonicWall Switch, SonicWave Access
Point and Capture Client integration
Built-in and expandable storage
Redundant power
High port density
Cellular failover
SonicOS 7.0
TLS 1.3 support
Groundbreaking performance
High connection count
Fast DPI performance
Low TCO
Deployments
Small to Medium size Business
Save space and money with an integrated gateway
security solution with firewalling, switching and
wireless capabilities
Reduce complexity and get the business running
without relying on IT personnel with easy onboarding
using SonicExpress App and Zero-Touch Deployment,
and easy management through a single pane of glass
Attain business continuity by providing failover to
cellular connectivity
Protect network from attacks with a comprehensive
security solution that incorporates VPN, IPS, CFS, AV
and much more
Leverage high port density to power on multiple PoE devices such as IP phones and IP cameras with TZ570P
Boost employee productivity by blocking
unauthorised access with traffic segmentation
and access policies
Distributed Enterprise with SD-Branches
Enhance customer experience and adapt to the
changing business needs by enabling next-gen
branch connectivity with SD-Branch
Drive business growth by investing in next-gen
appliances with multi-gigabit and advanced security
features, to future-proof against the changing
network and security landscape
Secure networks from the most advanced attacks
with advanced security features and automatically
block threats on decrypted traffic using protocols
such as TLS 1.3
Leverage end-to-end network security with
seamless integration of SonicWave access points,
SonicWall Switches and Capture Client
Ensure seamless communication as stores talk
to HQ via easy VPN connectivity which allows
IT administrators to create a hub and spoke
configuration for the safe transport of data
between all locations
Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ’s hardware and software enhancements, plus features such SD-WAN technology
Scale quickly and effortlessly with SonicExpress
App and Zero-Touch Deployment
Ensure business continuity by providing failover
to cellular connectivity
Maintain compliance with security features, and
leverage built-in and expandable storage to store
logs for audit purposes
Specifications:
Firewall General
TZ270 Series
TZ370 Series
TZ470 Series
TZ570 Series
TZ670 Series
Operating system
SonicOS 7.0
Interfaces
8x1GbE, 2 USB 3.0, 1 Console
8x1GbE, 2 USB 3.0, 1 Console
8x1GbE, 2x2.5GbE, 2 USB 3.0, 1 Console
8x1GbE, 2x5GbE, 2 USB 3.0, 1 Console
8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console
Wireless support
2x2 802.11ac Wave 2
(TZ270W)
2x2 802.11ac Wave 2
(TZ370W)
2x2 802.11ac Wave 2
(TZ470W)
2x2 802.11ac Wave 2
(TZ570W)
N/A
Power over Ethernet (PoE) support
N/A
N/A
N/A
5 PoE or
3PoE+
(TZ570P)
N/A
Storage Expansion slot
Optional up to 256GB
Optional up to
256GB, 32GB
included
Management
Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs
Redundant power supply
N/A
N/A
N/A
Yes
Yes
Single Sign-On (SSO) Users
1,000
1,000
2,500
2,500
2,500
VLAN interfaces
64
128
128
256
256
Access points supported (maximum)
16
16
32
32
32
Firewall/VPN Performance
TZ270 Series
TZ370 Series
TZ470 Series
TZ570 Series
TZ670 Series
Firewall inspection throughput1
2 Gbps
3 Gbps
3.5 Gbps
4 Gbps
5 Gbps
Threat Prevention throughput2
750 Mbps
1 Gbps
1.5 Gbps
2 Gbps
2.5 Gbps
Application inspection throughput2
1 Gbps
1.5 Gbps
2 Gbps
2.5 Gbps
3 Gbps
IPS throughput2
1 Gbps
1.5 Gbps
2 Gbps
2.5 Gbps
3 Gbps
Anti-malware inspection throughput2
750 Mbps
1 Gbps
1.5 Gbps
2 Gbps
2.5 Gbps
TLS/SSL inspection and decryption throughput (DPI SSL)2
300 Mbps
500 Mbps
600 Mbps
750 Mbps
800 Mbps
IPSec VPN throughput3
750 Mbps
1.38 Gbps
1.5 Gbps
1.8 Gbps
2.1 Gbps
Connections per second
6,000
9,000
12,000
16,000
25,000
Maximum connections (SPI)
750,000
900,000
1,000,000
1,250,000
1,500,000
Maximum connections (DPI)
150,000
200,000
550,000
400,000
500,000
Maximum connections (DPI SSL)
25,000
30,000
35,000
50,000
75,000
VPN
TZ270 Series
TZ370 Series
TZ470 Series
TZ570 Series
TZ670 Series
Site-to-site VPN tunnels
50
100
150
200
250
IPSec VPN clients (maximum)
5 (200)
5 (200)
5 (200)
10 (500)
10 (500)
SSL VPN licenses (maximum)
1 (50)
2 (100)
2 (150)
2 (200)
2 (250)
Encryption/authentication
DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange
Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN
RIP, OSPF, BGP
Certificate support
Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
VPN features
Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported
Microsoft® Windows 10
NetExtender
Microsoft Windows 10, Linux
Mobile Connect
Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10
HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
0.82 kg / 1.81
lbs (TZ270),
0.85
kg / 1.87 lbs
(TZ270W)
0.82 kg / 1.81
lbs (TZ370),
0.85
kg / 1.87 lbs
(TZ370W)
0.83 kg / 1.82
lbs (TZ470),
0.87
kg / 1.92 lbs
(TZ470W)
0.97 kg / 2.14
lbs (TZ570),
0.99
kg / 2.18 lbs
(TZ570W),
1.05 kg / 2.31 lbs
(TZ570P)
0.97 kg / 2.14 lbs
WEEE weight
1.18 kg / 2.6 lbs
(TZ270),
1.24 kg /
2.73 lbs (TZ270W)
1.18 kg / 2.6 lbs
(TZ370),
1.24 kg /
2.73 lbs (TZ370W)
1.24 kg / 2.73 lbs
(TZ470),
1.27 kg /
2.8 lbs (TZ470W)
1.42 kg / 3.13 lbs
(TZ570),
1.47 kg /
3.24 lbs (TZ570W),
1.57 kg / 3.46 lbs
(TZ570P)
1.42 kg / 3.13 lbs
Shipping weight
1.41 kg / 3.11 lbs
(TZ270),
1.47 kg /
3.25 lbs (TZ270W)
1.41 kg / 3.11 lbs
(TZ370),
1.47 kg /
3.25 lbs (TZ370W)
1.43 kg / 3.15 lbs
(TZ470),
1.51 kg /
3.33 lbs (TZ470W)
1.93 kg / 4.25 lbs
(TZ570),
1.98 kg /
4.36 lbs (TZ570W),
2.08 kg / 4.58 lbs
(TZ570P)
1.93 kg / 4.25 lbs
MTBF (in years)
51.1 (TZ270),
27.1
(TZ270W)
51.1 (TZ370),
27.1
(TZ370W)
46 (TZ470),
24.1
(TZ470W)
26.1 (TZ570),
23.3
(TZ570W),
31.7
(TZ570P)
43.9
Environment (Operating/Storage)
32°-105° F (0°-40° C) / -40° to 158° F (-40° to 70° C)
Humidity
5-95% non-condensing
Regulatory
TZ270 Series
TZ370 Series
TZ470 Series
TZ570 Series
TZ670 Series
Major regulatory compliance (wired models)
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC MSIP, ANATEL
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
FCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL
FCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL
Major regulatory compliance (wireless models)
FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL
FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/ TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL
FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL
FCC Class B, FCC P15C, FCC P15E, ICES Class B, ISED/ IC, CE (RED, RoHS), C-Tick, VCCI Class B, Japan Wireless, UL/cUL, TUV GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, NCC (TW) KCC/MSIP, SRRC, ANATEL
N/A
Major regulatory compliance (PoE models)
N/A
N/A
N/A
FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, UL/ cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL
802.11a: US and Canada 12, Europe 11, Japan 4, Singapore4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64; 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
Transmit output power
Based on the regulatory domain specified by the system administrator
802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)
*Future use.
1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4 BGP is available only on SonicWall TZ400, TZ500 and TZ470.
5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products
SonicOS 7.0 Feature Summary:
Firewall
Stateful packet inspection
Reassembly-Free Deep Packet Inspection
DDoS attack protection (UDP/ ICMP/SYN flood)
IPv4/IPv6 support
Biometric authentication for remote access
DNS proxy
Full API support
SonicWall Switch integration
SD-WAN scalability
SD-WAN Usability Wizard1
SonicCoreX and SonicOS containerization1
Connections scalability (SPI, DPI, DPI SSL)
Enhanced dashboard1
Enhanced device view
Top traffic and user summary
Insights to threats
Notification center
TLS/SSL/SSH decryption and inspection
TLS 1.3 with enhanced security1
Deep packet inspection for TLS/SSL/SSH
Inclusion/exclusion of objects, groups or hostnames
SSL control
Enhancements for DPI-SSL with CFS
Granular DPI SSL controls per zone or rule
Capture advanced threat protection2
Real-Time Deep Memory Inspection
Cloud-based multi-engine analysis
Virtualized sandboxing
Hypervisor level analysis
Full system emulation
Broad file type examination
Automated and manual submission
Real-time threat intelligence updates
Block until verdict
Capture Client
Intrusion prevention2
Signature-based scanning
Automatic signature updates
Bi-directional inspection
Granular IPS rule capability
GeoIP enforcement
Botnet filtering with dynamic list
Regular expression matching
Anti-malware2
Stream-based malware scanning
Gateway anti-virus
Gateway anti-spyware
Bi-directional inspection
No file size limitation
Cloud malware database
Application identification2
Application control
Application bandwidth management
Custom application signature creation
Data leakage prevention
Application reporting over NetFlow/IPFIX
Comprehensive application signature database
Traffic visualization and analytics
User activity
Application/bandwidth/threat usage
Cloud-based analytics
HTTP/HTTPS Web content filtering2
URL filtering
Proxy avoidance
Keyword blocking
Policy-based filtering (exclusion/inclusion)
HTTP header insertion
Bandwidth manage CFS rating categories
Unified policy model with app control
Content Filtering Client
VPN
Secure SD-WAN
Auto-provision VPN
IPSec VPN for site-to-site connectivity
SSL VPN and IPSec client remote access
Redundant VPN gateway
Mobile Connect for iOS, Mac OS X, Windows, Chrome, Android and Kindle Fire
Route-based VPN (OSPF, RIP, BGP)
Networking
PortShield
Path MTU discovery
Enhanced logging
VLAN trunking
Port mirroring (NSA 2650 and above)
Layer-2 QoS
Port security
Dynamic routing (RIP/OSPF/BGP)
SonicWall wireless controller
Policy-based routing (ToS/ metric and ECMP)
NAT
DHCP server
Bandwidth management
A/P high availability with state sync
Inbound/outbound load balancing
High availability - Active/Standby with state sync
L2 bridge, wire/virtual wire mode, tap mode, NAT mode
Asymmetric routing
Common Access Card (CAC) support
VoIP
Granular QoS control
Bandwidth management
DPI for VoIP traffic
H.323 gatekeeper and SIP proxy support
Debugging and diagnostics
Enhanced packet monitoring
SSH terminal on UI
Management, monitoring and support
Capture Security Appliance (CSa) support
Capture Threat Assessment (CTA) v2.0
New design or template
Industry and global average comparison
New UI/UX, Intuitive feature layout1
Dashboard
Device information, application, threats
Topology view
Simplified policy creation and management
Policy/Objects usage statistics1
Used vs Un-used
Active vs Inactive
Global search for static data
Storage support1
Internal and external storage management1
WWAN USB card support (5G/LTE/4G/3G)
Network Security Manager (NSM) support
Web GUI
Command line interface (CLI)
Zero-Touch registration & provisioning
CSC Simple Reporting1
SonicExpress mobile app support
SNMPv2/v3
Centralized management and reporting with SonicWall Global Management System (GMS)2
Logging
Netflow/IPFix exporting
Cloud-based configuration backup
BlueCoat security analytics platform
Application and bandwidth visualization
IPv4 and IPv6 management
CD management screen
Dell N-Series and X-Series switch management including cascaded switches
SonicWall TZ470 Wireless-AC Secure Upgrade Plus - Essential Edition 3 Years
SonicWall TZ470 Wireless-AC with 3 Years of Essential Protection Services Suite
#02-SSC-6814 List Price: $7,488.00 Our Price: Request a Quote
SonicWall TZ470 Wireless-AC Secure Upgrade Plus - Advanced Edition 2 Years
SonicWall TZ470 Wireless-AC with 2 Years of Advanced Protection Services Suite
#02-SSC-6813 List Price: $6,109.00 Our Price: Request a Quote
SonicWall TZ470 Wireless-AC Secure Upgrade Plus - Advanced Edition 3 Years
SonicWall TZ470 Wireless-AC with 3 Years of Advanced Protection Services Suite
#02-SSC-6815 List Price: $8,452.00 Our Price: Request a Quote
COST EFFECTIVE PROTECTION: Threat Protection Service Suite (TPSS) includes - Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, and 24x7 Support with firmware.
Threat Protection Service Suite for TZ470W 1 Year
#02-SSC-7197 List Price: $2,431.00 Our Price: Request a Quote
A cloud based service for advanced threat detection through sandboxing with a multi-engine approach to stop unknown and zero-day attacks at the gateway. Requires purchase of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Firewall Service
Capture Advanced Threat Protection Service for TZ470W 1 Year
Includes 24x7 telephone, email and Web-based Support, Software and firmware updates, Advance Exchange hardware replacement, access to electronic Support tools and moderated discussion groups.
