The SonicWall Gen 7 TZ Series; are the first desktop form factor next-generation firewalls (NGFWs) with 10 or 5 Gigabit Ethernet interfaces. The series consist of a wide range of products to suit a variety of use cases.
Designed for small; mid-sized organizations and distributed enterprises with SD-Branch locations; the 7th generation (Gen 7) TZ Series delivers industry-validated security effectiveness with best-in-class priceperformance. These NGFWs address the growing trends in web encryption; connected devices and high-speed mobility by delivering a solution that meets the need for automated; real-time breach detection and prevention.
The Gen 7 TZ series are highly scalable; with high port density of up to 10 ports. It features both in-built and an expandable storage of up to 256GB; that enables various features including logging; reporting; caching; firmware backup and more. An optional second power supply provides added redundancy in case of failure on select models.
Deployment of Gen 7 TZs are further simplified by Zero-Touch Deployment; enabling simultaneous roll-out of these devices across multiple locations with minimal IT support. Built on next-generation hardware; it integrates firewalling; switching and wireless capabilities; plus provides single-pane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.
SonicOS 7 and Security Services
The SonicOS architecture is at the core of TZ NGFWs. Gen 7 TZs are powered by the feature rich SonicOS 7 operating system with new modern looking UX/UI; advanced security; networking and management capabilities. Gen 7 TZ features integrated SD-WAN; TLS 1.3 support; real-time visualization; high-speed virtual private networking (VPN) and other robust security features.
Unknown threats are sent to SonicWall's cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. SonicWall Real-Time Deep Memory Inspection (RTDMI) patented technology enhances Capture ATP by inspecting directly in memory to detect and block malware and zero-day threats.
By leveraging Capture ATP with RTDMI technology; in addition to security services such as Reassembly-Free Deep Packet Inspection (RFDPI); Anti-virus and Anti-spyware Protection; intrusion prevention system; Application Intelligence and Control; Content Filtering Services; DPI-SSL; TZ series firewalls stop malware; ransomware and other advanced threats at the gateway.
Users can leverage the new Cloud Secure Edge Connector integration to provide a centralized and easy-to-manage option to provide secure access to their private applications. This approach ensures that user and device trust are repeatedly verified before granting access to specific applications; regardless of location and endpoint type.
Simplified licensing includes Hardware Only; Advanced (APSS) and Managed Protection Security Suite (MPSS) to meet your unique needs. MPSS augments resources with managed services for firewalls.
Cyber Warranty
An embedded cyber warranty is offered as part of Security Suites to mitigate costs of security breach; meet compliance requirements and promote peace of mind.
Deployments
Deployments - Small to Medium size Business: Save space and money with an integrated gateway security solution with firewalling; switching and wireless capabilities.
Deployments - Small to Medium size Business: Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment; and easy management through a single pane of glass.
Deployments - Small to Medium size Business: Attain business continuity by providing failover to cellular connectivity.
Deployments - Small to Medium size Business: Protect network from attacks with a comprehensive security solution that incorporates VPN; IPS; CFS; AV and much more.
Deployments - Small to Medium size Business: Leverage high port density to power on multiple PoE devices such as IP phones and IP cameras with TZ570P.
Deployments - Small to Medium size Business: Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies.
Deployments - Distributed Enterprise with SD-Branches: Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch.
Deployments - Distributed Enterprise with SD-Branches: Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features; to future-proof against the changing network and security landscape.
Deployments - Distributed Enterprise with SD-Branches: Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3.
Deployments - Distributed Enterprise with SD-Branches: Leverage end-to-end network security with seamless integration of SonicWave access points; SonicWall Switches and Capture Client.
Deployments - Distributed Enterprise with SD-Branches: Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations.
Deployments - Distributed Enterprise with SD-Branches: Improve business efficiency; performance and reduce costs by leveraging Gen 7 TZ's hardware and software enhancements; plus features such SD-WAN technology.
Deployments - Distributed Enterprise with SD-Branches: Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment.
Deployments - Distributed Enterprise with SD-Branches: Ensure business continuity by providing failover to cellular connectivity.
Deployments - Distributed Enterprise with SD-Branches: Maintain compliance with security features; and leverage built-in and expandable storage to store logs for audit purposes.
Product Features:
- 10/5/2.5/1 GbE interfaces in a desktop form factor
- SD-Branch ready
- Secure SD-WAN capability
- SonicExpress App onboarding
- Zero-Touch Deployment
- Simplified Centralized SaaS and On-Premise management via Network Security Manager
- SonicWall Unified Management support
- SonicWall Switch; SonicWave Access Point and Capture Client integration
- Built-in and expandable storage
- Redundant power
- DNS security
- Reputation-based Content Filtering Service (CFS 5.0)
- Wi-Fi 6 firewall management
- Network access control integration with Aruba ClearPass
- High port density
- Cellular failover
- TLS 1.3 support
- Best-in-class price-performance
- High connection count
- Fast DPI performance
- Low TCO
- Cloud Secure Edge Connector support
- Embedded cyberwarranty up to $200K by Cysurance included in Security Suites
Specifications:
Firewall General
- Operating system: SonicOS 7
- Interfaces: 8x1GbE; 2 USB 3.0; 1 Console
- Power over Ethernet (PoE) support: N/A
- Storage expansion slot (Bottom): Optional up to 256GB
- Management: Network Security Manager; CLI; SSH; Web UI; GMS; REST APIs
- Redundant power supply: N/A
- SAML Single Sign-On Users : 1000
- VLAN interfaces: 64
- Access points supported (maximum): 16
Firewall/VPN Performance
- Firewall inspection throughput: 2 Gbps
- Threat prevention throughput: 750 Mbps
- Application inspection throughput: 1 Gbps
- IPS throughput: 1 Gbps
- Anti-malware inspection throughput: 750 Mbps
- TLS/SSL inspection and decryption throughput (DPI SSL): 300 Mbps
- IPSec VPN throughput: 750 Mbps
- Connections per second: 6000
- Maximum connections (SPI): 750000
- Maximum connections (DPI): 150000
- Maximum connections (DPI SSL): 25000
VPN and ZTNA
- Site-to-site VPN tunnels: 50
- IPSec VPN clients (maximum): 5 (200)
- SSL VPN licenses (maximum): 1 (50)
- Encryption/authentication: DES; 3DES; AES (128; 192; 256-bit)/MD5; SHA-1; Suite B Cryptography
- Key exchange: Diffie Hellman Groups 1; 2; 5; 14v
- Route-based VPN: RIP; OSPF; BGP
- Certificate support: Verisign; Thawte; Cybertrust; RSA Keon; Entrust and Microsoft CA for SonicWall-to- SonicWall VPN; SCEP
- VPN features: Dead Peer Detection; DHCP Over VPN; IPSec NAT Traversal; Redundant VPN Gateway; Route-based VPN
- Global VPN client platforms supported: Microsoft Windows 10
- NetExtender: Microsoft Windows 10; Linux
- Mobile Connect: Apple iOS; Mac OS X; Google Android; Kindle Fire; Chrome OS; Windows 10
- SonicWall Private Access Powered by Cloud Secure Edge: Included in 3&Free Loyalty Program
Security Services
- Deep Packet Inspection services: Gateway Anti-Virus; Anti-Spyware; Intrusion Prevention; DPI SSL
- Content Filtering Service (CFS): HTTP URL; HTTPS IP; keyword and content scanning; Comprehensive filtering based on file types such as ActiveX; Java; Cookies for privacy; allow/forbid lists
- Comprehensive Anti-Spam Service: Yes
- Application Visualization: Yes
- Application Control: Yes
- Capture Advanced Threat Protection: Yes
Networking
- IP address assignment: Static (DHCP; PPPoE; L2TP and PPTP client); Internal DHCP server; DHCP relay
- NAT modes: 1:1; 1:many; many:1; many:many; flexible NAT (overlapping IPs); PAT; transparent mode
- Routing protocols : BGP; OSPF; RIPv1/v2; static routes; policy-based routing
- QoS: Bandwidth priority; max bandwidth; guaranteed bandwidth; DSCP marking; 802.1e (WMM)
- Authentication: LDAP (multiple domains); XAUTH/RADIUS; SSO; Novell; internal user database; Terminal Services; Citrix
- Local user database: 150
- VoIP: Full H323-v1-5; SIP
- Standards: TCP/IP; UDP; ICMP; HTTP; HTTPS; IPSec; ISAKMP/IKE; SNMP; DHCP; PPPoE; L2TP; PPTP; RADIUS; IEEE 802.3
- Certifications: Granted: FIPS 140-2 Level 2 (with Suite B); IPv6/USGv6; ICSA Network Firewall; ICSA Firewall Enterprise; ISCA Network Antivirus / AntiMalware Pending: Common Criteria NDPP (with VPN and IPS); DoDIN; CSfC
- High availiability: Active/Standby with stateful synchronization
Hardware
- Form factor: Desktop
- Power supply: 36W external
- Maximum power consumption (W): 16.84
- Input power: 100 - 240 VAC; 50-60 Hz; 3A
- Total heat dissipation (BTU): 57.42
- MTBF @25 degreeC in years: 51.1
- Environment (Operating/Storage): 32 degree-105 degree F (0 degree-40 degree C)/-40 degree to 158 degree F (-40 degree to 70 degree C)
- Humidity: 5-95% non-condensing
Regulatory
- Major regulatory compliance (wireless models): FCC Class B; ICES Class B; CE (EMC; LVD; RoHS); C-Tick; VCCI Class B; UL; cUL; CB; Mexico CoC by UL; WEEE; REACH; BSMI; KCC/ MSIP; ANATEL
Dimensions
- Dimensions (H x D x W): 3.5 x 13.5 x 19 cm; 1.8 x 5.3 x 7.5 in.
- Weight: 0.82 kg / 1.81 lbs
- WEEE weight: 1.18 kg / 2.6 lbs
