We are a SonicWall Platinum Partner
Free Delivery

SonicWall.shop is operated by Sonictek Limited - an authorized SonicWall Platinum Partner with 25+ years experience

(3 & Free Offer) SonicWall TZ280P Secure Upgrade Plus - Advanced Edition (3 Years) + CSE (1 Year)

Firewall inspection throughput:2.5 Gbps
Threat prevention throughput:1 Gbps
Interfaces:8x1GbE, 2x 1G SFP
Max. SSL VPN Clients:50
£1,290.00
(£1,548.00 inc tax)
03-SSC-8018
1 item(s)
+ −

*** This is an upgrade model, used when upgrading from an Eligible SonicWall or Competitor Product ***

SonicWall’s 3 & Free promotion is here to stay and now includes Cloud Secure Edge (CSE) licenses along with free Gen 8 next-generation firewalls. When you purchase any 3-year Advanced Protection Services Suite (APSS), you get more than just cutting-edge firewalls for free - you also gain access to comprehensive protection from evolving modern threats, both inside and outside your network with CSE.

As today’s businesses rely more heavily on cloud environments and mobile devices, traditional security models based on perimeter defenses are no longer sufficient. CSE offers a transformative approach, replacing outdated VPN and network security methods. This cloud-delivered solution offers seamless, secure access to resources from any device, anywhere, without sacrificing performance or user experience. With CSE, SonicWall empowers your organization to embrace mobility and cloud adoption.

Now with each and every firewall from SonicWall, CSE seamlessly enables your users to securely access any resource from any device regardless of their physical location. Whether your users are working remotely, on the go, or within your organization’s premises, CSE ensures reliable and secure access, all while protecting against web-based and device threats.

Take advantage of SonicWall’s industry-leading Secure Service Edge (SSE) solution and secure your users no matter where they are. With the 3 & Free promotion now including CSE, it’s easier than ever to protect your network and workforce in today’s digital landscape.

Advanced Protection Security Suite (APSS) includes:

  • Gateway Anti-Malware, Intrusion Prevention, Application Control (inc. GW AV, Geo-IP Filter, Botnet Filter)
  • Content Filtering Service
  • 24x7 Support
  • Capture ATP (Multi-Engine) Sandboxing
  • Anti-Spam
  • DNS Security including Advanced DNS Filtering
  • Cloud Management
  • Cloud based Advanced Reporting & Analytics – 7 Days Retention

Important Note: You can trade in a legacy SonicWall or competitor firewall to get your free, eligible firewall upgrade.

ELIGIBLE UPGRADESELIGIBLE REPLACEMENTS
TZ 100 Series, TZ 105 Series, TZ 200 Series, TZ 205 Series, TZ 210 Series,TZ 215 Series, TZ 150,TZ 150W, TZ 170, TZ 170W, TZ 170 SP, TZ 170 SPW,TZ 180, TZ 180W, TZ 190, TZ 190W, PRO 100,SOHO2, SOHO3, SOHO TZW,SOHO Telecommuter, SonicWall DMZ, XPRS, XPRS2, SonicWall Plus,TELE,TELE2, TELE3, TELE3 SP, SOHO, SOHOW, SOHO 250, SOHO 250WTZ80
TZ 150, TZ 100, TZ 105, SOHO, SOHO 250, TZ 170, TZ 200, TZ 205, TZ 300,TZ 350, TZ 180, TZ 210, TZ 215, TZ 400, TZ 190, NSA 220, NSA 240, NSA 250,TZ 500, TZ 600, PRO 100 Series, SOHO Series, Telecommuter, DMZ,XPRS Series, Plus, TELE SeriesTZ280 Series, TZ380 Series, TZ480 Series, TZ580 Series, TZ680 Series
TZ 190, NSA 220, NSA 240, NSA 250, TZ 400, TZ 470,TZ 500, TZ 570, TZ 600, TZ 670TZ580 Series, TZ680 Series, NSa 2800, NSa 3800
NSa 2400, NSa 2600, NSa 2650, PRO 200, PRO 230, PRO 1260, PRO 2040TZ580 Series, TZ680 Series, NSa 2800, NSa 3800
NSa 3500, NSa 3600, NSa 3650, PRO 3060,PRO 4000, PRO 4100,PRO 4060,PRO-VX, PRO 300, PRO 330 GX250NSa 2800, NSa 3800, NSa 4800
NSa 4500, NSa 4600, NSa 4650NSa 2800, NSa 4800, NSa 5800
NSa 5000, NSa E5500, NSa 5600, NSa 5650, PRO 5060c, PRO 5060f, GX6500NSa 4800, NSa 5800
NSa E6500, NSa 6600, NSa 6650, NSa E7500, NSa E7510, NSa E8500, NSa E8510NSa 5800
COMPETITOR PRODUCT TRADE-INTZ80, TZ280 Series, TZ380 Series, TZ480 Series, TZ580 Series, TZ680 Series, NSa 2800, NSa 3800, NSa 4800, NSa 5800

Datasheet

Firewall (Gen 8) Bundle Type

Upgrade Bundle Version:
Yes

Firewall (Gen 8) Specifications - Firewall General

Operating system:
SonicOS 8
Interfaces:
8x1GbE, 2x 1G SFP, 1 USB (type-C), 1 console (Micro-USB)
Power over Ethernet (PoE) support:
4 PoE+ (TZ 280P)
Centralized management:
Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs
Logical VLAN and tunnel interfaces (maximum):
64
SAML Single Sign-On (SSO) users:
1,000
Access points supported (maximum):
16

Firewall (Gen 8) Specifications - Firewall/VPN Performance

Firewall inspection throughput:
2.5 Gbps
Threat prevention throughput:
1 Gbps
Application inspection throughput:
1.5 Gbps
IPS throughput:
1.5 Gbps
Anti-malware inspection throughput:
1 Gbps
TLS/SSL inspection and decryption throughput:
430 Mbps
IPSec VPN throughput:
1.2 Gbps
Connections per second:
12,000
Maximum connections (SPI):
1,000,000
Maximum connections (DPI):
200,000
Maximum connections (TLS):
35,000

Firewall (Gen 8) Specifications - VPN and ZTNA

Site-to-Site VPN tunnels:
200
IPSec VPN client licences (maximum):
5 (200)
SSL-VPN client licences (maximum):
2 (100)
Encryption/authentication:
AES (128, 192, 256-bit)/MD5, SHA-256, SHA-384, Suite B Cryptography
Key exchange:
Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN:
RIP, OSPF, BGP
Certificate support:
Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEP
VPN features:
Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported:
Microsoft Windows 7, Windows 8, Windows 8.1 and Windows 10
NetExtender:
Microsoft Windows 10, Windows 10/11 and Linux
Mobile Connect:
Apple iOS, Mac OS X, Google Android, Chrome OS, Windows
SonicWall Private Access powered by Cloud Secure Edge:
Included in 3&Free Loyalty Program

Firewall (Gen 8) Specifications - Security Services

Deep packet inspection services:
Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering Service (CFS):
Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service:
Yes
Application Visualization:
Yes
Capture Advanced Threat Protection:
Yes
Advanced DNS Filtering:
Yes

Firewall (Gen 8) Specifications - Networking

IP address assignment:
Static (DHCP, PPPoE, L2TP and PPTP client), internal DHCP server, DHCP relay
NAT modes:
1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols:
BGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoS:
Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication:
LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO ¹, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, Common Access Card (CAC)
Local user database:
150
VoIP:
Full H323 v1.5, SIP
Standards:
TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications:
IPv6
High availability:
Active/Standby with stateful synchronization

Firewall (Gen 8) Specifications - Hardware

Form factor:
Desktop
Power supply (W):
180
Maximum power consumption (W):
130
Input power:
100-240 VAC, 50-60 Hz
Total heat dissipation (BTU):
443
Dimensions L x W x H (cm):
22.5 x 14.9 x 3.5
Shipping dimensions L x W x H (cm):
46.3 x 36.8 x 44.2
Weight (kg):
0.85
WEEE weight (kg):
1.24
Shipping weight (kg):
1.47
MTBF @25°C (years):
26.65
Environment (operating/storage):
0°C to +40°C / -40°C to +70°C
Humidity:
5-95% non-condensing

Firewall (Gen 8) Specifications - Regulatory

Regulatory model numbers:
APL71-11F
Major regulatory compliance:
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB
Major regulatory compliance (wireless models):
FCC Class B, FCC Grant, ICES Class B, ISED Cert, CE (RED, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal & Radio, VCCI Class B, BSMI, NCC SRRC, MTCTE/TEC, CB
Major regulatory compliance (PoE models):
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB

Warranty & Support

Support Cover:
24x7 Support
Warranty/Support:
3-Yr hardware/3-Yr support, firmware updates