TZ580 (hardware only)

Overview
The TZ580 is aimed at small to mid-sized organisations and distributed enterprises with SD-Branch locations, with an emphasis on security effectiveness and price-performance. It runs SonicOS 8, with SD-WAN, TLS 1.3 support, real-time visualisation and high-speed VPN built in.

Unknown threats go to the Capture ATP cloud sandbox, where RTDMI inspects them in memory to catch malware and zero-days. Alongside RFDPI, anti-virus and anti-spyware, IPS, application control, content filtering and DPI-SSL, this stops threats at the gateway. Security suites include an embedded Cysurance warranty of up to $200,000. For APSS, that applies only to firewalls sold and registered after 1 November 2024.

Highlights (TZ580-relevant)

• 10/5/2.5/1G SFP+ interfaces in a desktop form factor
• SD-Branch ready with Secure SD-WAN
• SonicExpress app onboarding and Zero-Touch Deployment
• SonicWall Unified Management and NSM support
• Integration with SonicWall Switch, SonicWave and Capture Client
• Built-in storage, expandable up to 512 GB, for logging, reporting, caching and firmware backup
• Optional redundant power supply
• DNS security and reputation-based content filtering (CFS 5.0)
• Wi-Fi 6 AP management and Aruba ClearPass NAC integration
• Cellular failover through a USB 5G/LTE modem
• TLS 1.3 support
• Cloud Secure Edge connector

Specifications

General

Performance

Firewall inspection 4.5 Gbps
Threat prevention 2.2 Gbps
Application inspection 2.5 Gbps
IPS 2.5 Gbps
Anti-malware 2.3 Gbps
TLS/SSL inspection and decryption 750 Mbps
IPSec VPN 2.2 Gbps
Connections per second 20,000
Max connections, SPI 1,400,000
Max connections, DPI 500,000
Max connections, TLS 60,000

VPN and ZTNA

Site-to-site tunnels 250
IPSec VPN clients 10 included, 500 maximum
SSL-VPN licences 2 included, 200 maximum
Encryption AES 128/192/256, MD5, SHA-256, SHA-384, Suite B
Key exchange Diffie-Hellman groups 1, 2, 5, 14
Route-based VPN RIP, OSPF, BGP
VPN features Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, redundant VPN gateway
Clients Global VPN Client (Windows), NetExtender (Windows, Linux), Mobile Connect (iOS, macOS, Android, ChromeOS, Windows)
Secure Private Access (CSE) Included in the 3&Free loyalty programme

Security services

Gateway anti-virus, anti-spyware, intrusion prevention and TLS decryption
Content filtering, comprehensive anti-spam, application visualisation and control
Capture ATP and advanced DNS filtering

Networking

IP assignment Static, DHCP, PPPoE, L2TP and PPTP client; internal DHCP server; DHCP relay
NAT 1:1, 1:many, many:1, many:many, flexible NAT, PAT, transparent mode
Routing BGP, OSPF, RIPv1/v2, static, policy-based
QoS Bandwidth priority, max and guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, NTLM, 2FA, Terminal Services, Citrix, CAC
VoIP H.323 v1.5, SIP
High availability Active/Standby with stateful sync
Certifications IPv6

Hardware

Form factor Desktop
Power supply 60 W, with an optional second PSU for redundancy
Max power consumption 15.6 W
Input power 100–240 VAC, 50–60 Hz
Heat dissipation 56.74 BTU
Dimensions 22.5 x 14.9 x 3.5 cm (shipping box 46.3 x 36.8 x 44.2 cm)
Weight 0.97 kg (WEEE weight 1.42 kg, shipping weight 1.93 kg)
MTBF at 25°C 30.7 years
Operating temperature 0°C to +40°C
Storage temperature -40°C to +70°C
Humidity 5–95% non-condensing
Regulatory model APL72-120
Compliance FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN, ANATEL, WEEE, REACH, SCIP, RCM, MIC, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB