We are a SonicWall Platinum Partner
Free Delivery

SonicWall.shop (formerly SonicWall-Sales.com) is operated by Sonictek Limited - an authorized SonicWall Platinum Partner with 20+ years experience

TZ680 High Availability (HA) Unit

Firewall inspection throughput:5 Gbps
Threat prevention throughput:2.5 Gbps
Interfaces:8x1GbE, 2x 10/5/2.5/1G SFP+
Max. SSL VPN Clients:250
£1,134.00
(£1,360.80 inc VAT)
03-SSC-7014
49 item(s)
+ −

TZ670 Network Security Firewall - this is a HA unit and cannot be used without an existing TZ670 firewall.

The SonicWall TZ670 is the first desktop-form-factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces.

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class priceperformance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of upto 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optionalsecond power supply provides added redundancy in case of failure.

The SonicOS architecture is at the core of TZ NGFWs. TZ670 is powered by the feature rich SonicOS 7.0 operating system with new modern looking UX/UI, advanced security, networking and management capabilities. TZ670 features integrated SD-WAN, TLS 1.3 support, realtime visualization, high-speed virtual private networking (VPN) and other robust security features.

Highlights:

  • 10 GbE interfaces in a desktop form factor
  • SD-Branch ready
  • Secure SD-WAN capability
  • SonicExpress App onboarding
  • Zero-Touch Deployment
  • Single-pane-of-glass-management through cloud or firewall
  • SonicWall Switch, SonicWave Access Point and Capture Client integration
  • Built-in and expandable storage
  • Redundant power
  • High port density
  • Cellular failover
  • SonicOS 7.0
  • TLS 1.3 support
  • Groundbreaking performance
  • High connection count
  • Fast DPI performance
  • Low TCO

Firewall (Gen 8) Specifications - Firewall General

Operating system:
SonicOS 8
Interfaces:
8x1GbE, 2x 10/5/2.5/1G SFP+, 1 USB (type-C), 1 console (Micro-USB)
Wireless support:
N/A
Power over Ethernet (PoE) support:
N/A
Storage (expansion):
Optional: up to 512 GB
Centralized management:
Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs
Logical VLAN and tunnel interfaces (maximum):
256
SAML Single Sign-On (SSO) users:
2,500
Access points supported (maximum):
32

Firewall (Gen 8) Specifications - Firewall/VPN Performance

Firewall inspection throughput:
5 Gbps
NGFW throughput:
N/A
Threat prevention throughput:
2.5 Gbps
Application inspection throughput:
3 Gbps
IPS throughput:
3 Gbps
Anti-malware inspection throughput:
2.5 Gbps
TLS/SSL inspection and decryption throughput:
800 Mbps
IPSec VPN throughput:
2.5 Gbps
Connections per second:
26,000
Maximum connections (SPI):
1,600,000
Maximum connections (DPI):
600,000
Maximum connections (TLS):
75,000

Firewall (Gen 8) Specifications - VPN and ZTNA

Site-to-Site VPN tunnels:
250
IPSec VPN client licences (maximum):
10 (500)
SSL-VPN client licences (maximum):
2 (250)
Encryption/authentication:
AES (128, 192, 256-bit)/MD5, SHA-256, SHA-384, Suite B Cryptography
Key exchange:
Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN:
RIP, OSPF, BGP
Certificate support:
Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEP
VPN features:
Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported:
Microsoft Windows 7, Windows 8, Windows 8.1 and Windows 10
NetExtender:
Microsoft Windows 10, Windows 10/11 and Linux
Mobile Connect:
Apple iOS, Mac OS X, Google Android, Chrome OS, Windows
SonicWall Private Access powered by Cloud Secure Edge:
Included in 3&Free Loyalty Program

Firewall (Gen 8) Specifications - Security Services

Deep packet inspection services:
Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering Service (CFS):
Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service:
Yes
Application Visualization:
Yes
Capture Advanced Threat Protection:
Yes
Advanced DNS Filtering:
Yes

Firewall (Gen 8) Specifications - Networking

IP address assignment:
Static (DHCP, PPPoE, L2TP and PPTP client), internal DHCP server, DHCP relay
NAT modes:
1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols:
BGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoS:
Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication:
LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO ¹, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, Common Access Card (CAC)
Local user database:
250
VoIP:
Full H323 v1.5, SIP
Standards:
TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications:
IPv6
High availability:
Active/Standby with stateful synchronization

Firewall (Gen 8) Specifications - Hardware

Form factor:
Desktop
Power supply (W):
60
Maximum power consumption (W):
16.99
Input power:
100-240 VAC, 50-60 Hz
Redundant power supply:
1 (Optional)
Total heat dissipation (BTU):
57.93
Dimensions L x W x H (cm):
22.5 x 14.9 x 3.5
Shipping dimensions L x W x H (cm):
46.3 x 36.8 x 44.2
Weight (kg):
0.97
WEEE weight (kg):
1.42
Shipping weight (kg):
1.93
MTBF @25°C (years):
29.9
Environment (operating/storage):
0°C to +40°C / -40°C to +70°C
Humidity:
5-95% non-condensing

Firewall (Gen 8) Specifications - Regulatory

Regulatory model numbers:
APL72-120
Major regulatory compliance:
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB
Major regulatory compliance (wireless models):
N/A
Major regulatory compliance (PoE models):
N/A

Warranty & Support

Support Cover:
Taken from primary firewall
Warranty/Support:
1-Yr hardware