General

• Operating system: SonicOS 7.0
• Interfaces: 16x1GbE, 3x10G SFP+, 2 USB 3.0, 1 Console, 1 Management port
• Storage: 64GB M.2
• Expansion: Storage Expansion Slot (Up to 256GB)
• VLAN interfaces: 256
• Access points supported (maximum): 32

Performance / VPN Performance

• Firewall inspection throughput1: 5.2 Gbps
• Threat Prevention throughput2: 3.0 Gbps
• Application inspection throughput2: 3.6 Gbps
• IPS throughput2: 3.4 Gbps
• Anti-malware inspection throughput2: 2.9 Gbps
• TLS/SSL inspection and decryption throughput (DPI SSL)2: 800 Mbps
• IPSec VPN throughput3: 2.1 Gbps
• Connections per second: 21,500
• Maximum connections (DPI): 500,000

VPN

• Site-to-site VPN tunnels: 2,000
• Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
• Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
• Route-based VPN: RIP, OSPF, BGP
• VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
• Global VPN client platforms supported: Microsoft® Windows 10
• NetExtender: Microsoft Windows 10, Linux
• Mobile Connect: Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10

Security Services

• Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
• Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
• Comprehensive Anti-Spam Service: Supported
• Application Visualization: Yes
• Application Control: Yes
• Capture Advanced Threat Protection: Yes
• DNS Security: Yes

Networking

• IP address assignment: Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
• NAT modes: 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
• Routing protocols4: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
• QoS: Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
• Authentication: LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
• VoIP: Full H.323v1-5, SIP
• Standards: TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
• Certifications: FIPS 140-2 (with Suite B) Level 2, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS)

Hardware

• Form factor: 1U Rack Mountable
• Power supply: 60W
• Maximum power consumption (W): 21.5
• Input power: 100-240 VAC, 50-60 Hz
• Total heat dissipation (BTU): 73.32 BTU
• Dimensions: 43 x 32.5 x 4.5 (cm) 16.9 x 12.8 x 1.8 in
• Weight: 4.0 kg / 8.8 lbs
• WEEE weight: 4.2 kg / 9.3 lbs
• Shipping weight: 6.4 kg / 14.1 lbs
• Environment (Operating/Storage): 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
• Humidity: 5-95% non-condensing

Regulatory

• Major regulatory compliance (wired models): FCC Class B, FCC , ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL

*Future use.

1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

2 Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

4 BGP is available only on SonicWall TZ400, TZ500 and TZ470.

5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products