General

• Operating system: SonicOS 7.0
• Interfaces: 16x1GbE, 3x10G SFP+, 2 USB 3.0, 1 Console, 1 Management port
• Wireless support: 2x2 802.11ac Wave 2(TZ370W)
• Power over Ethernet (PoE) support: N/A
• Storage Expansion slot: Optional up to 256GB
• Management: Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs
• Redundant power supply: N/A
• Single Sign-On (SSO) Users: 1,000
• VLAN interfaces: 128
• Access points supported (maximum): 16

Performance / VPN Performance

• Firewall inspection throughput1: 3 Gbps
• Threat Prevention throughput2: 1 Gbps
• Application inspection throughput2: 1.5 Gbps
• IPS throughput2: 1.5 Gbps
• Anti-malware inspection throughput2: 1 Gbps
• TLS/SSL inspection and decryption throughput (DPI SSL)2: 500 Mbps
• IPSec VPN throughput3: 1.38 Gbps
• Connections per second: 9,000
• Maximum connections (SPI): 900,000
• Maximum connections (DPI): 200,000
• Maximum connections (DPI SSL): 30,000

VPN

• Site-to-site VPN tunnels: 100
• IPSec VPN clients (maximum): 5 (200)
• SSL VPN licenses (maximum): 2 (100)
• Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
• Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
• Route-based VPN: RIP, OSPF, BGP
• Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
• VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
• Global VPN client platforms supported: Microsoft® Windows 10
• NetExtender: Microsoft Windows 10, Linux
• Mobile Connect: Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10

Security Services

• Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
• Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
• Comprehensive Anti-Spam Service: Supported
• Application Visualization: Yes
• Application Control: Yes
• Capture Advanced Threat Protection: Yes
• DNS Security: Yes

Networking

• IP address assignment: Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
• NAT modes: 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
• Routing protocols4: BGP, OSPF, RIPv1/v2, static routes, policy-based routing
• QoS: Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
• Authentication: LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
• Local user database: 250
• VoIP: Full H.323v1-5, SIP
• Standards: TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
• Certifications: Granted: FIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
  Pending: Common Criteria NDPP (with VPN and IPS), DoDIN, CSfC
• High availability: Active/Standby with stateful synchronization

Hardware

• Form factor: Desktop
• Power supply: 36W external
• Maximum power consumption (W): 16.84 (TZ370),18.91 (TZ370W)
• Input power: 100-240 VAC, 50-60 Hz
• Total heat dissipation (BTU): 57.42 (TZ270),64.48 (TZ270W)
• Dimensions: 3.5x13.5x19 (cm) / 1.8x5.3x7.5 (in)
• Weight: 0.82 kg / 1.81 lbs (TZ370), 0.85 kg / 1.87 lbs (TZ370W)
• WEEE weight: 1.18 kg / 2.6 lbs (TZ370), 1.24 kg / 2.73 lbs (TZ370W)
• Shipping weight: 1.41 kg / 3.11 lbs (TZ370), 1.47 kg / 3.25 lbs (TZ370W)
• MTBF (in years): 51.1 (TZ370), 27.1 (TZ370W)
• Environment (Operating/Storage): 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
• Humidity: 5-95% non-condensing

Regulatory

• Major regulatory compliance (wired models): FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC MSIP, ANATEL
• Major regulatory compliance (wireless models): FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/ TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL
• Major regulatory compliance (PoE models): N/A

Integrated Wireless

• Standards: 802.11a/b/g/n/ac Wave 2, WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
• Frequency bands: 802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 5.180-5.825 GHz
• Operating channels: 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64; 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
• Transmit output power: Based on the regulatory domain specified by the system administrator
• Transmit power control: Yes
• Data rates supported: 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel
• Modulation technology spectrum: 802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)

*Future use.

1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

2 Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

4 BGP is available only on SonicWall TZ400, TZ500 and TZ470.

5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products