Page 1
SonicWALL TZ series
Exceptional security and stellar performance at a disruptively low TCO
The Dell SonicWALL TZ series of next
generation firewalls (NGFW) is ideally
suited for any organization that requires
enterprise-grade network protection.
SonicWALL TZ series firewalls provide
broad protection with advanced
security services consisting of onbox and cloud-based anti-malware,
anti-spyware, application control,
intrusion prevention system (IPS), and
URL filtering. To counter the trend of
encrypted attacks, the SonicWALL TZ
series has the processing power to
inspect encrypted SSL connections
against the latest threats. Combined
with Dell's X-Series switches, selected
TZ series firewalls can directly manage
the security of these additional ports.
Backed by the Dell SonicWALL Global
Response Intelligent Defense (GRID)
network, the SonicWALL TZ series
delivers continuous updates to
maintain a strong network defense
against cybercriminals. The SonicWALL
TZ series is able to scan every byte of
every packet on all ports and protocols
with almost zero latency and no file
size limitations.
The SonicWALL TZ series features
Gigabit Ethernet ports, optional
integrated 802.11ac wireless*, IPSec
and SSL VPN, failover through
integrated 3G/4G support, load
balancing and network segmentation.
The SonicWALL TZ series UTM firewalls
also provide fast, secure mobile access
over Apple iOS, Google Android,
Amazon Kindle, Windows, MacOS and
Linux platforms.
The Dell SonicWALL Global
Management System (GMS) enables
centralized deployment and
management of SonicWALL TZ series
firewalls from a single system.
Managed security for
distributed environments
Schools, retail shops, remote sites,
branch oces and distributed
enterprises need a solution that
integrates with their corporate
firewall. SonicWALL TZ series firewalls
share the same code base—and
same protection—as our flagship
SuperMassive next-generation
firewalls. This simplifies remote site
management, as every administrator
sees the same user interface (UI).
GMS enables network administrators
to configure, monitor and manage
remote SonicWALL firewalls through a
single pane of glass. By adding highspeed, secure wireless, the SonicWALL
TZ series extends the protection
perimeter to include customers and
guests frequenting the retail site or
remote oce.
Benefits:
• Enterprise grade
network protection
• Deep packet inspection of all
trac without restrictions on file
size or protocol
• Secure 802.11ac wireless
connectivity using integrated
wireless controller or via
external Dell SonicPoint wireless
access points
• SSL VPN mobile access for Apple
iOS, Google Android, Amazon
Kindle, Windows, Mac OS and
Linux devices
• Over 100 additional ports can
be securely managed by the
TZ console when deployed in
combination with Dell X-Series
switches
* 802.11ac currently not available on SOHO models; SOHO models support 802.11a/b/g/n
Page 2
SonicWALL TZ600 series
For emerging enterprises, retail and branch oces looking for security performance at a value price, the Dell SonicWALL TZ600
next-generation firewall secures networks with enterprise-class features and uncompromising performance.
Specification TZ600 series
Firewall throughput 1.5 Gbps
Full DPI throughput 500 Mbps
Anti-malware throughput 500 Mbps
IPS throughput 1.1 Gbps
IMIX throughput 900 Mbps
Max DPI connections 125,000
New connections/sec 12,000
Power LED Tes t LED
USB port
(3G/4G WAN
Failover)
Link and
activity
Indicator LEDs
Expansion
module
Slot (future)
Console
port
8x1GbE
switch
X0 LAN Port
X1 WAN Port
(configurable)
Secure
power
SonicWALL TZ500 series
For growing branch oces and SMBs, the Dell SonicWALL TZ500 series delivers highly eective, no-compromise protection
with network productivity and optional integrated 802.11ac dual-band wireless.
Specification TZ500 series
Firewall throughput 1.4 Gbps
Full DPI throughput 400 Mbps
Anti-malware throughput 400 Mbps
IPS throughput 1.0 Gbps
IMIX throughput 700 Mbps
Max DPI connections 100,000
New connections/sec 8,000
Optional
wireless
Power LED Tes t LED 6x1GbE switch
USB port
(3G/4G WAN
Failover)
Link and
activity
Indicator LEDs
Console
port
(configurable)
X0 LAN Port
X1 WAN Port
Secure
power
2
Page 3
SonicWALL TZ400 series
For small business, retail and branch oce locations, the Dell SonicWALL TZ400 series delivers enterprise-grade protection.
Flexible wireless deployment is available with either external SonicPoint Access points or 802.11ac wireless integrated into the unit.
Specification TZ400 series
Firewall throughput 1.3 Gbps
Full DPI throughput 300 Mbps
Anti-malware throughput 300 Mbps
IPS throughput 900 Mbps
IMIX throughput 500 Mbps
Max DPI connections 90,000
New connections/sec 6,000
Optional
wireless
Power LED Tes t LED 5x1GbE switch
USB port
(3G/4G WAN
Failover)
Link and
activity
Indicator LEDs
Console
port
(configurable)
X0 LAN Port
X1 WAN Port
Secure
power
SonicWALL TZ300 series
The Dell SonicWALL TZ300 series oers an all-in-one solution that protects networks from attack. Unlike consumer grade
products, the SonicWALL TZ300 series firewall combines eective intrusion prevention, anti-malware and content/URL filtering
with optional 802.11ac integrated wireless and broadest secure mobile platforms support for laptops, smartphones and tablets.
Specification TZ300 series
Firewall throughput 750 Mbps
Full DPI throughput 100 Mbps
Anti-malware throughput 100 Mbps
IPS throughput 300 Mbps
IMIX throughput 200 Mbps
Max DPI connections 50,000
New connections/sec 5,000
Optional
wireless
Power LED Tes t LED 3x1GbE switch
USB port
(3G/4G WAN
Failover)
Link and
activity
Indicator LEDs
Console
port
(configurable)
X0 LAN Port
X1 WAN Port
Secure
power
3
Page 4
SonicWALL SOHO series
Home oce
Corporate
headquarters
X-series switch
For wired and wireless small and home oce environments, the Dell SonicWALL SOHO series delivers the same business-class
protection large organizations require at a more aordable price point.
Specification SOHO series
Firewall throughput 300 Mbps
Full DPI throughput 50 Mbps
Anti-malware throughput 50 Mbps
IPS throughput 100 Mbps
IMIX throughput 60 Mbps
Max DPI connections 10,000
New connections/sec 1,800
Optional
wireless
Extensible architecture for extreme scalability
and performance
The Reassembly-Free Deep Packet Inspection (RFDPI)
engine is designed from the ground up with an emphasis
on providing security scanning at a high performance level,
to match both the inherently parallel and ever-growing
nature of network trac. When combined with multi-core
processor systems, this parallel-centric software architecture
Power LED Tes t LED 3x1GbE switch
Link and
activity
Indicator LEDs
USB port
(3G/4G WAN
Failover)
Console
port
(configurable)
scales up perfectly to address the demands of deep packet
inspection at high trac loads. The SonicWALL TZ Series
platform relies on processors that, unlike x86, are optimized
for packet, crypto and network processing while retaining
flexibility and programmability in the field — a weak point
for ASICs systems. This flexibility is essential when new
code and behavior updates are necessary to protect against
new attacks that require updated and more sophisticated
detection techniques.
Internet
SOHO
NSA or SuperMassive
TZ400
Global Management System
X0 LAN Port
X1 WAN Port
Small
branch oce
Secure
power
Large
branch oce
TZ600
18 port
4
Page 5
Reassembly-Free Deep Packet Inspection
Dell SonicWALL architecture
Competitive architecture
(RFDPI) engine
The RFDPI engine provides superior threat protection and
application control without compromising performance.
This patented engine inspects the trac stream to detect
threats at Layers 3-7. The RFDPI engine takes network
streams through extensive and repeated normalization
and decryption in order to neutralize advanced evasion
techniques that seek to confuse detection engines and sneak
malicious code into the network. Once a packet undergoes
the necessary preprocessing, including SSL decryption, it is
analyzed against a single proprietary memory representation
of three signature databases: intrusion attacks, malware
and applications. The connection state is then advanced
to represent the position of the stream relative to these
databases until it encounters a state of attack, or another
“match” event, at which point a pre-set action is taken. As
malware is identified, the SonicWALL firewall terminates the
connection before any compromise can be achieved and
properly logs the event. However, the engine can also be
configured for inspection only or, in the case of application
detection, to provide Layer 7 bandwidth management
services for the remainder of the application stream as soon
as the application is identified.
Packet assembly-based process
Packet
disassembly
Trac out
Inspection capacity
Min Max
Trac in
Inspection time
Less More
Proxy
Scanning
When proxy becomes full
or content too large, files
bypass scanning
Global management and reporting
For larger, distributed enterprise deployments, the optional
Dell SonicWALL Global Management System (GMS) provides
administrators a unified, secure and extensible platform to
manage Dell SonicWALL security appliances and X-Series
switches. It enables enterprises to easily consolidate the
management of security appliances, reduce administrative
and troubleshooting complexities and governs all operational
aspects of the security infrastructure including centralized
Packet reassembly-free process
Trac in
Inspection time
Less More
Reassembly-free packet
scanning without proxy
or content size limitations
Trac out
Inspection capacity
Min Max
policy management and enforcement, real-time event
monitoring, analytics and reporting, and more. GMS also
meets the firewall change management requirements of
enterprises through a workflow automation feature. GMS
provides a better way to manage network security by
business processes and service levels that dramatically
simplify the lifecycle management of your overall security
environments rather than on a device-by-device basis.
5
Page 6
Security and protection
Corporate
headquarters
The dedicated, in-house Dell
SonicWALL Threat Research Team
works on researching and developing
countermeasures to deploy to the
firewalls in the field for up-to-date
protection. The team leverages more
than one million sensors across the
globe for malware samples, and for
telemetry feedback on the latest
threat information, which in turn is fed
into the intrusion prevention, antimalware and application detection
capabilities. Dell SonicWALL firewall
customers with current subscriptions
are provided continuously updated
threat protection around the clock,
with new updates taking eect
immediately without reboots or
interruptions. The signatures on the
appliances protect against wide classes
of attacks, covering up to tens of
thousands of individual threats with
a single signature. In addition to the
countermeasures on the appliance,
all Dell SonicWALL firewalls also have
access to the Dell SonicWALL CloudAV
service, which extends the onboard
signature intelligence with more than
17 million signatures, and growing. This
CloudAV database is accessed via a
proprietary light-weight protocol by
the firewall to augment the inspection
done on the appliance. With GeoIP and botnet filtering capabilities,
Dell SonicWALL next-generation
firewalls are able to block trac
from dangerous domains or entire
geographies in order to reduce the risk
profile of the network.
Internet
NSA or SuperMassive
Global Management System
Sales network
Engineering network
Finance network
TZ product line
Home oce/small oce LAN
Internet
18 port X-series switch
TZ product line
3G/analog failover
Secure wireless zone
Printers
Storage
POE
cameras
Application intelligence
and control
Application intelligence informs
administrators of application trac
traversing the network, so they
can schedule application controls
based on business priority, throttle
unproductive applications and block
potentially dangerous applications.
Real-time visualization identifies trac
anomalies as they happen, enabling
immediate countermeasures against
potential inbound or outbound
attacks or performance bottlenecks.
Dell SonicWALL application trac
analytics provide granular insight
into application trac, bandwidth
* 802.11ac currently not available on SOHO models; SOHO models support 802.11a/b/g/n
6
utilization and security threats, as
well as powerful troubleshooting and
forensics capabilities. Additionally,
secure single sign-on (SSO) capabilities
enhance the user experience, increase
productivity and reduce support
calls. Management of application
intelligence and control is simplified by
using an intuitive web-based interface.
Flexible and secure wireless
Available as an optional feature, highspeed 802.11ac wireless* combines
with Dell SonicWALL next-generation
Protected server network
firewall technology to create a wireless
network security solution that delivers
comprehensive protection for wired
and wireless networks.
This enterprise-level wireless
performance enables WiFi-ready
devices to connect from greater
distances and use bandwidth-intensive
mobile apps, such as video and voice,
in higher density environments without
experiencing signal degradation.
Page 7
Features
RFDPI engine
Feature Description
Reassembly-Free Deep Packet Inspection This high-performance, proprietary and patented inspection engine performs stream based bi-directional
Bi-directional inspection Scans for threats in both inbound and outbound trac simultaneously to ensure that the network is not used
Single-pass inspection A single-pass DPI architecture simultaneously scans for malware, intrusions and application identification,
Stream-based inspection Proxy-less and non-buering inspection technology provides ultra-low latency performance for deep packet
Intrusion prevention
Feature Description
Countermeasure-based protection Tightly integrated intrusion prevention system (IPS) leverages signatures and other countermeasures to scan
Automatic signature updates The Dell SonicWALL Threat Research Team continuously researches and deploys updates to an extensive list
Intra-zone IPS protection Bolsters internal security by segmenting the network into multiple security zones with intrusion prevention,
Botnet command and control (CnC) detection
and blocking
Protocol abuse/anomaly Identifies and blocks attacks that abuse protocols in an attempt to sneak past the IPS.
Zero-day protection Protects the network against zero-day attacks with constant updates against the latest exploit methods and
Anti-evasion technology Extensive stream normalization, decoding and other techniques ensure that threats do not enter the network
Threat prevention
Feature Description
Gateway anti-malware The RFDPI engine scans all inbound, outbound and intra-zone trac for viruses, Trojans, key loggers and other
CloudAV malware protection A continuously updated database of over 17 million threat signatures resides in the Dell SonicWALL cloud
Around-the-clock security updates New threat updates are automatically pushed to firewalls in the field with active security services, and take
SSL decryption and inspection Decrypts and inspects SSL trac on the fly, without proxying, for malware, intrusions and data leakage, and
Bi-directional raw TCP inspection The RFDPI engine is capable of scanning raw TCP streams on any port bi-directionally preventing attacks that
Extensive protocol support Identifies common protocols such as HTTP/S, FTP, SMTP, SMBv1/v2 and others, which do not send data in raw
Application intelligence and control
Feature Description
Application control Control applications, or individual application features, that are identified by the RFDPI engine against a
Custom application identification Control custom applications by creating signatures based on specific parameters or patterns unique to an
Application bandwidth management Granularly allocate and regulate available bandwidth for critical applications or application categories while
Granular control Control applications, or specific components of an application, based on schedules, user groups, exclusion
Content filtering
Feature Description
Inside/outside content filtering Enforce acceptable use policies and block access to websites containing information or images that are
trac analysis, without proxying or buering, to uncover intrusion attempts, malware and identify application
trac regardless of port.
to distribute malware, and does not become a launch platform for attacks in case an infected machine is
brought inside.
drastically reducing DPI latency and ensuring that all threat information is correlated in a single architecture.
inspection of simultaneous network streams without introducing file and stream size limitations, and can be
applied on common protocols as well as raw TCP streams.
packet payloads for vulnerabilities and exploits, covering a broad spectrum of attacks and vulnerabilities.
of IPS countermeasures that covers more than 50 attack categories. The new updates take immediate eect
without any reboot or service interruption required.
preventing threats from propagating across the zone boundaries.
Identifies and blocks command and control trac originating from bots on the local network to IPs and
domains that are identified as propagating malware or are known CnC points.
techniques that cover thousands of individual exploits.
undetected by utilizing evasion techniques in Layers 2-7.
malware in files of unlimited length and size across all ports and TCP streams.
servers and is referenced to augment the capabilities of the onboard signature database, providing RFDPI with
extensive coverage of threats.
eect immediately without reboots or interruptions.
applies application, URL and content control policies in order to protect against threats hidden in SSL encrypted
trac Included with security subscriptions for all models except SOHO. Sold as a separate license on SOHO.
they to sneak by outdated security systems that focus on securing a few well-known ports.
TCP, and decodes payloads for malware inspection, even if they do not run on standard, well-known ports.
continuously expanding database of over 3,500 application signatures, to increase network security and
enhance network productivity.
application in its network communications, in order to gain further control over the network.
inhibiting nonessential application trac.
lists and a range of actions with full SSO user identification through LDAP/AD/Terminal Services/Citrix
integration.
objectionable or unproductive with Content Filtering Service. Extend policy enforcement to block internet
content for devices located outside the firewall perimeter with the Content Filtering Client.
7
Page 8
Content filtering
Feature Description
Granular controls Block content using the predefined categories or any combination of categories. Filtering can be scheduled by
YouTube for Schools Enable teachers to choose from hundreds of thousands of free educational videos from YouTube EDU that are
Web caching URL ratings are cached locally on the Dell SonicWALL firewall so that the response time for subsequent access
Enforced anti-virus and anti-spyware
Feature Description
Multi-layered protection Utilize the firewall capabilities as the first layer of defense at the perimeter, coupled with endpoint protection to
Automated enforcement option Ensure every computer accessing the network has the most recent version of anti-virus and anti-spyware
Automated deployment and installation option Machine-by-machine deployment and installation of anti-virus and anti-spyware clients is automatic across
Always on, automatic virus protection Frequent anti-virus and anti-spyware updates are delivered transparently to all desktops and file servers to
Spyware protection
Firewall and networking
Feature Description
Stateful packet inspection All network trac is inspected, analyzed and brought into compliance with firewall access policies.
DDoS/DoS attack protection SYN Flood protection provides a defense against DOS attacks using both Layer 3 SYN proxy and Layer 2 SYN
Flexible deployment options
IPv6 support Internet Protocol version 6 (IPv6) is in its early stages to replace IPv4. With the latest SonicOS, the hardware will
Dell X-Series switch integration Manage security settings of additional ports, including POE and POE+, under a single pane of glass using TZ
High availability SonicWALL TZ500 and SonicWALL TZ600 models support high availability with Active/Standby with
Wireless Network Security IEEE 802.11ac wireless technology can deliver up to 1.3 Gbps of wireless throughput with greater range and
Management and reporting
Feature Description
Global Management System Dell SonicWALL GMS monitors, configures and reports on multiple Dell SonicWALL appliances and Dell
Powerful, single device management An intuitive, web-based interface allows quick and convenient configuration. Also, a comprehensive command
IPFIX/NetFlow application flow reporting Exports application trac analytics and usage data through IPFIX or NetFlow protocols for real-time and
Virtual Private Networking
Feature Description
IPSec VPN for site-to-site connectivity High-performance IPSec VPN allows the SonicWALL TZ Series to act as a VPN concentrator for thousands of
SSL VPN or IPSec client remote access Utilizes clientless SSL VPN technology or an easy-to-manage IPSec client for easy access to email, files,
Redundant VPN gateway When using multiple WANs, a primary and secondary VPN can be configured to allow seamless automatic
Route-based VPN The ability to perform dynamic routing over VPN links ensures continuous uptime in the event of a temporary
Content/context awareness
Feature Description
User activity tracking User identification and activity are made available through seamless AD/LDAP/Citrix1/TerminalServices SSO
GeoIP country trac identification
Regular expression DPI filtering Prevents data leakage by identifying and controlling content crossing the network through regular
time of day, such as during school or business hours, and applied to individual users or groups.
organized by subject and grade and align with common educational standards.
to frequently visited sites is only a fraction of a second.
block, viruses entering network through laptops, thumb drives and other unprotected systems.
signatures installed and active, eliminating the costs commonly associated with desktop anti-virus and antispyware management.
the network, minimizing administrative overhead.
improve end user productivity and decrease security management.
Powerful spyware protection scans and blocks the installation of a comprehensive array of spyware programs on
desktops and laptops before they transmit confidential data, providing greater desktop security and performance.
blacklisting technologies. Additionally, it provides the ability to protect against DOS/DDoS through UDP/ICMP
flood protection and connection rate limiting.
The SonicWALL TZ Series can be deployed in traditional NAT, Layer 2 Bridge, Wire Mode and Network Tap modes.
support filtering implementations.
series dashboard with Dell X series switch (not available with the SOHO model)
state synchronization. SonicWALL TZ300 and SonicWALL TZ400 models support high availability without
Active/Standby synchronization. There is no high availability on SonicWALL SOHO models.
reliability. Available on SonicWALL TZ600 through SonicWALL TZ300 models. Optional 802.11 a/b/g/n is
available on SonicWALL SOHO models.
X-Series switches through a single management console with an intuitive interface to reduce management
costs and complexity.
line interface and support for SNMPv2/3.
historical monitoring and reporting with tools such as Dell SonicWALL Scrutinizer or other tools that support
IPFIX and NetFlow with extensions.
other large sites, branch oces or home oces.
computers, intranet sites and applications from a variety of platforms.
failover and failback of all VPN sessions.
VPN tunnel failure, by seamlessly re-routing trac between endpoints through alternate routes.
integration combined with extensive information obtained through DPI.
Identifies and controls network trac going to or coming from specific countries to either protect against attacks
from known or suspected origins of threat activity, or to investigate suspicious trac originating from the network.
expression matching.
8
Page 9
SonicOS feature summary
Firewall
• Reassembly-Free Deep Packet
Inspection
• Deep packet inspection for SSL
• Stateful packet inspection
• Stealth mode
• Common Access Card (CAC) support
• DOS attack protection
• UDP/ICMP/SYN flood protection
• SSL decryption
• IPv6 Security
Intrusion prevention
• Signature-based scanning
• Automatic signature updates
• Bidirectional inspection engine
• Granular IPS rule capability
• GeoIP and reputation-based filtering
• Regular expression matching
Anti-malware
• Stream-based malware scanning
• Gateway anti-virus
• Gateway anti-spyware
• Bi-directional inspection
• No file size limitation
• Cloud malware database
Application control
• Application control
• Application component blocking
• Application bandwidth management
• Custom application signature creation
• Data leakage prevention
• Application reporting over NetFlow/
IPFIX
• User activity tracking (SSO)
• Comprehensive application signature
database
Web content filtering
• URL filtering
• Anti-proxy technology
• Keyword blocking
• Bandwidth manage CFS rating
categories
• Unified policy model with app control
• 57 content filtering categories
• Content Filtering Service Client
VPN
• IPSec VPN for site-to-site connectivity
• SSL VPN and IPSec client remote
access
• Redundant VPN gateway
• Mobile Connect for iOS and Android™
• Route-based VPN (OSPF, RIP)
Networking
• PortShield
• Layer-2 network discovery
• IPv6
• Enhanced logging
• Port mirroring
• Layer-2 QoS
• Port Security
• Dynamic routing
• Policy-based routing
• Asymmetric routing
• DHCP server
• Bandwidth management
• Active/Standby high availability with
state sync*
• Inbound/outbound load balancing
• L2 bridge, NAT mode DDNS
• 3G/4G WAN failover
VoIP
• Granular QoS control
• Bandwidth management
• DPI for VoIP trac
• H.323 gatekeeper and SIP proxy
support
Management and monitoring
• Web GUI
• Command line interface (CLI)
• SNMPv2/v3
• O-box reporting (Scrutinizer)
• Centralized management and
reporting
• Logging
• Netflow/IPFix exporting
• App trac visualization (not available
on SOHO model)
• Centralized policy management
• Single Sign-On (SSO)
• Terminal service/Citrix support
• Application and bandwidth
visualization
• IPv4 and IPv6 management
IPv6
• IPv6 filtering
• 6rd (rapid deployment)
• DHCP prefix delegation
• BGP
Wireless
• Dual-band (2.4 GHz and 5.0 GHz)
• 802.11 a/b/g/n/ac wireless standards**
• Wireless intrusion detection and
prevention
• Wireless guest services
• Lightweight hotspot messaging
• Virtual access point segmentation
• Captive portal
* State sync high availability only on SonicWALL TZ500 and SonicWALL TZ600 models
** 802.11ac is not available on the SOHO model
9
• Cloud ACL
Page 10
SonicWALL TZ series system specifications
Performance overview SOHO series TZ300 series TZ400 series TZ500 series TZ600 series
Operating system SonicOS 5.9x /
6.2.x
Security processor 2 x 400 MHz /
2 x 800 MHz 4 x 800 MHz 4 x 1 GHz 4 x 1.4 GHz
2 x 800 MHz
Memory (RAM) 512 MB / 1GB 1 GB 1 GB 1 GB 1 GB
Memory (flash) 32 MB / 64 MB 64 MB 64 MB 64 MB 64 MB
1 GbE copper interfaces 5 5 7 8 10
Expansion USB USB USB 2 USB Expansion Slot
Firewall inspection throughput
Full DPI throughput
2
Application inspection throughput
IPS throughput
2
Anti-malware inspection throughput
IMIX throughput
SSL inspection and decryption throughput
(DPI SSL)
3
2
IPSec VPN throughput
1
300 Mbps 750 Mbps 1,300 Mbps 1,400 Mbps 1,500 Mbps
50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps
2
- 300 Mbps 900 Mbps 1,000 Mbps 1,100 Mbps
100 Mbps 300 Mbps 900 Mbps 1,000 Mbps 1,100 Mbps
2
50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps
60 Mbps 200 Mbps 500 Mbps 700 Mbps 900 Mbps
15 Mbps 45 Mbps 100 Mbps 150 Mbps 200 Mbps
3
100 Mbps 300 Mbps 900 Mbps 1,000 Mbps 1,100 Mbps
Connections per second 1,800 5,000 6,000 8,000 12,000
Maximum connections (SPI) 10,000 50,000 100,000 125,000 150,000
Maximum connections (DPI) 10,000 50,000 90,000 100,000 125,000
Single Sign-On (SSO) Users 250 500 500 500 500
VLAN interfaces 25 25 50 50 50
SonicPoints supported (maximum) 2 8 16 16 24
Dell X-Series switch models supported Not available X1008/P, X1018/P, X1026/P, X1052/P, X4012
VPN SOHO series TZ300 series TZ400 series TZ500 series TZ600 series
Site-to-site VPN tunnels 10 10 20 25 50
IPSec VPN clients (maximum) 1 (5) 1 (10) 2 (25) 2 (25) 2 (25)
SSL VPN licenses (maximum) 1 (10) 1 (50) 2 (100) 2 (150) 2 (200)
Virtual assist bundled (maximum) - 1 (30-day trial) 1 (30-day trial) 1 (30-day trial) 1 (30-day trial)
Encryption/authentication DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key exchange Die Hellman Groups 1, 2, 5, 14
Route-based VPN RIP, OSPF
Certificate support Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for Dell SonicWALL-to-Dell SonicWALL VPN,
VPN features Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit
NetExtender Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X
10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
Mobile Connect Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded)
Security services SOHO series TZ300 series TZ400 series TZ500 series TZ600 series
Deep Packet Inspection services Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS) HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as
ActiveX, Java, Cookies for privacy, allow/forbid lists
Enforced Client Anti-Virus and Anti-Spyware McAfee
Comprehensive Anti-Spam Service Supported
Application Visualization No Yes Yes Yes Ye s
Application Control Yes Ye s Ye s Ye s Yes
SonicOS 6.2.x
(Rear)*, 2 USB
SCEP
®
10
Page 11
SonicWALL TZ series system specifications con't
Networking SOHO series TZ300 series TZ400 series TZ500 series TZ600 series
IP address assignment Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols
QoS Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication XAUTH/RADIUS,
Local user database 150 250
VoIP Full H.323v1-5, SIP
Standards TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus
Certifications pending Common Criteria NDPP, FIPS 140-2 (with Suite B) Level 2, UC APL
Common Access Card (CAC) Supported
High availability No Active/standby Active/standby Active/standby
Hardware SOHO series TZ300 series TZ400 series TZ500 series TZ600 series
Form factor Desktop
Power supply (W) 24W external 24W external 24W external 36W external 60W external
Maximum power consumption (W) 6.4 / 11.3 6.9 / 12.0 9.2 / 13.8 13.4 / 17.7 16.1
Input power 100 to 240 VAC, 50-60 Hz, 1 A
Total heat dissipation 21.8 / 38.7 BTU 23.5 / 40.9 BTU 31.3 / 47.1 BTU 45.9 / 60.5 BTU 55.1 BTU
Dimensions 3.6x14.1x19cm 3.5x13.4x19cm 3.5x13.4x19cm 3.5x15x22.5cm 3.5x18x28cm
Weight 0.34 kg / 0.75 lbs
WEEE weight 0.80 kg / 1.76 lbs
Shipping weight 1.20 kg / 2.64 lbs
MTBF (years) 30/15 28/14 27/13 20/12 18
Environment 40-105° F, 0-40° C
Humidity 5-95% non-condensing
Regulatory SOHO series TZ300 series TZ400 series TZ500 series TZ600 series
Regulatory model (wired) APL31-0B9 APL28-0B4 APL28-0B4 APL29-0B6 APL30-0B8
Major regulatory compliance (wired models) FCC Class B, ICES
Regulatory model (wireless) APL41-0BA APL28-0B5 APL28-0B5 APL29-0B7 -
Major regulatory compliance (wireless models) FCC Class B, FCC
4
Active Directory,
SSO, LDAP, Novell,
internal user
database
0.48 kg / 1.06 lbs
0.94 kg / 2.07 lbs
1.34 kg / 2.95 lbs
Class B, CE (EMC,
LVD, RoHS), C-Tick,
VCCI Class B, UL,
cUL, TUV/GS, CB,
Mexico CoC by
UL, WEEE , REACH,
KCC/MSIP
RF ICES Class B,
IC RF CE (R&TTE,
EMC, LVD, RoHS),
RCM, VCCI Class
B, MIC/TELEC, UL,
cUL, TUV/GS, CB,
Mexico CoC by UL,
WEEE , REACH
BGP4, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database,
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
FCC Class B, ICES
Class B, CE (EMC,
LVD, RoHS), C-Tick,
VCCI Class B, UL,
cUL, TUV/GS, CB,
Mexico CoC by
UL, WEEE , REACH,
KCC/MSIP
FCC Class B, FCC
RF ICES Class B,
IC RF CE (R&TTE,
EMC, LVD, RoHS),
RCM, VCCI Class
B, MIC/TELEC, UL,
cUL, TUV/GS, CB,
Mexico CoC by UL,
WEEE , REACH
LVD, RoHS), C-Tick,
UL, WEEE , REACH,
Mexico CoC by UL,
Terminal Services, Citrix
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
FCC Class B, ICES
Class B, CE (EMC,
VCCI Class B, UL,
cUL, TUV/GS, CB,
Mexico CoC by
KCC/MSIP
FCC Class B, FCC
RF ICES Class B,
IC RF CE (R&TTE,
EMC, LVD, RoHS),
RCM, VCCI Class
B, MIC/TELEC, UL,
cUL, TUV/GS, CB,
WEEE , REACH
with stateful
synchronization
0.92 kg / 2.03 lbs
1.05 kg / 2.31 lbs
1.34 kg / 2.95 lbs
1.48 kg / 3.26 lbs
1.93 kg / 4.25 lbs
2.07 kg / 4.56 lbs
FCC Class B, ICES
Class B, CE (EMC,
LVD, RoHS), C-Tick,
VCCI Class B, UL,
cUL, TUV/GS, CB,
Mexico CoC by
UL, WEEE , REACH,
BSMI, KCC/MSIP
FCC Class B, FCC
RF ICES Class B,
IC RF CE (R&TTE,
EMC, LVD, RoHS),
RCM, VCCI Class
B, MIC/TELEC, UL,
cUL, TUV/GS, CB,
Mexico CoC by UL,
WEEE , REACH
Active/standby
with stateful
synchronization
1.47 kg / 3.24 lbs
1.89 kg /4.16 lbs
2.48 kg / 5.47 lbs
FCC Class A, ICES
Class A, CE (EMC,
LVD, RoHS), C-Tick,
VCCI Class A, UL
cUL, TUV/GS, CB,
Mexico CoC by
UL, WEEE , REACH,
KCC/MSIP
-
11
Page 12
SonicWALL TZ series system specifications, con't
Integrated Wireless SOHO series TZ300, TZ400, TZ500 series
TZ600
series
Standards 802.11 a/b/g/n 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x,
EAP-PEAP, EAP-TTLS
Frequency bands 802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472
GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz;
802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz;
802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 2.412-
2.472 GHz, 5.180-5.825 GHz
Operating Channels 802.11a: US and Canada 12, Europe 11, Japan 4,
Singapore 4, Taiwan 4; 802.11b/g: US and Canada 1-11,
Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n
(2.4 GHz): US and Canada 1-11, Europe 1-13, Japan
1-13; 802.11n (5 GHz): US and Canada 36-48/149-165,
Europe 36-48, Japan 36-48, Spain 36-48/52-64;
802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4,
Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan
1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11,
Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 3648/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64;
802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan
36-48, Spain 36-48/52-64
Transmit output power Based on the regulatory domain specified by the
system administrator
Based on the regulatory domain specified by the
system administrator
Transmit power control Supported Supported -
Data rates supported 802.11a: 6, 9, 12, 18,24, 36, 48, 54 Mbps per channel;
802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9,
12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2,
14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90,
120, 135, 150 Mbps per channel;
802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b:
1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48,
54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8,
65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel;
802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15,
30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195,
260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585,
650, 780, 866.7 Mbps per channel
Modulation technology
spectrum
802.11a: Orthogonal Frequency Division Multiplexing
(OFDM); 802.11b: Direct Sequence Spread Spectrum
(DSSS); 802.11g: Orthogonal Frequency Division
Multiplexing (OFDM)/Direct Sequence Spread
Spectrum (DSSS); 802.11n: Orthogonal Frequency
Division Multiplexing (OFDM)
802.11a: Orthogonal Frequency Division Multiplexing (OFDM);
802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g:
Orthogonal Frequency Division Multiplexing (OFDM)/Direct
Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal
Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal
Frequency Division Multiplexing (OFDM)
-
-
-
-
-
-
*Future use.
1
Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated
services.
2
Full DPI/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing
done with multiple flows through multiple port pairs.
3
VPN throughput measured using UDP trac at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4
BGP is available only on SonicWALL TZ400, TZ500 and TZ600.
12
Page 13
SonicWALL TZ Series ordering information
Product SKU
Dell SonicWALL SOHO with 1-year TotalSecure 01-SSC-0651
Dell SonicWALL SOHO Wireless-N with 1-year TotalSecure 01-SSC-0653
Dell SonicWALL TZ300 with 1-year TotalSecure 01-SSC-0581
Dell SonicWALL TZ300 Wireless-AC with 1-year TotalSecure 01-SSC-0583
Dell SonicWALL TZ400 with 1-year TotalSecure 01-SSC-0514
Dell SonicWALL TZ400 Wireless-AC with 1-year TotalSecure 01-SSC-0516
Dell SonicWALL TZ500 with 1-year TotalSecure 01-SSC-0445
Dell SonicWALL TZ500 Wireless-AC with 1-year TotalSecure 01-SSC-0446
Dell SonicWALL TZ600 with 1-year TotalSecure 01-SSC-0219
High availability options (each unit must be the same model)
Dell SonicWALL TZ500 High Availability 01-SSC-0439
Dell SonicWALL TZ600 High Availability 01-SSC-0220
Services SKU
For Dell SonicWALL SOHO
Comprehensive Gateway Security Suite 1-year 01-SSC-0688
Gateway Anti-Virus, Intrusion Prevention and Application Control 1-year 01-SSC-0670
Content Filtering Service 1-year 01-SSC-0676
Comprehensive Anti-Spam Service 1-year 01-SSC-0682
24x7 Support 1-year 01-SSC-0700
For Dell SonicWALL TZ300
Comprehensive Gateway Security Suite 1-year 01-SSC-0638
Gateway Anti-Virus, Intrusion Prevention and Application Control 1-year 01-SSC-0602
Content Filtering Service 1-year 01-SSC-0608
Comprehensive Anti-Spam Service 1-year 01-SSC-0632
24x7 Support 1-year 01-SSC-0620
For Dell SonicWALL TZ400
Comprehensive Gateway Security Suite 1-year 01-SSC-0567
Gateway Anti-Virus, Intrusion Prevention and Application Control 1-year 01-SSC-0534
Content Filtering Service 1-year 01-SSC-0540
Comprehensive Anti-Spam Service 1-year 01-SSC-0561
24x7 Support 1-year 01-SSC-0552
For Dell SonicWALL TZ500
Comprehensive Gateway Security Suite 1-year 01-SSC-0488
Gateway Anti-Virus, Intrusion Prevention and Application Control 1-year 01-SSC-0458
Content Filtering Service 1-year 01-SSC-0464
Comprehensive Anti-Spam Service 1-year 01-SSC-0482
24x7 Support 1-year 01-SSC-0476
For Dell SonicWALL TZ600
Comprehensive Gateway Security Suite 1-year 01-SSC-0258
Gateway Anti-Virus, Intrusion Prevention and Application Control 1-year 01-SSC-0228
Content Filtering Service 1-year 01-SSC-0234
Comprehensive Anti-Spam Service 1-year 01-SSC-0252
24x7 Support 1-year 01-SSC-0246
About Dell Security
Dell Security solutions help you create and maintain a strong security foundation with interconnected solutions that span the
enterprise. From endpoints and users to networks, data and identity, Dell Security solutions mitigate risk and reduce complexity
so you can drive your business forward. www. dell.com/security
Dell
5455 Great America Parkway, Santa Clara, CA 95054
www.dell.com/security
If you are located outside North America, you can
find local oce information on our web site.
© 2016 Dell Inc. ALL RIGHTS RESERVED. Dell and Dell Security logo and products—as identified in this
document—are trademarks or registered trademarks of Dell, Inc. in the U.S.A. and/or other countries. All
other trademarks and registered trademarks are property of their respective owners.
Datasheet-SonicWALL-TZ Series-US-VG-27853
Loading...