SonicWall TZ670 Series

The SonicWall TZ670 Series

The first desktop-form factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class price performance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

This Model Includes

Base Hardware. No licenses or security services are included.











Highlights



10 GbE interfaces in a desktop form factor

Single-pane-of-glass-management through cloud or firewall

SonicWall Switch, SonicWave Access Point and Capture Client integration





SonicExpress mobile App onboarding

Zero-Touch Deployment

Built-in and expandable storage





SD-Branch ready

Secure SD-WAN capability

Redundant power





High port density

Cellular failover

SonicOS 7.0





High connection count

Fast DPI performance

Low TCO







Ideal for Small to Medium Size Businesses

Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities





Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass





Attain business continuity by providing failover to cellular connectivity





Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more





Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies





Distributed Enterprise with SD-Branches

Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch





Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape





Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3





Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client





Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations





Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ's hardware and software enhancements, plus features such SD-WAN technology





Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment





Ensure business continuity by providing failover to cellular connectivity





Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes

The SonicWall TZ670 Series

The first desktop-form factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class price performance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

This Model Includes

TZ670 Appliance with 1 year of the EPSS (Capture ATP with RTDMI Technology, Intrusion Prevention, Application Control, Gateway Anti-Virus, Anti-Spam, Network Visibility, Content Filtering, 24X7 Support)

Highlights

10 GbE interfaces in a desktop form factor

Single-pane-of-glass-management through cloud or firewall

SonicWall Switch, SonicWave Access Point and Capture Client integration

SonicExpress mobile App onboarding

Zero-Touch Deployment

Built-in and expandable storage

SD-Branch ready

Secure SD-WAN capability

Redundant power

High port density

Cellular failover

SonicOS 7.0

High connection count

Fast DPI performance

Low TCO

Ideal for Small to Medium Size Businesses

Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities

Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass

Attain business continuity by providing failover to cellular connectivity

Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more

Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies

Distributed Enterprise with SD-Branches

Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch

Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape

Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3

Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client

Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations

Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ's hardware and software enhancements, plus features such SD-WAN technology

Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment

Ensure business continuity by providing failover to cellular connectivity

Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes

The SonicWall TZ670 Series

The first desktop-form factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class price performance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

This Model Includes

TZ670 appliance with 1 year of APSS, including - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, NSM Essential with Management & 7-Day Reporting and 24x7 Support.











Highlights



10 GbE interfaces in a desktop form factor

Single-pane-of-glass-management through cloud or firewall

SonicWall Switch, SonicWave Access Point and Capture Client integration





SonicExpress mobile App onboarding

Zero-Touch Deployment

Built-in and expandable storage





SD-Branch ready

Secure SD-WAN capability

Redundant power





High port density

Cellular failover

SonicOS 7.0





High connection count

Fast DPI performance

Low TCO







Ideal for Small to Medium Size Businesses

Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities





Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass





Attain business continuity by providing failover to cellular connectivity





Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more





Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies





Distributed Enterprise with SD-Branches

Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch





Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape





Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3





Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client





Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations





Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ's hardware and software enhancements, plus features such SD-WAN technology





Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment





Ensure business continuity by providing failover to cellular connectivity





Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes

The SonicWall TZ670 Series

The first desktop-form factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class price performance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.











Highlights



10 GbE interfaces in a desktop form factor

Single-pane-of-glass-management through cloud or firewall

SonicWall Switch, SonicWave Access Point and Capture Client integration





SonicExpress mobile App onboarding

Zero-Touch Deployment

Built-in and expandable storage





SD-Branch ready

Secure SD-WAN capability

Redundant power





High port density

Cellular failover

SonicOS 7.0





High connection count

Fast DPI performance

Low TCO







Ideal for Small to Medium Size Businesses

Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities





Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass





Attain business continuity by providing failover to cellular connectivity





Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more





Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies





Distributed Enterprise with SD-Branches

Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch





Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape





Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3





Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client





Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations





Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ's hardware and software enhancements, plus features such SD-WAN technology





Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment





Ensure business continuity by providing failover to cellular connectivity





Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes

The SonicWall TZ670 Series

The first desktop-form factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class price performance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

This Model Includes

SonicWall TZ670 appliance with 1 year of 8X5 support. No security services are included.

Highlights

10 GbE interfaces in a desktop form factor

Single-pane-of-glass-management through cloud or firewall

SonicWall Switch, SonicWave Access Point and Capture Client integration

SonicExpress mobile App onboarding

Zero-Touch Deployment

Built-in and expandable storage

SD-Branch ready

Secure SD-WAN capability

Redundant power

High port density

Cellular failover

SonicOS 7.0

High connection count

Fast DPI performance

Low TCO

Ideal for Small to Medium Size Businesses

Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities

Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass

Attain business continuity by providing failover to cellular connectivity

Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more

Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies

Distributed Enterprise with SD-Branches

Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch

Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape

Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3

Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client

Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations

Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ's hardware and software enhancements, plus features such SD-WAN technology

Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment

Ensure business continuity by providing failover to cellular connectivity

Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes

Stateful High Availability (SHA) provides dramatically improved failover performance. The Primary and Backup appliances are continuously synchronized so that the Backup can seamlessly assume all network responsibilities if the Primary appliance fails, with no interruptions to existing network connections.

Stateful High Availability is not load-balancing. It is an active-idle configuration where the Primary appliance handles all traffic. When Stateful High Availability is enabled, the Primary appliance actively communicates with the Backup to update most network connection information. As the Primary appliance creates and updates network connection information (VPN tunnels, active users, connection cache entries, etc.), it immediately informs the Backup appliance. This ensures that the Backup appliance is always ready to transition to the Active state without dropping any connections.

The synchronization traffic is throttled to ensure that it does not interfere with regular network traffic. All configuration changes are performed on the Primary appliance and automatically propagated to the Backup appliance. The High Availability pair uses the same LAN and WAN IP addresses—regardless of which appliance is currently Active.

Benefits

Improved reliability

By synchronizing most critical network connection information, Stateful High Availability prevents down time and dropped connections in case of appliance failure.

Faster failover performance

By maintaining continuous synchronization between the Primary and Backup appliances, Stateful High Availability enables the Backup appliance to take over in case of a failure with virtually no down time or loss of network connections.

Minimal impact on CPU performance

Typically less than 1% usage.

Minimal impact on bandwidth

Transmission of synchronization data is throttled so as not interfere with other data.

Advanced Protection Service Suite for TZ670

Complete network security, content filtering, application control, CaptureATP, gateway anti-virus, anti-spam, 24x7 support, cloud management and reporting in a single integrated package.

This bundle extends the security from essential suite to provide advanced security for the network. Additional services contained within this bundle include cloud management and cloud-based reporting for 7 days.

The SonicOS architecture is at the core of SonicWall physical and virtual firewalls including the TZ, NSa, NSv and NSsp Series. SonicOS leverages our patented, single-pass, lowlatency, Reassembly-Free Deep Packet Inspection® (RFDPI) and patent-pending Real-Time Deep Memory Inspection™ (RTDMI) technologies to deliver industry-validated high security effectiveness, SD-WAN, real-time visualization, high-speed virtual private networking (VPN) and other robust security features.

Through a combination of cloud-based and on-box technologies we deliver protection to our firewalls that's been validated by independent third party testing for its extremely high security effectiveness. Unknown threats are sent to SonicWall's cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. Enhancing Capture ATP is our RTDMI™ technology. The RTDMI engine detects and blocks malware and zero-day threats by inspecting directly in memory. RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks where the malware's weaponry is exposed for less than 100 nanoseconds.

At A Glance

Complete network security solution

All service licences included.

Capture ATP

Multi-engine network sandbox to prevent zero-day threats. A cloud-based service available with SonicWall firewalls — detects and and can block advanced threats at the gateway until verdict.

This service is the only advanced threat-detection offering that combines multi-layer sandboxing, including full system emulation and virtualization techniques, to analyze suspicious code behavior. This powerful combination detects more threats than single-engine sandbox solutions, which are compute environment specific and susceptible to evasion.

Gateway anti-virus and anti-spyware protection

Including DPI-SSL and RFDPI.

Cutting-edge IPS technology

Protects against worms, trojans, software vulnerabilities and other intrusions by scanning all network traffic for malicious or anomalous patterns.

Application intelligence and control

Set of granular, application-specific policies providing application classification and policy enforcement to help administrators control and manage both business and non-business related applications.

Content filtering

Enforce internet use policies and control internal access to inappropriate, unproductive and potentially illegal web content with comprehensive content filtering. CFS running on SonicWall Unified Threat Management and next generation firewalls (NGFWs) is a powerful protection and productivity solution that delivers unequaled content filtering enforcement for educational institutions, businesses, libraries and government agencies.

Using SonicWall CFS, organizations have control over the websites students and employees can access using their IT-issued computer behind the firewall. SonicWall CFS compares requested websites against a massive database in the cloud containing millions of rated URLs, IP addresses and websites. CFS provides administrators with the tools to create and apply policies that allow or deny access to sites based on individual or group identity, or by time of day, for over 56 pre-defined categories. CFS also dynamically caches website ratings locally on the SonicWall firewall for nearinstantaneous response times.

Network Topology View

Display hosts, access-points in the network based on device name, mac address and IP Address.

24x7 support with firmware updates and hardware replacement

Including firmware updates and hardware replacement protects your business and your SonicWall investment.

Management and reporting

Manage and view reports on firewalls via cloud through Network Security Manager tile of Capture Security Center. See Capture Security Centre (CSC).

Security Suite Comparison Chart

Feature Essential Advanced Premier Gateway Anti-Virus, Intrusion Prevention,
Application Control Content Filtering Service Anti-Spam 24x7 Support Network Visibility Capture ATP (Multi-Engine) Sandboxing RTDMI Technology Basic DNS Security Cloud Management Cloud based Reporting - 7 Days Advanced Cloud Analytics - Virtual, 365 Days Reporting Advanced DNS Security Firewall System Check Tool Cloud App Security Starter Pack Capture Client Starter Pack Premier Support - Part of bundle
- Not available with the bundle, but can be purchased separately
- Not supported with the bundle

Provides real time network threat prevention with Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention Service and Application Control. Available in 1, 3 or 5 year licenses.

Includes 8x5 telephone, email and Web-based Support, Software and firmware updates, Advance Exchange hardware replacement, access to electronic Support tools and moderated discussion groups.

SonicWall support agreements provide technical assistance during the license coverage hours. A SonicWall technical specialist will work remotely with you to diagnose and identify software and hardware not performing to documented specifications. Support also includes general assistance regarding use and implementation on a limited basis.

SonicWall's support offerings do not include step-by-step installation or configuration of products or services. If you need installation or configuration assistance, please contact us for a quote.

Support agreements provide for replacement of failing hardware (not applicable to the NSv series) returned to a SonicWall factory. The replacement product may be new, or like-new. In the event of product obsolescence, SonicWall reserves the right to replace failing product with a product of like or better features and functionality.

Rack mounting kit - for SonicWall TZ570, TZ570W, TZ670

SonicWall Power adapter AC 100-240 V 60 Watt FRU for SonicWall NSA 2700 / TZ670 / TZ570 Series