SonicWall TZ670 Firewall (Gen 7) w/ Secure Upgrade Plus (2-Year Essential Protection Service Suite) | 02-SSC-5659

Overview Specs Reviews The SonicWall TZ670 is the first desktop-form-factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces. Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class priceperformance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention. The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure. Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security. SonicOS and Security Services The SonicOS architecture is at the core of TZ NGFWs. TZ670 is powered by the feature rich SonicOS 7.0 operating system with new modern looking UX/UI, advanced security, networking and management capabilities. TZ670 features integrated SD-WAN, TLS 1.3 support, realtime visualization, high-speed virtual private networking (VPN) and other robust security features. Unknown threats are sent to SonicWalls cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. Enhancing Capture ATP is our patentpending Real-Time Deep Memory Inspection (RTDMI™) technology. As one of Capture ATPs engine, RTDMI detects and blocks malware and zero-day threats by inspecting directly in memory. By leveraging Capture ATP with RTDMI technology, in addition to security services such as ReassemblyFree Deep Packet Inspection (RFDPI), Anti-virus and Anti-spyware Protection, intrusion prevention system, Application Intelligence and Control, Content Filtering Services, DPI-SSL, TZ series firewalls stop malware, ransomware and other advanced threats at the gateway. For more information, refer the SonicOS and Security Services Datasheet. Learn more about the Detailed Specifications Model Brand SonicWall Series TZ 670 Part Number 02-SSC-5685 Details Firewall Type Desktop Type Type Office Products Standard TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 Ports 8x1GbE, 2x10GbE, 2 USB 3.0 Security Security Services Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service Application Visualization Application Control Capture Advanced Threat Protection VPN Site-to-site VPN tunnels: 250 IPSec VPN clients (maximum:) 10 (500) SSL VPN licenses (maximum): 2 (250) Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography Key exchange: Diffie Hellman Groups 1, 2, 5, 14v Route-based VPN: RIP, OSPF, BGP Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN Global VPN client platforms supported: Microsoft®, Windows 10 NetExtender: Microsoft®, Windows 10, Linux Mobile Connect: Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10 Firewall/VPN Performances Firewall inspection throughput: 5 Gbps Threat prevention throughput: 2.5 Gbps Application inspection throughput: 3 Gbps IPS throughput: 3 Gbps Anti-malware inspection throughput: 2.5 Gbps TLS/SSL inspection and decryption throughput (DPI SSL): 800 Mbps IPSec VPN throughput: 2.1 Gbps Connections per second: 25,000 Maximum connections (SPI): 1,500,000 Maximum connections (DPI): 500,000 Maximum connections (DPI SSL): 75,000 Power Input 100-240 VAC, 50-60 Hz Features Features Operating system: SonicOS 7.0 Interfaces: 8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console Storage expansion slot (Bottom): Optional up to 256GB, 32GB included Redundant power supply Management: Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs Single Sign-On (SSO) Users: 2,500 VLAN interfaces: 256 Access points supported (maximum): 32 Networking IP address assignment: Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay NAT modes: 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode Routing protocols: BGP, OSPF, RIPv1/v2, static routes, policy-based routing QoS: Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) Authentication LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) Local user database: 250 VoIP: Full H323-v1-5, SIP High availability Active/Standby with stateful synchronization Regulatory FCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL Dimensions & Weight Dimensions 3.5x15x22.5 (cm) 1.38x5.91x 8.85 in Weight 0.97 kg / 2.14 lbs Additional Information