Home > SonicWall > Network Security > TZ Series




SonicWall TZ GEN 7 & 8 Series

SonicWall TZ series firewalls are the first desktop form factor next-generation firewalls (NGFW) with 10 or 5 Gigabit Ethernet interfaces. The series consist of a wide range of products to suit a variety of use cases.

Designed for small, mid-sized organizations and
distributed enterprise with SD-Branch locations, the 7th & 8th generation TZ series delivers industry-validated security effectiveness with best-in-class price-performance. These NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, real-time breach detection and prevention.

GEN 7 TZ 270 thru 670 Series Data Sheet
GEN 8 TZ 280 thru 680 Series Data Sheet
GEN 8 TZ80 Series Data Sheet



Highly Scalable & Zero-Touch Deployment

SonicWall's TZ series firewalls are highly scalable, with high port density of up to 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure on select models.

Unlike previous generations, EVERY GEN 7 & 8 TZ series non-wireless model has the option of adding on a High Availability (i.e. Hardware Fail-Over) with a Stateful HA Upgrade License for seamless fail-over in those unexpected and rare times when the primary firewall crashes. Whether a home-office, small to medium sized business, or in whatever network scenario you install a TZ model, with the optional second power supply and an High Availability appliance in place, you can have the peace of mind that your network, your business, will stay connected.

Deployment of TZ Series firewall is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out your devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewall security with switching and wireless capabilities while providing a single-pane-of-glass management for SonicWall Firewalls, SonicWall Switches and SonicWave Access Points. When you add in Capture Client, TZ Series Firewalls
tightly integrate with it to provide seamless endpoint security.



SonicOS 7.0

The Gen 7 TZ Series runs on SonicOS 7.0, a new operating system also built from the ground up, delivering a modern user interface, intuitive workflows, and user-first design principles. SonicOS 7.0 provides multiple features designed to facilitate enterprise-level workflows, easy policy configuration, zero-touch deployment, and flexible management — all of which allow enterprises to improve both their security and operational efficiency. In addition, SonicOS 7.0 provides a single-pane-of-glass interface to manage both your firewall and access points associated with it.

With Network Access Control integrated within the SonicOS 7.0, SonicWall customers can intergrate with Aruba ClearPass, giving them comprehensive and precise profiling, authentication, and authorization for systems and devices trying to access their IT resources. SonicOS provides a RESTful API that supports Aruba ClearPass as NAC to integrate with SonicWall NGFW. This architecture turns static security into contextual security to provide more flexible and advance security protection.

SonicOS 8.0

The core of Gen 8 TZ Series is the SonicOS architecture which drives performance enhancements and consistency and reliability in network security. It leverages SonicWall's patented, single-pass, low-latency, Reassembly-Free Deep Packet Inspection® (RFDPI) and patented Real-Time Deep Memory Inspection™ (RTDMI) technologies to deliver industry-validated high security effectiveness, SD-WAN, real-time visualization, high-speed virtual private networking (VPN) and other robust security features.

SonicOS 8 features advanced security, simplified policy management, and critical networking and management capabilities for advanced enterprises with next-gen SD-Branches and small to medium-sized businesses (SMBs). The OS also enables Wi-Fi 6 support, DNS advanced security, reputation-based content filtering, and Network Access Control (NAC integration). With the ability for Zero Trust Network Access (ZTNA) capabilities one can have the peace of mind that user and device trust are repeatedly verified before granting access to specific applications, regardless of location and endpoint type.







Securing the Network, Acquiring Peace of Mind

Known and unknown threats lurk about, searching for whose network, PCs, and laptops to hack into to steal data and or to infect with malware, ransomware, and other threats. Add in the aspect of human error, the threat landscape expands even more. In today's world, threats from without and within the perimeter of the network is simply a way of life for the majority of organizations and any of us connecting to the internet, whether at home, on the road, or in the office. The good news is that SonicWall has a plethora of security services designed to help protect you from the threat seeking to turn our world upside down.

These services, in tandem with their next-gen firewalls, help address the reality that over 90% of breaches stem from human error and attackers exploiting those vulnerabilities created within 48 hours. Misconfigurations alone account for over 60% of security incidents. A firewall that is managed can help organizations and their remote workers avoid risks that could cost the organization an extreme amount of time, money, lost income, and more.

SonicWall empowers businesses to reduce risk, stay compliant, and scale securely with smarter, co-managed cybersecurity - providing the peace of mind customers need in today's threat landscape. They do this through various security services that build on top of each other and work in unison to help create a barrier against the threats.

The following SonicWall Security, Cloud Management, & Support services are available as either...
  • Al a carte,
  • Bundle in the form of Advanced Protection Service Suite (APSS), or
  • Within a TZ GEN 7 or 8 series firewall as an APSS bundled hardware SKU (i.e. Advanced Edition)



Gateway Anti-Virus, Intrusion Prevention, & Application Control Bundle

  • Gateway Anti-Virus protection combines network-based anti-malware with a dynamically updated cloud database of tens of millions of malware signatures. Dynamic spyware protection blocks the installation of malicious spyware and disrupts existing spyware communications.
  • Intrusion Prevention Service (IPS) - Cutting edge technology protects against worms, trojans, software vulnerabilities and other intrusions by scanning all network traffic for malicious or anomalous patterns, thereby increasing network reliability and performance.
  • Application intelligence and control is a set of granular, application-specific policies providing application classification and policy enforcement to help administrators control and manage both business and non-business related applications.
Content Filtering Services (CFS) lets you enforce Internet use policies and control internal access to inappropriate, unproductive and potentially illegal web content with comprehensive content filtering. Reputation-based CFS 5.0 provides a reputation score that forecasts the security risk of a URL across 93 web categories.

Capture Advanced Threat Protection (ATP)
multi-engine sandbox for analysis. Enhancing Capture ATP is their patented Real-Time Deep Memory Inspection (RTDMI™) technology. As one of Capture ATP’s engines, RTDMI detects and blocks malware and zero-day threats by inspecting directly in memory.

By leveraging Capture ATP with RTDMI technology along with security services such as Reassembly-Free Deep Packet Inspection (RFDPI), Anti-virus and Anti-spyware Protection, intrusion prevention system, Application Intelligence and Control, Content Filtering Services, DPI-SSL, TZ series, your NSa GEN 7 firewall will stop malware, ransomware and other advanced threats at the gateway.
DNS Filtering blocks malicious websites or applications at the DNS layer to filter out harmful or inappropriate content without enabling TLS decryption and adversely affecting performance.

Comprehensive Anti-Spam Service (for use with on-prem email servers only) offers small-to-medium sized businesses a greater than 99% effectiveness against spam, dropping greater than 80% of spam at the gateway, while utilizing advanced anti-spam techniques like Adversarial Bayesian™ and machine-learning filtering.

SonicWall's 24/7 Support rounds it all off by providing firmware updates, 24/7 SonicWall Phone Support and web-based support for basic configuration and troubleshooting assistance, and Hardware Exchange Replacement service where if SonicWall's support can't resolve a functionality issue remotely, they will issue an RMA for the defective unit and send a replacement unit to arrive in 1-2 business days.

NSM Advanced - As part of the Advance Protection Security Services (APSS), SonicWall's Network Security Mamager (NSM) provides Cloud-based Network Management streamlining network security management to enhance capability without increasing complexity. It adapts and scales to your growing business and evolving security requirements. From a unified console, seamlessly manage all firewall operations, uncover hidden risks, identify misconfiguration of policies, and simplify compliance with centralized policy enforcement and a comprehensive audit trail.

Included with the NSM Advanced is
Advanced Reporting & Analytics providing 7-Day Retention of Alerts, reports, and anlytics which can be extended 30, 90 or 365 days of retention as needed.

NSM Cloud Management Data Sheet



Cloud Secure Edge:
Users can also leverage the new Cloud Secure Edge Connector integration to provide a centralized and easy-to-manage option to provide secure access to their private applications either from the server or their PC. This approach ensures that the user and device trusts are repeatedly verified before granting access to specific applications, regardless of location and endpoint type.




COMPARE THE TZ SERIES MODELS

The following comparison chart can assist you with which models to consider moving to, especially if you are considering increasing your internet throughput speed!

If you are still using the older GEN 5.x & 6.x TZ Series models, with End of Support Dates having already passed or quickly approaching, seriously consider upgrading to the GEN 7 or 8 TZ Series models.

Call CPU Distributing at 800-880-4200 (M-F 8:30 am to 5:30 pm CST) to discuss your upgrade options!

NOTE 1: Wireless TZ Series Models: GEN 7 = TZ270W, TZ370W, TZ470W, & TZ570W / GEN 8 = TZ380W only. For wireless access within a network, is highly advisable for best wireless security coverage to go with a none wireless TZ model and add in 1 or more SonicWave Access Points depending on coverage needed.

NOTE 2: For Enlarged Viewing: Zoom in OR Right Click on either image & select "Open Image in New Tab"





To discuss which TZ Series option
is best for securing your network...

Call CPU Distributing at 800-880-4200
(M-F 8:30 am to 5:30 pm CST)