SonicWall · Firewalls
SonicWall TZ280
Desktop firewall for small offices and branches, with eight Gigabit connections and two 1 Gb/s optical uplinks.
Overview
Entry point to the TZ Gen 8 range for securing smaller sites. Final selection must consider the environment, configuration, licensing and the controls to be enabled.
Key features
- Secure SD-WAN, VPN and policy-based segmentationSecure SD-WAN, VPN and policy-based segmentation
- Active/standby HA with state synchronisationActive/standby HA with state synchronisation
- Management through NSM 3.0 or later, CLI, SSH, Web UI and REST APIManagement through NSM 3.0 or later, CLI, SSH, Web UI and REST API
- Design conditionPrevention services, support and management depend on the contracted package
- Design conditionMaximum limits do not guarantee capacity for every type of traffic
- Design conditionActual performance varies with network conditions and enabled services; inspection metrics are not a guaranteed connection speed
- Design conditionVPN client limits differ from included licences
- Design conditionRegional availability, SKU, accessories and licences must be confirmed in the proposal
Technical specifications
| System | SonicOS 8 |
|---|---|
| Network ports | 8 × RJ45 1 GbE + 2 × SFP 1 GbE |
| Console and USB | 1 × micro-USB console; 1 × USB Type-C; USB Type-A on the rear panel |
| Form factor | Desktop |
| Unit dimensions | 22.5 × 14.9 × 3.5 cm (L × W × H) |
| Weight | 0.82 kg |
| Maximum power consumption | 12,36 W |
| Power supply | 100–240 V AC, 50–60 Hz; single power supply |
| Logical VLAN/tunnel interfaces | Up to 64 |
| Site-to-site VPN tunnels | Up to 200 |
| Maximum SPI / DPI connections | 1.000.000 / 200.000 |
| Integrated Wi-Fi | No |
| Firewall inspection throughput | 2.5 Gb/s¹ |
| Application inspection throughput | 1.5 Gb/s² |
| IPS throughput | 1.5 Gb/s² |
| Threat prevention throughput | 1 Gb/s² |
| IPSec VPN throughput | 1.2 Gb/s³ |
| New connections per second | 12.000 |
| IPSec VPN clients | 5 included; maximum 200 subject to licensing |
| SSL VPN / NetExtender | 1 licence included; maximum 50 subject to licensing |
| Storage | Not applicable (N/A in the current table) |
| WWAN USB | Support for compatible USB 5G/LTE/4G/3G cards |
| PoE | No |
| TPM | Not specified in the technical datasheet consulted |
| Physical management interface | X0 LAN/MGMT; no additional dedicated port described |
| Power supply | 60 W |
| TLS/SSL inspection | 430 Mb/s² |
| Maximum TLS connections | 35.000 |
| Metodologia 1 | Firewall: maximum laboratory performance according to RFC 2544. The document does not state the packet size in this note. |
| Metodologia 2 | Manufacturer note 3: Keysight HTTP test tools; Gateway AV, Anti-Spyware, IPS and Application Control enabled. The datasheet links Application Inspection/IPS/Threat Prevention to this note; it does not detail all differences between the individual profiles. |
| Metodologia 3 | VPN: UDP traffic, 1418-byte packets, AESGMAC16-256, according to RFC 2544. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.