SonicWall · Firewalls
SonicWall TZ280P
Desktop firewall with four PoE+ ports to power compatible devices, combining security and connectivity in small offices.
Overview
TZ280 variant for projects requiring PoE power. Final selection must consider the environment, configuration, licensing and the controls to be enabled.
Key features
- Secure SD-WAN, VPN and policy-based segmentationSecure SD-WAN, VPN and policy-based segmentation
- Active/standby HA with state synchronisationActive/standby HA with state synchronisation
- Management through NSM 3.0 or later, CLI, SSH, Web UI and REST APIManagement through NSM 3.0 or later, CLI, SSH, Web UI and REST API
- Design conditionPrevention services, support and management depend on the contracted package
- Design conditionMaximum limits do not guarantee capacity for every type of traffic
- Design conditionActual performance varies with network conditions and enabled services; inspection metrics are not a guaranteed connection speed
- Design conditionVPN client limits differ from included licences
- Design conditionThe total PoE budget of 120 W must be respected; this does not mean 120 W per port
- Design conditionRegional availability, SKU, accessories and licences must be confirmed in the proposal
Technical specifications
| System | SonicOS 8 |
|---|---|
| Network ports | 8 × RJ45 1 GbE + 2 × SFP 1 GbE |
| Console and USB | 1 × micro-USB console; 1 × USB Type-C; USB Type-A on the rear panel |
| Form factor | Desktop |
| Unit dimensions | 22.5 × 14.9 × 3.5 cm (L × W × H) |
| Weight | 0.85 kg |
| Maximum power consumption | 130 W |
| Power supply | 100–240 V AC, 50–60 Hz; single power supply |
| Logical VLAN/tunnel interfaces | Up to 64 |
| Site-to-site VPN tunnels | Up to 200 |
| Maximum SPI / DPI connections | 1.000.000 / 200.000 |
| Integrated Wi-Fi | No |
| Firewall inspection throughput | 2.5 Gb/s¹ |
| Application inspection throughput | 1.5 Gb/s² |
| IPS throughput | 1.5 Gb/s² |
| Threat prevention throughput | 1 Gb/s² |
| IPSec VPN throughput | 1.2 Gb/s³ |
| New connections per second | 12.000 |
| IPSec VPN clients | 5 included; maximum 200 subject to licensing |
| SSL VPN / NetExtender | 1 licence included; maximum 50 subject to licensing |
| Storage | Not applicable (N/A in the current table) |
| WWAN USB | Support for compatible USB 5G/LTE/4G/3G cards |
| PoE | 4 PoE+ ports (X4–X7), IEEE 802.3af/at; up to 120 W in total and 30 W per port |
| TPM | Not specified in the technical datasheet consulted |
| Physical management interface | X0 LAN/MGMT; no additional dedicated port described |
| Power supply | 180 W |
| TLS/SSL inspection | 430 Mb/s² |
| Maximum TLS connections | 35.000 |
| Metodologia 1 | Firewall: maximum laboratory performance according to RFC 2544. The document does not state the packet size in this note. |
| Metodologia 2 | Manufacturer note 3: Keysight HTTP test tools; Gateway AV, Anti-Spyware, IPS and Application Control enabled. The datasheet links Application Inspection/IPS/Threat Prevention to this note; it does not detail all differences between the individual profiles. |
| Metodologia 3 | VPN: UDP traffic, 1418-byte packets, AESGMAC16-256, according to RFC 2544. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.