SonicWall · Firewalls
SonicWall TZ280W
Desktop firewall with integrated Wi-Fi 6 2×2, eight Gigabit ports and two 1 Gb/s SFP uplinks for small offices.
Overview
TZ280 variant with integrated wireless connectivity. Final selection must consider the environment, configuration, licensing and the controls to be enabled.
Key features
- Secure SD-WAN, VPN and policy-based segmentationSecure SD-WAN, VPN and policy-based segmentation
- Active/standby HA with state synchronisationActive/standby HA with state synchronisation
- Management through NSM 3.0 or later, CLI, SSH, Web UI and REST APIManagement through NSM 3.0 or later, CLI, SSH, Web UI and REST API
- Design conditionPrevention services, support and management depend on the contracted package
- Design conditionMaximum limits do not guarantee capacity for every type of traffic
- Design conditionActual performance varies with network conditions and enabled services; inspection metrics are not a guaranteed connection speed
- Design conditionVPN client limits differ from included licences
- Design conditionRegional availability, SKU, accessories and licences must be confirmed in the proposal
Technical specifications
| System | SonicOS 8 |
|---|---|
| Network ports | 8 × RJ45 1 GbE + 2 × SFP 1 GbE |
| Console and USB | 1 × micro-USB console; 1 × USB Type-C; USB Type-A on the rear panel |
| Form factor | Desktop |
| Unit dimensions | 22.5 × 14.9 × 3.5 cm (L × W × H) |
| Weight | 0.85 kg |
| Maximum power consumption | 15,4 W |
| Power supply | 100–240 V AC, 50–60 Hz; single power supply |
| Logical VLAN/tunnel interfaces | Up to 64 |
| Site-to-site VPN tunnels | Up to 200 |
| Maximum SPI / DPI connections | 1.000.000 / 200.000 |
| Integrated Wi-Fi | Wi-Fi 6 / 802.11ax 2×2; 2.4 and 5 GHz bands |
| Firewall inspection throughput | 2.5 Gb/s¹ |
| Application inspection throughput | 1.5 Gb/s² |
| IPS throughput | 1.5 Gb/s² |
| Threat prevention throughput | 1 Gb/s² |
| IPSec VPN throughput | 1.2 Gb/s³ |
| New connections per second | 12.000 |
| IPSec VPN clients | 5 included; maximum 200 subject to licensing |
| SSL VPN / NetExtender | 1 licence included; maximum 50 subject to licensing |
| Storage | Not applicable (N/A in the current table) |
| WWAN USB | Support for compatible USB 5G/LTE/4G/3G cards |
| PoE | No |
| TPM | Not specified in the technical datasheet consulted |
| Physical management interface | X0 LAN/MGMT; no additional dedicated port described |
| Power supply | 60 W |
| TLS/SSL inspection | 430 Mb/s² |
| Maximum TLS connections | 35.000 |
| Metodologia 1 | Firewall: maximum laboratory performance according to RFC 2544. The document does not state the packet size in this note. |
| Metodologia 2 | Manufacturer note 3: Keysight HTTP test tools; Gateway AV, Anti-Spyware, IPS and Application Control enabled. The datasheet links Application Inspection/IPS/Threat Prevention to this note; it does not detail all differences between the individual profiles. |
| Metodologia 3 | VPN: UDP traffic, 1418-byte packets, AESGMAC16-256, according to RFC 2544. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.