SonicWall · Firewalls
SonicWall TZ680
The highest-capacity model in the TZ Gen 8 series, with 10 Gb/s uplinks and up to 600 thousand DPI connections.
Overview
Higher-end TZ Gen 8 model for branches with greater demands. Final selection must consider the environment, configuration, licensing and the controls to be enabled.
Key features
- Secure SD-WAN, VPN and policy-based segmentationSecure SD-WAN, VPN and policy-based segmentation
- Active/standby HA with state synchronisationActive/standby HA with state synchronisation
- Management through NSM 3.0 or later, CLI, SSH, Web UI and REST APIManagement through NSM 3.0 or later, CLI, SSH, Web UI and REST API
- Design conditionPrevention services, support and management depend on the contracted package
- Design conditionMaximum limits do not guarantee capacity for every type of traffic
- Design conditionActual performance varies with network conditions and enabled services; inspection metrics are not a guaranteed connection speed
- Design conditionVPN client limits differ from included licences
- Design conditionRegional availability, SKU, accessories and licences must be confirmed in the proposal
Technical specifications
| System | SonicOS 8 |
|---|---|
| Network ports | 8 × RJ45 1 GbE + 2 × SFP+ 10/5/2.5/1 Gb/s |
| Console and USB | 1 × micro-USB console; 1 × USB Type-C; USB Type-A on the rear panel |
| Form factor | Desktop |
| Unit dimensions | 22.5 × 14.9 × 3.5 cm (L × W × H) |
| Weight | 0.97 kg |
| Maximum power consumption | 16,99 W |
| Power supply | 100–240 V AC, 50–60 Hz; optional second power supply, sold separately |
| Logical VLAN/tunnel interfaces | Up to 256 |
| Site-to-site VPN tunnels | Up to 250 |
| Maximum SPI / DPI connections | 1.600.000 / 600.000 |
| Integrated Wi-Fi | No |
| Firewall inspection throughput | 5 Gb/s¹ |
| Application inspection throughput | 3 Gb/s² |
| IPS throughput | 3 Gb/s² |
| Threat prevention throughput | 2.5 Gb/s² |
| IPSec VPN throughput | 2.5 Gb/s³ |
| New connections per second | 26.000 |
| IPSec VPN clients | 10 included; maximum 500 subject to licensing |
| SSL VPN / NetExtender | 2 included; maximum 250 subject to licensing |
| Storage | Optional expansion up to 512 GB; base capacity not specified in the table |
| WWAN USB | Support for compatible USB 5G/LTE/4G/3G cards |
| PoE | No |
| TPM | Not specified in the technical datasheet consulted |
| Physical management interface | X0 LAN/MGMT; no additional dedicated port described |
| Power supply | 60 W |
| TLS/SSL inspection | 800 Mb/s² |
| Maximum TLS connections | 75.000 |
| Metodologia 1 | Firewall: maximum laboratory performance according to RFC 2544. The document does not state the packet size in this note. |
| Metodologia 2 | Manufacturer note 3: Keysight HTTP test tools; Gateway AV, Anti-Spyware, IPS and Application Control enabled. The datasheet links Application Inspection/IPS/Threat Prevention to this note; it does not detail all differences between the individual profiles. |
| Metodologia 3 | VPN: UDP traffic, 1418-byte packets, AESGMAC16-256, according to RFC 2544. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.