Skip to content

SonicWall TZ670

Choose from the available models below. By default the first in stock option is shown.

NZD Price inc GST:

$7,291.35

SKU: 02-SSC-5659

If you can't find the item you are after in stock, please chat to us.  Supply chain issues mean these are often ordered directly from SonicWall for each customer with a lead time of around 14 days.


Chat 9am to 11pm - 7 days a week

We love what we do!

 Shipping Costs From

Standard - $12 or Express - $15

Want The Best Prices?

Request a quote


The SonicWall TZ670 series, is the first desktop-form factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces.

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class price performance.

TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

Features:


10 GbE interfaces in a desktop form factor
SD-Branch ready
Secure SD-WAN capability
SonicExpress mobile App onboarding
Zero-Touch Deployment
Single-pane-of-glass-management through cloud or firewall
SonicWall Switch, SonicWave Access Point and Capture Client integration
Built-in and expandable storage
Redundant power
High port density
Cellular failover
SonicOS 7.0
Groundbreaking performance
High connection count
Fast DPI performance
Low TCO

  • SonicWall TZ570 & TZ670
  • Datasheets and Guides

Click HERE to access the Datasheet

Click HERE to access the Installation Guide


subscriptions & accessories

SonicWall Parts & Accessories


  • Which Model?
  • Which Subscription?
  • More protection?
  • Thinking  Wireless?

The SonicWall TZ Series Appliance range is currently made up of 5 models, with wireless and PoE options  These are ideal for small to midsize organizations looking for a small form factor, strong throughput and enterprise-grade security.  The table below highlights the main features of each model.


Options

Wireless Model Available

2x2 802.11ac Wave 2 Wireless Available On TZ270, TZ370, TZ470 & TZ570

Power over Ethernet

5 x PoE or 3 x PoE+ Available On TZ 570 Only

Storage Expansion

Optional up to 256Gb on all Models - TZ670 includes 32Gb as standard

Redundant Power Supply

Available on TZ570 & TZ670

Throughput

Firewall Inspection

TZ270 (2 Gbps), TZ370 (3 Gbps) TZ470 (3.5 Gbps), TZ570 (4 Gbps), TZ670 (5 Gbps)

Threat Prevention

TZ270 (750 Mbps), TZ370 (1 Gbps) TZ470 (1.5 Gbps), TZ570 (2 Gbps), TZ670 (2.5 Gbps)

Application Control

TZ270 (1 Gbps), TZ370 (1.5 Gbps) TZ470 (2 Gbps), TZ570 (2.5 Gbps), TZ670 (3 Gbps)

Intrusion Prevention

TZ270 (1 Gbps), TZ370 (1.5 Gbps) TZ470 (2 Gbps), TZ570 (2.5 Gbps), TZ670 (3 Gbps)

Anti-Malware

TZ270 (750 Mbps), TZ370 (1 Gbps) TZ470 (1.5 Gbps), TZ570 (2 Gbps), TZ670 (2.5 Gbps)

Deep Pack Inspection (DPI) TLS/SSL

TZ270 (300 Mbps), TZ370 (500 Mbps) TZ470 (600 Mbps), TZ570 (750 Mbps), TZ670 (800 Mbps)

IPSec VPN

TZ270 (750 Mbps), TZ370 (1.38 Gbps) TZ470 (1.5 Gbps), TZ570 (1.8 Gbps), TZ670 (2.1 Gbps)

Connections Per Second

TZ270 (6000), TZ370 (9000) TZ470 (12000), TZ570 (16000), TZ670 (25000)

capacity

Interfaces

All Models 8 x 1GbE,  TZ470 2 x 2.5G SFP+,  TZ570 2 x 5G SFP+,  TZ670 2 x 10G SFP+

Access Points Supported

TZ270/370 - 16,  TZ470/570/670 - 32

VLANs

TZ270 - 64,  TZ370/470 - 128,  TZ570/670 - 256

Local User Database

TZ270 - 150,  TZ370/470/570/670 - 250

VPN Tunnels & Licenses

Site to Site VPN Tunnels

TZ270 - 50,  TZ370 - 100,  TZ470 - 150,  TZ570 - 200,  TZ670 - 250

IPSec VPN Clients (Maximum)

TZ270/370/470 - 5 Included (200),  TZ570/670 - 10 Included (500)

SSL VPN Licenses (Maximum)

TZ270 - 1 (50),  TZ370 - 2 (100),  TZ470 - 2 (150),  TZ570 - 2 (200),  TZ670 - 2 (250)

Our Serving suggestion

Internet Speed

<  100 Mbps
TZ270/TZ370

<  250 Mbps
TZ470/TZ570

<  500 Mbps
TZ570/TZ670

Number of Users

< 25

< 50

< 100

Paul's Quick Tip

So here's my quick tip for selecting a SonicWall TZ Series firewall to meet your needs.  Having sold and managed literally thousands of firewalls across the world since I started in 1999, I have noticed one thing - Our browsing and data consuming habits effect a firewall's throughput.  All the tests above were preformed in labs and under controlled conditions.  


I would always recommend taking the slowest speed published - in this instance something like the TLS/HTTPS value and then dividing it by three.   This will give you, from our experience, the worst speed you will get under the heaviest load conditions, will full protection turned on.   Make sure this speed is faster than your internet connection and you will be good to go.


Example using a SonicWall TZ 270

TLS/HTTPS speed is 300 Mbps, divide this by 3 which gives you 100 Mbps.  This is the slowest we believe this firewall will run under the heaviest of loads.  Obviously if you want to turn some of the security services off, then you will make it run faster.


The Tech Geeks - Paul Sillars

Gio's Advice

Your firewall is nothing without a live and updating subscription.  Viruses, Malware and network threats, change almost hourly.  Purchasing a security subscription means that your firewall will always be receiving the latest threat signatures, virus protection updates and filter block lists.


The best bit is that an active security subscription also gives you free firmware updates, technical support from SonicWall and hardware warranty for the duration of the subscription.


Never view a security subscription like the warranty for a car.   It is not there just in case something goes wrong, it is actually needed to make sure nothing goes wrong.  You are only truly being protected if your firewall is auto updating and has an active subscription.


Support

In addition to stateful firewalling, the Support license includes firmware updates, hardware warranty and telephone / email support from SonicWall

Essential protection

The Essential Protection Suite provides all

essential security services needed to protect against known & unknown threats, as well as firmware updates, hardware warranty and 24x7 support

advanced protection

The Advanced Protection Suite includes all services offered with the Essential Protection Suite plus additional reporting and analytic tools hosted in the cloud - extending your devices management and visibility.

support ONLY

ESSential

advanced

24x7 Support

Telephone and email support, when you need it most, along with hardware replacement warranty.

Fimware Updates

Keep your SonicWall patched and up to date with regular firmware updates.

Stateful Firewall

A stateful firewall is simply not enough anymore, but is a start.  It allows source, destination, port and protocol blocking.

VPN

A VPN enables secure, encrypted connections between networks and devices at geographically separated locations.  Each SonicWall has a limitation on the number of Site to Site VPNs it supports and also comes pre-loaded with a number of end user VPN Licenses - License upgrades are sold separately.

Intrusion Prevention Service

Cutting-edge IPS technology protects against worms, trojans, software vulnerabilities and other intrusions by scanning all network traffic for malicious or anomalous patterns, thereby increasing network reliability and performance.

Application Control

Application intelligence and control is a set of granular, application-specific policies providing application classification and policy enforcement to help administrators control and manage both business and non-business related applications.

Content Filtering Service

Content Filtering Services (CFS) lets you enforce Internet use policies and control internal access to inappropriate, unproductive and potentially illegal web content with comprehensive content filtering. Website ratings cached locally on SonicWall firewalls make response time to frequently visited sites virtually instantaneous. Dynamically updated rating architecture cross-references all requested websites against a database in the cloud containing millions of URLs, IP addresses and domains and then compares each rating to the local policy setting. 

DNS Security - Basic

DNS Security provides better TTD(Time to Detect) and improving TCO(Total cost of ownership). DNS security inspects DNS fields to identify malicious domains and thus block connection at very early stage of connection establishment. SonicWall has petabytes of threat data that helps classify domain as malicious, reducing

false positives

Gateway Anti-Malware

ICSA-certified gateway anti-virus and anti-spyware protection combines

network-based anti-malware with a dynamically updated cloud database of

tens of millions of malware signatures. This adds deep security protection

against advanced modern threats continuously in real time. Dynamic spyware protection blocks the installation of malicious spyware and disrupts existing spyware communications. 

GeoIP Updates

Identifies and controls network traffic going to or coming from specific countries to either protect against attacks from known or suspected origins of threat activity, or to investigate suspicious traffic originating from the network. Ability to create custom country and Botnet lists to override an incorrect country or Botnet tag associated with an IP address. Eliminates unwanted filtering of IP addresses due to misclassification.

Botnet Service

Identifies and blocks command and control traffic originating from bots on the local network to IPs and domains that are identified as propagating malware or are known CnC points. 

Comprehensive Anti-Spam Service

CASS offers Small- to medium sized businesses comprehensive protection from spam and viruses, with instant deployment over existing SonicWall firewalls. CASS speeds deployment, eases administration and reduces overhead by consolidating solutions, providing one-click anti-spam services, with advanced configuration in just ten minutes.

Capture ATP – Sandboxing (Static, RTDMI, Memory, Hypervisor, Emulation)

Capture Advanced Threat Protection (ATP) Service revolutionizes advanced

threat detection and sandboxing with a cloud-based, multi-engine solution for stopping unknown and zero-day attacks at the gateway.

Security Rating Tool

SonicWall Risk Meters is a personalized threat information and risk scoring service that reveals gaps in defensive layers, fosters decisive security planning and facilitates actions needed for an optimal cyber defense.

NSM (Cloud) Management

SonicWall Network Security Manager (NSM) allows you to centrally orchestrate all firewall operations error-free, see and manage threats and risks across your firewall ecosystem from one place, and stay connected and compliant. 

NSM (Cloud) Reporting - 7 Days Retention

Increase your network visibility by retaining 7 days of analytic data, allowing you to review and report on network incidents, issues and usage.

Sonicwall tz series - further information

SonicWall Gen 7 TZ Series Overview

Enterprise security without complexity

The SonicWall TZ series of firewalls is designed specifically for the needs of SMBs and branch locations, delivering enterprise-class security without the enterprise-grade complexity.


With Zero-Touch Deployment and simplified centralized management, installation and operation is easy. Detect sophisticated threats, including encrypted attacks, with advanced networking and security features, like the multi-engine Capture Advanced Threat Protection (ATP) cloud-based sandbox service with patent-pending Real-Time Deep Memory Inspection (RTDMI™). With optional features like PoE/PoE+ support and 802.11ac Wi-Fi, create a unified security solution for wired and wireless networks.

SonicWall Network Security Manager (NSM)

Centralized Management - Elevated Security

As the number of firewalls in your distributed enterprise grows, so too does the challenge of managing them. SonicWall Network Security Manager scales with your business and your security needs. 


From a single console, orchestrate all firewall operations, see hidden risks, discover misconfigured policies, and make compliance easier with a full audit trail. With a SonicWall NSM, centralize firewall management and gain more capability, not more complexity.

SonicWall Secure SD-Branch

Protect your remote networks with ease

SonicWall Secure Software-Defined Branch (SD-Branch) improves user experience and secures connectivity at branch offices. 


This integrated solution combines SD-LAN, SD-WAN and security for distributed enterprises, allowing you to take advantage of cheaper connectivity between HQ and branches, safeguard BYOD and SaaS applications, and scale easily with the rise in mobile devices.

information hub

What happens if I don't renew my SonicWall Subscription?

For the best protection a firewall will always need an active and configured security subscription.   If this has lapsed or your are thinking about not renewing it, then the following will happen.


1 - You will loose the option to get free support from the Manufacturer

2 - You will loose all hardware warranty and if your physical unit fails, you will no longer be able to get a free replacement

3 - Any firewall polices that use subscription services will need to be updated to remove them, otherwise they will often switch in to blocking mode.

Is support included in the subscription?

Support is included as standard in the 3 main subscription offerings - Standard Support, Essential Protection and Advanced Protection Suites.   This support includes telephone and email support direct with SonicWall, Firmware Updates and Hardware Warranty.

Is hardware warranty included?

If you have a current Standard Support, Essential or Advanced subscription then hardware replacement is included for the length of time you keep that subscription current.  Please do note that in the case of hardware failure, SonicWall will ship you a replacement from outside of Australia.   You may like to consider additional next business day hardware warranty services to supplement this, to get you back and running as quickly as possible.

What options do I have to get additional support if I get stuck?

We know that sometimes we just need that extra little bit of help and support.   The Tech Geeks have a team that are qualified to assist you and get your back on track as quickly as possible.   We offer rates from $150 + GST per hour and would be happy to quote for any work that you need help with.

Real world performance tests

The below tests have been conducted on a dedicated 1:1 uncontended 1Gb/s fibre connection