TZ380
3.5 Gbps of firewall inspection and two 5G/2.5G SFP+ uplinks, for a branch outgrowing gigabit.
Full specs and SKUsSonicWall · TZ Series Gen 8
TZ380 vs TZ480
Of the 58 specifications SonicWall publishes across these two models, 17 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
TZ480
4 Gbps of firewall inspection, 2,500 SAML users and 32 managed access points.
Full specs and SKUsKey differences
The rows most buyers check first. All 17 differences are in the full table below.
-
Firewall Inspection Throughput
TZ3803.5 Gbps
TZ4804 Gbps
-
Threat Prevention Throughput
TZ3801.5 Gbps
TZ4802 Gbps
-
Application Inspection Throughput
TZ3802 Gbps
TZ4802.2 Gbps
-
IPS Throughput
TZ3802 Gbps
TZ4802.2 Gbps
-
TLS/SSL Inspection and Decryption Throughput
TZ380600 Mbps
TZ480650 Mbps
-
IPSec VPN Throughput
TZ3801.6 Gbps
TZ4802 Gbps
Which one fits
Stepping up from the TZ380 to the TZ480 moves threat-prevention throughput from 1.5 Gbps to 2 Gbps (+33%), firewall inspection throughput from 3.5 Gbps to 4 Gbps (+14%) and the inspected connection table from 250,000 to 350,000 (+40%). Neither choice moves IPS throughput (2 Gbps against 2.2 Gbps) or TLS inspection throughput (600 Mbps against 650 Mbps), so a site held back by traffic run with intrusion prevention on gains nothing from the TZ480.
Choose the TZ380 if
- Threat-prevention throughput is already enough at 1.5 Gbps: the TZ480 adds +33% you will not use.
- Your limit is traffic run with intrusion prevention on, which the step up does not move: 2 Gbps against 2.2 Gbps.
Choose the TZ480 if
- Threat-prevention throughput has to go past 1.5 Gbps: the TZ480 publishes 2 Gbps.
- Firewall inspection throughput has to go past 3.5 Gbps: the TZ480 publishes 4 Gbps.
- The inspected connection table has to go past 250,000: the TZ480 publishes 350,000.
- The connection setup rate has to go past 15,000: the TZ480 publishes 18,000.
41 of the 58 published rows are identical — Operating System at SonicOS 8, Logical VLAN and Tunnel Interfaces at 128, Site-to-Site VPN Tunnels at 200 and Form Factor at Desktop among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way SonicWall groups them. A dash means the figure is not published for that model.
| Specification | TZ380 | TZ480 |
|---|---|---|
| Firewall General | ||
| Operating System | SonicOS 8 | SonicOS 8 |
| Interfaces | 8 x 1GbE RJ45, 2 x 5G/2.5G/1G SFP+, 1 console (Micro-USB), 1 USB (Type-C) | 8 x 1GbE RJ45, 2 x 5G/2.5G/1G SFP+, 1 console (Micro-USB), 1 USB (Type-C) |
| Wireless | Not fitted - see the TZ380W for the 802.11ax model | Not fitted |
| Power over Ethernet (PoE) | Not fitted | Not fitted |
| Internal Storage (expansion) | Optional, up to 512 GB | Optional, up to 512 GB |
| Centralized Management | Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs | Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs |
| Logical VLAN and Tunnel Interfaces | 128 | 128 |
| SAML Single Sign-On Users | 1,000 | 2,500 |
| Access Points Supported | 16 | 32 |
| Firewall and VPN Performance | ||
| Firewall Inspection Throughput | 3.5 Gbps | 4 Gbps |
| Threat Prevention Throughput | 1.5 Gbps | 2 Gbps |
| Application Inspection Throughput | 2 Gbps | 2.2 Gbps |
| IPS Throughput | 2 Gbps | 2.2 Gbps |
| Anti-Malware Inspection Throughput | 2 Gbps | 2 Gbps |
| TLS/SSL Inspection and Decryption Throughput | 600 Mbps | 650 Mbps |
| IPSec VPN Throughput | 1.6 Gbps | 2 Gbps |
| Connections per Second | 15,000 | 18,000 |
| Maximum Connections (SPI) | 1,100,000 | 1,200,000 |
| Maximum Connections (DPI) | 250,000 | 350,000 |
| Maximum Connections (TLS) | 40,000 | 50,000 |
| VPN | ||
| Site-to-Site VPN Tunnels | 200 | 200 |
| IPSec VPN Clients | 5 (200 maximum) | 5 (200 maximum) |
| SSL VPN Licences | 2 (100 maximum) | 2 (150 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14 | Diffie Hellman Groups 1, 2, 5, 14 |
| Route-Based VPN | RIP, OSPF, BGP | RIP, OSPF, BGP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms | Microsoft Windows 10 and Windows 11 | Microsoft Windows 10 and Windows 11 |
| NetExtender | Microsoft Windows 10 and Windows 11, Linux | Microsoft Windows 10 and Windows 11, Linux |
| Mobile Connect | Apple iOS, macOS, Google Android | Apple iOS, macOS, Google Android |
| Security Features | ||
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption |
| Content Filtering Service | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning |
| Comprehensive Anti-Spam Service | Yes | Yes |
| Application Visualization | Yes | Yes |
| Application Control | Yes | Yes |
| Capture Advanced Threat Protection | Yes | Yes |
| Advanced DNS Filtering | Yes | Yes |
| Networking | ||
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM) | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC |
| Local User Database | 1,000 | 1,000 |
| VoIP | Full H.323v5, SIP | Full H.323v5, SIP |
| High Availability | Active/Standby with stateful synchronization | Active/Standby with stateful synchronization |
| Hardware and Power | ||
| Form Factor | Desktop | Desktop |
| Power Supply | 12V / 1.14A | 12V / 1.13A |
| Input Power | 100-240 VAC, 50-60 Hz, 0.27A | 100-240 VAC, 50-60 Hz, 0.27A |
| Power Consumption | 13.77 W maximum | 13.77 W maximum |
| Redundant Power Supply | Optional | Optional |
| Total Heat Dissipation | 46.95 BTU/hr | 42.43 BTU/hr |
| Dimensions (H x W x D) | 3.5 x 13 x 19 cm | 3.5 x 13 x 19 cm |
| Weight | 0.82 kg | 0.82 kg |
| Shipping Weight | 1.41 kg | 1.41 kg |
| MTBF at 25°C | 46.4 years | 52.8 years |
| Operating Temperature | 0°C to +40°C | 0°C to +40°C |
| Storage Temperature | -40°C to +70°C | -40°C to +70°C |
| Humidity | 5-95% non-condensing | 5-95% non-condensing |
| Regulatory Model Number | APL72-120 | APL72-120 |
Other comparisons in this range
Each step of the TZ Series Gen 8 ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote