SonicWall · TZ Series Gen 8

TZ480 vs TZ580

Of the 58 specifications SonicWall publishes across these two models, 22 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.

The two models

SonicWall TZ480

TZ480

4 Gbps of firewall inspection, 2,500 SAML users and 32 managed access points.

Model
TZ480
Orderable part numbers
52
Full specs and SKUs
SonicWall TZ580

TZ580

4.5 Gbps of firewall inspection, 500,000 DPI connections and 250 site-to-site tunnels.

Model
TZ580
Orderable part numbers
52
Full specs and SKUs

Key differences

The rows most buyers check first. All 22 differences are in the full table below.

  • Firewall Inspection Throughput

    TZ4804 Gbps

    TZ5804.5 Gbps

  • Threat Prevention Throughput

    TZ4802 Gbps

    TZ5802.2 Gbps

  • Application Inspection Throughput

    TZ4802.2 Gbps

    TZ5802.5 Gbps

  • IPS Throughput

    TZ4802.2 Gbps

    TZ5802.5 Gbps

  • Anti-Malware Inspection Throughput

    TZ4802 Gbps

    TZ5802.2 Gbps

  • TLS/SSL Inspection and Decryption Throughput

    TZ480650 Mbps

    TZ580750 Mbps

Which one fits

Stepping up from the TZ480 to the TZ580 moves IPS throughput from 2.2 Gbps to 2.5 Gbps (+14%), firewall inspection throughput from 4 Gbps to 4.5 Gbps (+13%) and TLS inspection throughput from 650 Mbps to 750 Mbps (+15%). Neither choice moves threat-prevention throughput (2 Gbps against 2.2 Gbps) or IPsec VPN throughput (2 Gbps against 2.2 Gbps), so a site held back by traffic run through the whole inspection stack gains nothing from the TZ580. The TZ480 is in fact ahead on power draw: 13.77 W against 15.6 W.

Choose the TZ480 if

  • IPS throughput is already enough at 2.2 Gbps: the TZ580 adds +14% you will not use.
  • The TZ480 is ahead on power draw: 13.77 W against 15.6 W.
  • Your limit is traffic run through the whole inspection stack, which the step up does not move: 2 Gbps against 2.2 Gbps.

Choose the TZ580 if

  • IPS throughput has to go past 2.2 Gbps: the TZ580 publishes 2.5 Gbps.
  • Firewall inspection throughput has to go past 4 Gbps: the TZ580 publishes 4.5 Gbps.
  • TLS inspection throughput has to go past 650 Mbps: the TZ580 publishes 750 Mbps.
  • The inspected connection table has to go past 350,000: the TZ580 publishes 500,000.

36 of the 58 published rows are identical — Operating System at SonicOS 8, SAML Single Sign-On Users at 2,500, Access Points Supported at 32 and Form Factor at Desktop among them — so the choice does not touch any of those.

Full specification comparison

Every published row for both models, grouped the way SonicWall groups them. A dash means the figure is not published for that model.

Full specification comparison of the TZ480 and the TZ580
Specification TZ480 TZ580
Firewall General
Operating SystemSonicOS 8SonicOS 8
Interfaces8 x 1GbE RJ45, 2 x 5G/2.5G/1G SFP+, 1 console (Micro-USB), 1 USB (Type-C)8 x 1GbE RJ45, 2 x 5G/2.5G/1G SFP+, 1 console (Micro-USB), 1 USB (Type-C)
WirelessNot fittedNot fitted
Power over Ethernet (PoE)Not fittedNot fitted
Internal Storage (expansion)Optional, up to 512 GBOptional, up to 512 GB
Centralized ManagementNetwork Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIsNetwork Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs
Logical VLAN and Tunnel Interfaces128256
SAML Single Sign-On Users2,5002,500
Access Points Supported3232
Firewall and VPN Performance
Firewall Inspection Throughput4 Gbps4.5 Gbps
Threat Prevention Throughput2 Gbps2.2 Gbps
Application Inspection Throughput2.2 Gbps2.5 Gbps
IPS Throughput2.2 Gbps2.5 Gbps
Anti-Malware Inspection Throughput2 Gbps2.2 Gbps
TLS/SSL Inspection and Decryption Throughput650 Mbps750 Mbps
IPSec VPN Throughput2 Gbps2.2 Gbps
Connections per Second18,00020,000
Maximum Connections (SPI)1,200,0001,400,000
Maximum Connections (DPI)350,000500,000
Maximum Connections (TLS)50,00060,000
VPN
Site-to-Site VPN Tunnels200250
IPSec VPN Clients5 (200 maximum)10 (500 maximum)
SSL VPN Licences2 (150 maximum)2 (200 maximum)
Encryption / AuthenticationDES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B CryptographyDES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography
Key ExchangeDiffie Hellman Groups 1, 2, 5, 14Diffie Hellman Groups 1, 2, 5, 14
Route-Based VPNRIP, OSPF, BGPRIP, OSPF, BGP
VPN FeaturesDead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNDead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN Client PlatformsMicrosoft Windows 10 and Windows 11Microsoft Windows 10 and Windows 11
NetExtenderMicrosoft Windows 10 and Windows 11, LinuxMicrosoft Windows 10 and Windows 11, Linux
Mobile ConnectApple iOS, macOS, Google AndroidApple iOS, macOS, Google Android
Security Features
Deep Packet Inspection ServicesGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS DecryptionGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering ServiceReputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanningReputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning
Comprehensive Anti-Spam ServiceYesYes
Application VisualizationYesYes
Application ControlYesYes
Capture Advanced Threat ProtectionYesYes
Advanced DNS FilteringYesYes
Networking
NAT Modes1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routingBGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoSBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM)Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM)
AuthenticationLDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CACLDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC
Local User Database1,0001,000
VoIPFull H.323v5, SIPFull H.323v5, SIP
High AvailabilityActive/Standby with stateful synchronizationActive/Standby with stateful synchronization
Hardware and Power
Form FactorDesktopDesktop
Power Supply12V / 1.13A12V / 1.34A
Input Power100-240 VAC, 50-60 Hz, 0.27A100-240 VAC, 50-60 Hz, 0.29A
Power Consumption13.77 W maximum15.6 W maximum
Redundant Power SupplyOptionalOptional
Total Heat Dissipation42.43 BTU/hr56.74 BTU/hr
Dimensions (H x W x D)3.5 x 13 x 19 cm3.5 x 13 x 19 cm
Weight0.82 kg0.97 kg
Shipping Weight1.41 kg1.93 kg
MTBF at 25°C52.8 years30.7 years
Operating Temperature0°C to +40°C0°C to +40°C
Storage Temperature-40°C to +70°C-40°C to +70°C
Humidity5-95% non-condensing5-95% non-condensing
Regulatory Model NumberAPL72-120APL72-120

Other comparisons in this range

Each step of the TZ Series Gen 8 ladder, set against the model above it.

All SonicWall comparisons

Not sure which one fits?

Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.

Request a Quote