SonicWall · TZ Series Gen 8

TZ580 vs TZ680

Of the 58 specifications SonicWall publishes across these two models, 17 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.

The two models

SonicWall TZ580

TZ580

4.5 Gbps of firewall inspection, 500,000 DPI connections and 250 site-to-site tunnels.

Model
TZ580
Orderable part numbers
52
Full specs and SKUs
SonicWall TZ680

TZ680

The top of the Gen 8 TZ range: 5 Gbps of firewall inspection and two 10G SFP uplinks.

Model
TZ680
Orderable part numbers
52
Full specs and SKUs

Key differences

The rows most buyers check first. All 17 differences are in the full table below.

  • Firewall Inspection Throughput

    TZ5804.5 Gbps

    TZ6805 Gbps

  • Threat Prevention Throughput

    TZ5802.2 Gbps

    TZ6802.5 Gbps

  • Application Inspection Throughput

    TZ5802.5 Gbps

    TZ6803 Gbps

  • IPS Throughput

    TZ5802.5 Gbps

    TZ6803 Gbps

  • Anti-Malware Inspection Throughput

    TZ5802.2 Gbps

    TZ6802.5 Gbps

  • TLS/SSL Inspection and Decryption Throughput

    TZ580750 Mbps

    TZ680800 Mbps

Which one fits

Stepping up from the TZ580 to the TZ680 moves threat-prevention throughput from 2.2 Gbps to 2.5 Gbps (+14%), IPS throughput from 2.5 Gbps to 3 Gbps (+20%) and firewall inspection throughput from 4.5 Gbps to 5 Gbps (+11%). Neither choice moves TLS inspection throughput (750 Mbps against 800 Mbps) or the site-to-site tunnel count (both 250), so a site held back by how much HTTPS can be decrypted and inspected gains nothing from the TZ680.

Choose the TZ580 if

  • Threat-prevention throughput is already enough at 2.2 Gbps: the TZ680 adds +14% you will not use.
  • Your limit is how much HTTPS can be decrypted and inspected, which the step up does not move: 750 Mbps against 800 Mbps.

Choose the TZ680 if

  • Threat-prevention throughput has to go past 2.2 Gbps: the TZ680 publishes 2.5 Gbps.
  • IPS throughput has to go past 2.5 Gbps: the TZ680 publishes 3 Gbps.
  • Firewall inspection throughput has to go past 4.5 Gbps: the TZ680 publishes 5 Gbps.
  • The inspected connection table has to go past 500,000: the TZ680 publishes 600,000.

41 of the 58 published rows are identical — Operating System at SonicOS 8, Logical VLAN and Tunnel Interfaces at 256, SAML Single Sign-On Users at 2,500 and Access Points Supported at 32 among them — so the choice does not touch any of those.

Full specification comparison

Every published row for both models, grouped the way SonicWall groups them. A dash means the figure is not published for that model.

Full specification comparison of the TZ580 and the TZ680
Specification TZ580 TZ680
Firewall General
Operating SystemSonicOS 8SonicOS 8
Interfaces8 x 1GbE RJ45, 2 x 5G/2.5G/1G SFP+, 1 console (Micro-USB), 1 USB (Type-C)8 x 1GbE RJ45, 2 x 10G SFP, 1 console (Micro-USB), 1 USB (Type-C)
WirelessNot fittedNot fitted
Power over Ethernet (PoE)Not fittedNot fitted
Internal Storage (expansion)Optional, up to 512 GBOptional, up to 512 GB
Centralized ManagementNetwork Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIsNetwork Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs
Logical VLAN and Tunnel Interfaces256256
SAML Single Sign-On Users2,5002,500
Access Points Supported3232
Firewall and VPN Performance
Firewall Inspection Throughput4.5 Gbps5 Gbps
Threat Prevention Throughput2.2 Gbps2.5 Gbps
Application Inspection Throughput2.5 Gbps3 Gbps
IPS Throughput2.5 Gbps3 Gbps
Anti-Malware Inspection Throughput2.2 Gbps2.5 Gbps
TLS/SSL Inspection and Decryption Throughput750 Mbps800 Mbps
IPSec VPN Throughput2.2 Gbps2.5 Gbps
Connections per Second20,00026,000
Maximum Connections (SPI)1,400,0001,600,000
Maximum Connections (DPI)500,000600,000
Maximum Connections (TLS)60,00075,000
VPN
Site-to-Site VPN Tunnels250250
IPSec VPN Clients10 (500 maximum)10 (500 maximum)
SSL VPN Licences2 (200 maximum)2 (250 maximum)
Encryption / AuthenticationDES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B CryptographyDES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography
Key ExchangeDiffie Hellman Groups 1, 2, 5, 14Diffie Hellman Groups 1, 2, 5, 14
Route-Based VPNRIP, OSPF, BGPRIP, OSPF, BGP
VPN FeaturesDead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNDead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN Client PlatformsMicrosoft Windows 10 and Windows 11Microsoft Windows 10 and Windows 11
NetExtenderMicrosoft Windows 10 and Windows 11, LinuxMicrosoft Windows 10 and Windows 11, Linux
Mobile ConnectApple iOS, macOS, Google AndroidApple iOS, macOS, Google Android
Security Features
Deep Packet Inspection ServicesGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS DecryptionGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering ServiceReputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanningReputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning
Comprehensive Anti-Spam ServiceYesYes
Application VisualizationYesYes
Application ControlYesYes
Capture Advanced Threat ProtectionYesYes
Advanced DNS FilteringYesYes
Networking
NAT Modes1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routingBGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoSBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM)Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM)
AuthenticationLDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CACLDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC
Local User Database1,0001,000
VoIPFull H.323v5, SIPFull H.323v5, SIP
High AvailabilityActive/Standby with stateful synchronizationActive/Standby with stateful synchronization
Hardware and Power
Form FactorDesktopDesktop
Power Supply12V / 1.34A12V / 1.34A
Input Power100-240 VAC, 50-60 Hz, 0.29A100-240 VAC, 50-60 Hz, 0.27A
Power Consumption15.6 W maximum16.99 W maximum
Redundant Power SupplyOptionalOptional
Total Heat Dissipation56.74 BTU/hr57.93 BTU/hr
Dimensions (H x W x D)3.5 x 13 x 19 cm3.5 x 13 x 19 cm
Weight0.97 kg0.97 kg
Shipping Weight1.93 kg1.93 kg
MTBF at 25°C30.7 years29.9 years
Operating Temperature0°C to +40°C0°C to +40°C
Storage Temperature-40°C to +70°C-40°C to +70°C
Humidity5-95% non-condensing5-95% non-condensing
Regulatory Model NumberAPL72-120APL72-120

Other comparisons in this range

Each step of the TZ Series Gen 8 ladder, set against the model above it.

All SonicWall comparisons

Not sure which one fits?

Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.

Request a Quote