SonicWall · TZ Series Gen 8

TZ80 vs TZ280

Of the 70 specifications SonicWall publishes across these two models, 58 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.

The two models

SonicWall TZ80

TZ80

The subscription-based entry model: 750 Mbps across every inspection engine in a palm-sized box, for a home office, a micro-site or an IoT segment.

Model
TZ80
Orderable part numbers
58
Full specs and SKUs
SonicWall TZ280

TZ280

The entry point to Gen 8: 2.5 Gbps of firewall inspection and eight gigabit ports in a fanless desktop unit.

Model
TZ280
Orderable part numbers
52
Full specs and SKUs

Key differences

The rows most buyers check first. All 58 differences are in the full table below.

  • Firewall Inspection Throughput

    TZ80750 Mbps

    TZ2802.5 Gbps

  • Threat Prevention Throughput

    TZ80750 Mbps

    TZ2801 Gbps

  • Application Inspection Throughput

    TZ80750 Mbps

    TZ2801.5 Gbps

  • IPS Throughput

    TZ80750 Mbps

    TZ2801.5 Gbps

  • Anti-Malware Inspection Throughput

    TZ80750 Mbps

    TZ2801 Gbps

  • IPSec VPN Throughput

    TZ80750 Mbps

    TZ2801.2 Gbps

Which one fits

Stepping up from the TZ80 to the TZ280 moves threat-prevention throughput from 750 Mbps to 1 Gbps (+33%), IPS throughput from 750 Mbps to 1.5 Gbps (2×) and firewall inspection throughput from 750 Mbps to 2.5 Gbps (3.3×). Neither choice moves power draw (11.6 W against 12.36 W), so a site held back by the power and cooling budget gains nothing from the TZ280.

Choose the TZ80 if

  • Threat-prevention throughput is already enough at 750 Mbps: the TZ280 adds +33% you will not use.
  • Your limit is the power and cooling budget, which the step up does not move: 11.6 W against 12.36 W.

Choose the TZ280 if

  • Threat-prevention throughput has to go past 750 Mbps: the TZ280 publishes 1 Gbps.
  • IPS throughput has to go past 750 Mbps: the TZ280 publishes 1.5 Gbps.
  • Firewall inspection throughput has to go past 750 Mbps: the TZ280 publishes 2.5 Gbps.
  • Only the TZ280 has Shipping Weight (1.41 kg).

Full specification comparison

Every published row for both models, grouped the way SonicWall groups them. A dash means the figure is not published for that model.

Full specification comparison of the TZ80 and the TZ280
Specification TZ80 TZ280
Firewall General
Operating SystemSonicOSSonicOS 8
Interfaces4 x 1GbE copper, 1 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C or Type-A)8 x 1GbE RJ45, 2 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C)
Centralized ManagementNetwork Security Manager (2.6 and above), CLI, SSH, Web UI, REST APIsNetwork Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs
Single Sign-On Users250Not published
Logical VLAN Interfaces64Not published
Access Points Supported216
WirelessNot publishedNot fitted - see the TZ280W for the 802.11ax model
Power over Ethernet (PoE)Not publishedNot fitted - see the TZ280P for the PoE model
Internal Storage (expansion)Not publishedOptional, up to 512 GB
Logical VLAN and Tunnel InterfacesNot published64
SAML Single Sign-On UsersNot published1,000
Firewall and VPN Performance
Firewall Inspection Throughput750 Mbps2.5 Gbps
Threat Prevention Throughput750 Mbps1 Gbps
Application Inspection Throughput750 Mbps1.5 Gbps
IPS Throughput750 Mbps1.5 Gbps
Anti-Malware Inspection Throughput750 Mbps1 Gbps
TLS/SSL Inspection and Decryption Throughput (DPI SSL)250 MbpsNot published
IPSec VPN Throughput750 Mbps1.2 Gbps
Connections per Second7,50012,000
Maximum Connections (SPI)300,0001,000,000
Maximum Connections (DPI)75,000200,000
Maximum Connections (DPI SSL)10,000Not published
TLS/SSL Inspection and Decryption ThroughputNot published430 Mbps
Maximum Connections (TLS)Not published35,000
VPN
Site-to-Site VPN Tunnels50200
IPSec VPN Clients1 (5 maximum)5 (200 maximum)
SSL VPN Licences1 (5 maximum)1 (50 maximum)
Encryption / AuthenticationDES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-1, Suite B CryptographyDES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography
Key ExchangeDiffie Hellman Groups 1, 2, 5, 14vDiffie Hellman Groups 1, 2, 5, 14
Route-Based VPNRIP, OSPF, BGPRIP, OSPF, BGP
Certificate SupportVerisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPNot published
VPN FeaturesDead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPNDead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN Client PlatformsMicrosoft Windows 10Microsoft Windows 10 and Windows 11
NetExtenderMicrosoft Windows 10, LinuxMicrosoft Windows 10 and Windows 11, Linux
Mobile ConnectApple iOS, macOS, Google Android, Kindle Fire, Chrome OS, Windows 10Apple iOS, macOS, Google Android
Security Features
Deep Packet Inspection ServicesGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSLGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering ServiceHTTP URL, HTTPS IP, keyword and content scanning, filtering on file types such as ActiveX, Java and cookies, allow/forbid listsReputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning
Comprehensive Anti-Spam ServiceYesYes
Application VisualizationYesYes
Application ControlYesYes
Capture Advanced Threat ProtectionYesYes
DNS FilteringYesNot published
Cloud Secure Edge (Secure Private Access)YesNot published
Advanced DNS FilteringNot publishedYes
Networking
IP Address AssignmentStatic, DHCP, PPPoE, L2TP and PPTP client, internal DHCP server, DHCP relayNot published
NAT Modes1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routingBGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoSBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM)Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM)
AuthenticationLDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC
Local User Database1501,000
VoIPFull H.323v1-5, SIPFull H.323v5, SIP
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3Not published
CertificationsCSfC (pending)Not published
High AvailabilityActive/Standby with stateful synchronizationActive/Standby with stateful synchronization
Hardware and Power
Form FactorDesktopDesktop
Power Supply36 W external, 12V DC12V / 1.03A (60 W)
Input Power100-240 VAC, 50-60 Hz, 3A100-240 VAC, 50-60 Hz, 0.27A
Power Consumption11.6 W maximum12.36 W maximum
Total Heat Dissipation39.6 BTU/hr42.43 BTU/hr
Dimensions (W x D x H)200.3 x 113.6 x 30.2 mmNot published
Weight0.438 kg0.82 kg
Shipping Weight0.973 kg1.41 kg
MTBF at 26°C64.3 yearsNot published
Operating Temperature0°C to 40°C0°C to +40°C
Storage Temperature-40°C to 70°C-40°C to +70°C
Humidity5-95% non-condensing5-95% non-condensing
Regulatory Model NumberAPL69-11BAPL70-11D
Redundant Power SupplyNot publishedOptional
Dimensions (H x W x D)Not published3.5 x 13 x 19 cm
MTBF at 25°CNot published51.7 years

Other comparisons in this range

Each step of the TZ Series Gen 8 ladder, set against the model above it.

All SonicWall comparisons

Not sure which one fits?

Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.

Request a Quote