SonicWall TZ280
The entry point to Gen 8: 2.5 Gbps of firewall inspection and eight gigabit ports in a fanless desktop unit.
SonicOS 82.5 Gbps firewall1 Gbps threat preventionWi-Fi 6 built inDesktop
- 2.5 Gbps firewall inspection, 1 Gbps with threat prevention on
- 8 x 1GbE RJ45, 2 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C)
- 1,000,000 SPI connections, 200,000 with deep packet inspection
- 1.2 Gbps IPSec VPN and 200 site-to-site tunnels
- SonicOS 8, managed from Network Security Manager
Ordering information
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The firewall on its own, with no security subscription attached. Choose this only when you are adding the unit to an existing licence pool.
SonicWall TZ280 Appliance
-
SonicWall TZ280 Appliance Only #03-SSC-1824Get a Quote
SonicWall TZ280 Appliance
-
SonicWall TZ280 Secure Upgrade, Appliance Only #03-SSC-6942Get a Quote
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall TZ280 TotalSecure Advanced Edition - 1 Year #03-SSC-6919Get a Quote
-
SonicWall TZ280 TotalSecure Managed Edition - 1 Year #03-SSC-6920Get a Quote
-
SonicWall TZ280 TotalSecure Essential Edition - 1 Year #03-SSC-6918Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall TZ280 Secure Upgrade Plus, Advanced Edition - 2 Year #03-SSC-6925Get a Quote
-
SonicWall TZ280 Secure Upgrade Plus, Advanced Edition - 3 Year #03-SSC-6926Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Security Suite for TZ280 - 1 Year #03-SSC-6181Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280 - 2 Year #03-SSC-6195Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280 - 3 Year #03-SSC-6209Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280 - 4 Year #03-SSC-6223Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280 - 5 Year #03-SSC-6237Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite for TZ280 - 1 Year #03-SSC-6187Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280 - 2 Year #03-SSC-6201Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280 - 3 Year #03-SSC-6215Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280 - 4 Year #03-SSC-6229Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280 - 5 Year #03-SSC-6243Get a Quote
Managed Protection Security Suite
The Advanced suite with SonicWall’s own management and monitoring on top. Sold as a renewal and available to three years.
SonicWall Managed Protection Security Suite Renewal / Upgrade (Renewal only - requires the TotalSecure Managed Edition appliance SKU)
-
SonicWall Managed Protection Security Suite for TZ280 - 1 Year #03-SSC-6178Get a Quote
-
SonicWall Managed Protection Security Suite for TZ280 - 2 Year #03-SSC-6192Get a Quote
-
SonicWall Managed Protection Security Suite for TZ280 - 3 Year #03-SSC-6206Get a Quote
Capture Advanced Threat Protection
Multi-engine cloud sandboxing for files the gateway cannot judge on signature alone.
SonicWall Capture Advanced Threat Protection (Service subscription - appliance required)
-
SonicWall Capture Advanced Threat Protection for TZ280 - 1 Year #03-SSC-6189Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280 - 2 Year #03-SSC-6203Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280 - 3 Year #03-SSC-6217Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280 - 4 Year #03-SSC-6231Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280 - 5 Year #03-SSC-6245Get a Quote
Gateway Anti-Malware, IPS and Application Control
The three inspection engines on their own, for a site that licenses content filtering separately.
SonicWall Gateway Anti-Malware, IPS and Application Control (Service subscription - appliance required)
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280 - 1 Year #03-SSC-6183Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280 - 2 Year #03-SSC-6197Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280 - 3 Year #03-SSC-6211Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280 - 4 Year #03-SSC-6225Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280 - 5 Year #03-SSC-6239Get a Quote
Content Filtering Premium
Reputation-based URL filtering with keyword and content scanning.
SonicWall Content Filtering Premium (Service subscription - appliance required)
-
SonicWall Content Filtering Service Premium Business Edition for TZ280 - 1 Year #03-SSC-6186Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280 - 2 Year #03-SSC-6200Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280 - 3 Year #03-SSC-6214Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280 - 4 Year #03-SSC-6228Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280 - 5 Year #03-SSC-6242Get a Quote
DNS Security Service
Blocks resolution of known-malicious domains before a connection is opened.
SonicWall DNS Security Service (Service subscription - appliance required)
-
SonicWall DNS Security Service for TZ280 - 1 Year #03-SSC-6179Get a Quote
-
SonicWall DNS Security Service for TZ280 - 2 Year #03-SSC-6193Get a Quote
-
SonicWall DNS Security Service for TZ280 - 3 Year #03-SSC-6207Get a Quote
-
SonicWall DNS Security Service for TZ280 - 4 Year #03-SSC-6221Get a Quote
-
SonicWall DNS Security Service for TZ280 - 5 Year #03-SSC-6235Get a Quote
24x7 Support
Round-the-clock telephone and online support with firmware entitlement and advance hardware replacement.
SonicWall 24x7 Support (Support contract)
-
SonicWall 24x7 Support for TZ280 - 1 Year #03-SSC-6253Get a Quote
-
SonicWall 24x7 Support for TZ280 - 2 Year #03-SSC-6255Get a Quote
-
SonicWall 24x7 Support for TZ280 - 3 Year #03-SSC-6257Get a Quote
-
SonicWall 24x7 Support for TZ280 - 4 Year #03-SSC-6259Get a Quote
-
SonicWall 24x7 Support for TZ280 - 5 Year #03-SSC-6261Get a Quote
Standard Support
Business-hours support with firmware entitlement and hardware replacement.
SonicWall Standard Support (Support contract)
-
SonicWall Standard Support for TZ280 - 1 Year #03-SSC-6252Get a Quote
-
SonicWall Standard Support for TZ280 - 2 Year #03-SSC-6254Get a Quote
-
SonicWall Standard Support for TZ280 - 3 Year #03-SSC-6256Get a Quote
-
SonicWall Standard Support for TZ280 - 4 Year #03-SSC-6258Get a Quote
-
SonicWall Standard Support for TZ280 - 5 Year #03-SSC-6260Get a Quote
High Availability
The second appliance in an active/standby pair, plus the licence that converts one back to a standalone unit.
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall TZ280 High Availability Unit #03-SSC-6936Get a Quote
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall TZ280 HA Conversion Licence to Standalone Unit #03-SSC-7477Get a Quote
Technical specifications
SonicWall TZ280 Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOS 8 |
|---|---|
| Interfaces | 8 x 1GbE RJ45, 2 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C) |
| Wireless | Not fitted - see the TZ280W for the 802.11ax model |
| Power over Ethernet (PoE) | Not fitted - see the TZ280P for the PoE model |
| Internal Storage (expansion) | Optional, up to 512 GB |
| Centralized Management | Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs |
| Logical VLAN and Tunnel Interfaces | 64 |
| SAML Single Sign-On Users | 1,000 |
| Access Points Supported | 16 |
Firewall and VPN Performance
| Firewall Inspection Throughput | 2.5 Gbps |
|---|---|
| Threat Prevention Throughput | 1 Gbps |
| Application Inspection Throughput | 1.5 Gbps |
| IPS Throughput | 1.5 Gbps |
| Anti-Malware Inspection Throughput | 1 Gbps |
| TLS/SSL Inspection and Decryption Throughput | 430 Mbps |
| IPSec VPN Throughput | 1.2 Gbps |
| Connections per Second | 12,000 |
| Maximum Connections (SPI) | 1,000,000 |
| Maximum Connections (DPI) | 200,000 |
| Maximum Connections (TLS) | 35,000 |
VPN and ZTNA
| Site-to-Site VPN Tunnels | 200 |
|---|---|
| IPSec VPN Clients | 5 (200 maximum) |
| SSL VPN Licences | 1 (50 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14 |
| Route-Based VPN | RIP, OSPF, BGP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms | Microsoft Windows 10 and Windows 11 |
| NetExtender | Microsoft Windows 10 and Windows 11, Linux |
| Mobile Connect | Apple iOS, macOS, Google Android |
Security Services
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption |
|---|---|
| Content Filtering Service | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning |
| Comprehensive Anti-Spam Service | Yes |
| Application Visualization | Yes |
| Application Control | Yes |
| Capture Advanced Threat Protection | Yes |
| Advanced DNS Filtering | Yes |
Networking
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
|---|---|
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC |
| Local User Database | 1,000 |
| VoIP | Full H.323v5, SIP |
| High Availability | Active/Standby with stateful synchronization |
Hardware and Power
| Form Factor | Desktop |
|---|---|
| Power Supply | 12V / 1.03A (60 W) |
| Input Power | 100-240 VAC, 50-60 Hz, 0.27A |
| Maximum Power Consumption | 12.36 W |
| Redundant Power Supply | Optional |
| Total Heat Dissipation | 42.43 BTU/hr |
| Dimensions (H x W x D) | 3.5 x 13 x 19 cm |
| Weight | 0.82 kg |
| Shipping Weight | 1.41 kg |
| MTBF at 25°C | 51.7 years |
| Operating Temperature | 0°C to +40°C |
| Storage Temperature | -40°C to +70°C |
| Humidity | 5-95% non-condensing |
| Regulatory Model Number | APL70-11D |
Notes
Figures are SonicWall’s published Gen 8 TZ specifications.
Managed Protection Security Suite is a renewal and runs to three years; the other suites run to five.
Overview
TZ280
The entry point to Gen 8: 2.5 Gbps of firewall inspection and eight gigabit ports in a fanless desktop unit.
Where the TZ280 fits
The entry point to Gen 8: 2.5 Gbps of firewall inspection and eight gigabit ports in a fanless desktop unit. Every Gen 8 TZ runs the same SonicOS 8 build and the same security services, so the choice between them is capacity rather than capability.
Interested in the SonicWall TZ280?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote