SonicWall TZ280P
The TZ280 with four PoE+ ports and a 120 W budget, so phones, cameras and access points run off the firewall.
- 2.5 Gbps firewall inspection, 1 Gbps with threat prevention on
- 8 x 1GbE RJ45 (4 with PoE+), 2 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C)
- 1,000,000 SPI connections, 200,000 with deep packet inspection
- 1.2 Gbps IPSec VPN and 200 site-to-site tunnels
- SonicOS 8, managed from Network Security Manager
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The firewall on its own, with no security subscription attached. Choose this only when you are adding the unit to an existing licence pool.
SonicWall TZ280P Appliance
-
SonicWall TZ280P Appliance Only #03-SSC-1829Get a Quote
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall TZ280P TotalSecure Advanced Edition - 1 Year #03-SSC-8014Get a Quote
-
SonicWall TZ280P TotalSecure Managed Edition - 1 Year #03-SSC-8019Get a Quote
-
SonicWall TZ280P TotalSecure Essential Edition - 1 Year #03-SSC-9183Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Security Suite for TZ280P - 1 Year #03-SSC-9094Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280P - 2 Year #03-SSC-9095Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280P - 3 Year #03-SSC-9096Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280P - 4 Year #03-SSC-9097Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280P - 5 Year #03-SSC-9098Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite for TZ280P - 1 Year #03-SSC-7905Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280P - 2 Year #03-SSC-7907Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280P - 3 Year #03-SSC-7909Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280P - 4 Year #03-SSC-7913Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280P - 5 Year #03-SSC-7922Get a Quote
Managed Protection Security Suite
The Advanced suite with SonicWall’s own management and monitoring on top. Sold as a renewal and available to three years.
SonicWall Managed Protection Security Suite Renewal / Upgrade (Renewal only - requires the TotalSecure Managed Edition appliance SKU)
-
SonicWall Managed Protection Security Suite for TZ280P - 1 Year #03-SSC-7898Get a Quote
-
SonicWall Managed Protection Security Suite for TZ280P - 2 Year #03-SSC-7888Get a Quote
-
SonicWall Managed Protection Security Suite for TZ280P - 3 Year #03-SSC-7878Get a Quote
Capture Advanced Threat Protection
Multi-engine cloud sandboxing for files the gateway cannot judge on signature alone.
SonicWall Capture Advanced Threat Protection (Service subscription - appliance required)
-
SonicWall Capture Advanced Threat Protection for TZ280P - 1 Year #03-SSC-7902Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280P - 2 Year #03-SSC-7892Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280P - 3 Year #03-SSC-7882Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280P - 4 Year #03-SSC-7916Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280P - 5 Year #03-SSC-7925Get a Quote
Gateway Anti-Malware, IPS and Application Control
The three inspection engines on their own, for a site that licenses content filtering separately.
SonicWall Gateway Anti-Malware, IPS and Application Control (Service subscription - appliance required)
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280P - 1 Year #03-SSC-7904Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280P - 2 Year #03-SSC-7894Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280P - 3 Year #03-SSC-7884Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280P - 4 Year #03-SSC-7918Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280P - 5 Year #03-SSC-7927Get a Quote
Content Filtering Premium
Reputation-based URL filtering with keyword and content scanning.
SonicWall Content Filtering Premium (Service subscription - appliance required)
-
SonicWall Content Filtering Service Premium Business Edition for TZ280P - 1 Year #03-SSC-7896Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280P - 2 Year #03-SSC-7886Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280P - 3 Year #03-SSC-7876Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280P - 4 Year #03-SSC-7911Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280P - 5 Year #03-SSC-7920Get a Quote
DNS Security Service
Blocks resolution of known-malicious domains before a connection is opened.
SonicWall DNS Security Service (Service subscription - appliance required)
-
SonicWall DNS Security Service for TZ280P - 1 Year #03-SSC-7899Get a Quote
-
SonicWall DNS Security Service for TZ280P - 2 Year #03-SSC-7889Get a Quote
-
SonicWall DNS Security Service for TZ280P - 3 Year #03-SSC-7879Get a Quote
-
SonicWall DNS Security Service for TZ280P - 4 Year #03-SSC-7914Get a Quote
-
SonicWall DNS Security Service for TZ280P - 5 Year #03-SSC-7923Get a Quote
24x7 Support
Round-the-clock telephone and online support with firmware entitlement and advance hardware replacement.
SonicWall 24x7 Support (Support contract)
-
SonicWall 24x7 Support for TZ280P - 1 Year #03-SSC-8047Get a Quote
-
SonicWall 24x7 Support for TZ280P - 2 Year #03-SSC-8050Get a Quote
-
SonicWall 24x7 Support for TZ280P - 3 Year #03-SSC-8053Get a Quote
-
SonicWall 24x7 Support for TZ280P - 4 Year #03-SSC-8056Get a Quote
-
SonicWall 24x7 Support for TZ280P - 5 Year #03-SSC-8059Get a Quote
Standard Support
Business-hours support with firmware entitlement and hardware replacement.
SonicWall Standard Support (Support contract)
-
SonicWall Standard Support for TZ280P - 1 Year #03-SSC-8046Get a Quote
-
SonicWall Standard Support for TZ280P - 2 Year #03-SSC-8049Get a Quote
-
SonicWall Standard Support for TZ280P - 3 Year #03-SSC-8052Get a Quote
-
SonicWall Standard Support for TZ280P - 4 Year #03-SSC-8055Get a Quote
-
SonicWall Standard Support for TZ280P - 5 Year #03-SSC-8058Get a Quote
High Availability
The second appliance in an active/standby pair, plus the licence that converts one back to a standalone unit.
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall TZ280P High Availability Unit #03-SSC-8021Get a Quote
SonicWall TZ280P Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOS 8 |
|---|---|
| Interfaces | 8 x 1GbE RJ45 (4 with PoE+), 2 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C) |
| Wireless | Not fitted |
| Power over Ethernet (PoE) | 4 x PoE+ ports, 802.3at/af, up to 30 W per port, 120 W total budget |
| Internal Storage (expansion) | Optional, up to 512 GB |
| Centralized Management | Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs |
| Logical VLAN and Tunnel Interfaces | 64 |
| SAML Single Sign-On Users | 1,000 |
| Access Points Supported | 16 |
Firewall and VPN Performance
| Firewall Inspection Throughput | 2.5 Gbps |
|---|---|
| Threat Prevention Throughput | 1 Gbps |
| Application Inspection Throughput | 1.5 Gbps |
| IPS Throughput | 1.5 Gbps |
| Anti-Malware Inspection Throughput | 1 Gbps |
| TLS/SSL Inspection and Decryption Throughput | 430 Mbps |
| IPSec VPN Throughput | 1.2 Gbps |
| Connections per Second | 12,000 |
| Maximum Connections (SPI) | 1,000,000 |
| Maximum Connections (DPI) | 200,000 |
| Maximum Connections (TLS) | 35,000 |
VPN and ZTNA
| Site-to-Site VPN Tunnels | 200 |
|---|---|
| IPSec VPN Clients | 5 (200 maximum) |
| SSL VPN Licences | 1 (50 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14 |
| Route-Based VPN | RIP, OSPF, BGP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms | Microsoft Windows 10 and Windows 11 |
| NetExtender | Microsoft Windows 10 and Windows 11, Linux |
| Mobile Connect | Apple iOS, macOS, Google Android |
Security Services
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption |
|---|---|
| Content Filtering Service | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning |
| Comprehensive Anti-Spam Service | Yes |
| Application Visualization | Yes |
| Application Control | Yes |
| Capture Advanced Threat Protection | Yes |
| Advanced DNS Filtering | Yes |
Networking
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
|---|---|
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC |
| Local User Database | 1,000 |
| VoIP | Full H.323v5, SIP |
| High Availability | Active/Standby with stateful synchronization |
Hardware and Power
| Form Factor | Desktop |
|---|---|
| Power Supply | 180 W external |
| Input Power | 100-240 VAC, 50-60 Hz |
| Maximum Power Consumption | 130 W |
| Redundant Power Supply | Optional |
| Total Heat Dissipation | 443 BTU/hr |
| Dimensions (H x W x D) | 3.5 x 13 x 19 cm |
| Weight | 0.85 kg |
| Shipping Weight | 1.41 kg |
| MTBF at 25°C | 26.65 years |
| Operating Temperature | 0°C to +40°C |
| Storage Temperature | -40°C to +70°C |
| Humidity | 5-95% non-condensing |
| Regulatory Model Number | APL71-11F |
Figures are SonicWall’s published Gen 8 TZ specifications.
Managed Protection Security Suite is a renewal and runs to three years; the other suites run to five.
TZ280P
The TZ280 with four PoE+ ports and a 120 W budget, so phones, cameras and access points run off the firewall.
Where the TZ280P fits
The TZ280 with four PoE+ ports and a 120 W budget, so phones, cameras and access points run off the firewall. Every Gen 8 TZ runs the same SonicOS 8 build and the same security services, so the choice between them is capacity rather than capability.
Interested in the SonicWall TZ280P?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote