SonicWall TZ280W
The TZ280 with a 2x2 802.11ax radio built in, for a site that needs wireless without a separate access point.
SonicOS 82.5 Gbps firewall1 Gbps threat preventionWi-Fi 6 built inDesktop
- 2.5 Gbps firewall inspection, 1 Gbps with threat prevention on
- 8 x 1GbE RJ45, 2 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C)
- 1,000,000 SPI connections, 200,000 with deep packet inspection
- 1.2 Gbps IPSec VPN and 200 site-to-site tunnels
- SonicOS 8, managed from Network Security Manager
Ordering information
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The firewall on its own, with no security subscription attached. Choose this only when you are adding the unit to an existing licence pool.
SonicWall TZ280W Appliance
-
SonicWall TZ280W Appliance Only #03-SSC-1825Get a Quote
SonicWall TZ280W Appliance
-
SonicWall TZ280W Secure Upgrade, Appliance Only #03-SSC-7996Get a Quote
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall TZ280W TotalSecure Advanced Edition - 1 Year #03-SSC-7985Get a Quote
-
SonicWall TZ280W TotalSecure Managed Edition - 1 Year #03-SSC-7989Get a Quote
-
SonicWall TZ280W TotalSecure Essential Edition - 1 Year #03-SSC-9180Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall TZ280W Secure Upgrade Plus, Advanced Edition - 2 Year #03-SSC-7991Get a Quote
-
SonicWall TZ280W Secure Upgrade Plus, Advanced Edition - 3 Year #03-SSC-9322Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Security Suite for TZ280W - 1 Year #03-SSC-9089Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280W - 2 Year #03-SSC-9090Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280W - 3 Year #03-SSC-9091Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280W - 4 Year #03-SSC-9092Get a Quote
-
SonicWall Essential Protection Security Suite for TZ280W - 5 Year #03-SSC-9093Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite for TZ280W - 1 Year #03-SSC-7822Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280W - 2 Year #03-SSC-7831Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280W - 3 Year #03-SSC-7840Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280W - 4 Year #03-SSC-7849Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ280W - 5 Year #03-SSC-7858Get a Quote
Managed Protection Security Suite
The Advanced suite with SonicWall’s own management and monitoring on top. Sold as a renewal and available to three years.
SonicWall Managed Protection Security Suite Renewal / Upgrade (Renewal only - requires the TotalSecure Managed Edition appliance SKU)
-
SonicWall Managed Protection Security Suite for TZ280W - 1 Year #03-SSC-7873Get a Quote
-
SonicWall Managed Protection Security Suite for TZ280W - 2 Year #03-SSC-7870Get a Quote
-
SonicWall Managed Protection Security Suite for TZ280W - 3 Year #03-SSC-7867Get a Quote
Capture Advanced Threat Protection
Multi-engine cloud sandboxing for files the gateway cannot judge on signature alone.
SonicWall Capture Advanced Threat Protection (Service subscription - appliance required)
-
SonicWall Capture Advanced Threat Protection for TZ280W - 1 Year #03-SSC-7825Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280W - 2 Year #03-SSC-7834Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280W - 3 Year #03-SSC-7843Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280W - 4 Year #03-SSC-7852Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ280W - 5 Year #03-SSC-7861Get a Quote
Gateway Anti-Malware, IPS and Application Control
The three inspection engines on their own, for a site that licenses content filtering separately.
SonicWall Gateway Anti-Malware, IPS and Application Control (Service subscription - appliance required)
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280W - 1 Year #03-SSC-7827Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280W - 2 Year #03-SSC-7836Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280W - 3 Year #03-SSC-7845Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280W - 4 Year #03-SSC-7854Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ280W - 5 Year #03-SSC-7863Get a Quote
Content Filtering Premium
Reputation-based URL filtering with keyword and content scanning.
SonicWall Content Filtering Premium (Service subscription - appliance required)
-
SonicWall Content Filtering Service Premium Business Edition for TZ280W - 1 Year #03-SSC-7820Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280W - 2 Year #03-SSC-7829Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280W - 3 Year #03-SSC-7838Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280W - 4 Year #03-SSC-7847Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ280W - 5 Year #03-SSC-7856Get a Quote
DNS Security Service
Blocks resolution of known-malicious domains before a connection is opened.
SonicWall DNS Security Service (Service subscription - appliance required)
-
SonicWall DNS Security Service for TZ280W - 1 Year #03-SSC-7823Get a Quote
-
SonicWall DNS Security Service for TZ280W - 2 Year #03-SSC-7832Get a Quote
-
SonicWall DNS Security Service for TZ280W - 3 Year #03-SSC-7841Get a Quote
-
SonicWall DNS Security Service for TZ280W - 4 Year #03-SSC-7850Get a Quote
-
SonicWall DNS Security Service for TZ280W - 5 Year #03-SSC-7859Get a Quote
24x7 Support
Round-the-clock telephone and online support with firmware entitlement and advance hardware replacement.
SonicWall 24x7 Support (Support contract)
-
SonicWall 24x7 Support for TZ280W - 1 Year #03-SSC-8032Get a Quote
-
SonicWall 24x7 Support for TZ280W - 2 Year #03-SSC-8035Get a Quote
-
SonicWall 24x7 Support for TZ280W - 3 Year #03-SSC-8038Get a Quote
-
SonicWall 24x7 Support for TZ280W - 4 Year #03-SSC-8041Get a Quote
-
SonicWall 24x7 Support for TZ280W - 5 Year #03-SSC-8044Get a Quote
Standard Support
Business-hours support with firmware entitlement and hardware replacement.
SonicWall Standard Support (Support contract)
-
SonicWall Standard Support for TZ280W - 1 Year #03-SSC-8031Get a Quote
-
SonicWall Standard Support for TZ280W - 2 Year #03-SSC-8034Get a Quote
-
SonicWall Standard Support for TZ280W - 3 Year #03-SSC-8037Get a Quote
-
SonicWall Standard Support for TZ280W - 4 Year #03-SSC-8040Get a Quote
-
SonicWall Standard Support for TZ280W - 5 Year #03-SSC-8043Get a Quote
Technical specifications
SonicWall TZ280W Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOS 8 |
|---|---|
| Interfaces | 8 x 1GbE RJ45, 2 x 1G SFP, 1 console (Micro-USB), 1 USB (Type-C) |
| Wireless | 2x2 802.11ax (Wi-Fi 6), 802.11a/b/g/n/ac compatible, WPA/WPA2/WPA3, 802.11i, EAP-PEAP, EAP-TTLS |
| Power over Ethernet (PoE) | Not fitted |
| Internal Storage (expansion) | Optional, up to 512 GB |
| Centralized Management | Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs |
| Logical VLAN and Tunnel Interfaces | 64 |
| SAML Single Sign-On Users | 1,000 |
| Access Points Supported | 16 |
Firewall and VPN Performance
| Firewall Inspection Throughput | 2.5 Gbps |
|---|---|
| Threat Prevention Throughput | 1 Gbps |
| Application Inspection Throughput | 1.5 Gbps |
| IPS Throughput | 1.5 Gbps |
| Anti-Malware Inspection Throughput | 1 Gbps |
| TLS/SSL Inspection and Decryption Throughput | 430 Mbps |
| IPSec VPN Throughput | 1.2 Gbps |
| Connections per Second | 12,000 |
| Maximum Connections (SPI) | 1,000,000 |
| Maximum Connections (DPI) | 200,000 |
| Maximum Connections (TLS) | 35,000 |
VPN and ZTNA
| Site-to-Site VPN Tunnels | 200 |
|---|---|
| IPSec VPN Clients | 5 (200 maximum) |
| SSL VPN Licences | 1 (50 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14 |
| Route-Based VPN | RIP, OSPF, BGP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms | Microsoft Windows 10 and Windows 11 |
| NetExtender | Microsoft Windows 10 and Windows 11, Linux |
| Mobile Connect | Apple iOS, macOS, Google Android |
Security Services
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption |
|---|---|
| Content Filtering Service | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning |
| Comprehensive Anti-Spam Service | Yes |
| Application Visualization | Yes |
| Application Control | Yes |
| Capture Advanced Threat Protection | Yes |
| Advanced DNS Filtering | Yes |
Networking
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
|---|---|
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC |
| Local User Database | 1,000 |
| VoIP | Full H.323v5, SIP |
| High Availability | Active/Standby with stateful synchronization |
Hardware and Power
| Form Factor | Desktop |
|---|---|
| Power Supply | 12V / 1.03A (60 W) |
| Input Power | 100-240 VAC, 50-60 Hz, 0.27A |
| Maximum Power Consumption | 15.4 W |
| Redundant Power Supply | Optional |
| Total Heat Dissipation | 52.4 BTU/hr |
| Dimensions (H x W x D) | 3.5 x 13 x 19 cm |
| Weight | 0.85 kg |
| Shipping Weight | 1.47 kg |
| MTBF at 25°C | 27 years |
| Operating Temperature | 0°C to +40°C |
| Storage Temperature | -40°C to +70°C |
| Humidity | 5-95% non-condensing |
| Regulatory Model Number | APL70-11E |
Notes
Figures are SonicWall’s published Gen 8 TZ specifications.
Managed Protection Security Suite is a renewal and runs to three years; the other suites run to five.
Overview
TZ280W
The TZ280 with a 2x2 802.11ax radio built in, for a site that needs wireless without a separate access point.
Where the TZ280W fits
The TZ280 with a 2x2 802.11ax radio built in, for a site that needs wireless without a separate access point. Every Gen 8 TZ runs the same SonicOS 8 build and the same security services, so the choice between them is capacity rather than capability.
Interested in the SonicWall TZ280W?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote