- Canadian Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
SonicWall TZ670
The top of the Gen 7 TZ range: 5 Gbps of firewall inspection, two 10G SFP+ uplinks and 32 GB of storage fitted.
SonicOS 75 Gbps firewall2.5 Gbps threat preventionDesktop
- 5 Gbps firewall inspection, 2.5 Gbps with threat prevention on
- 8 x 1GbE, 2 x 10G SFP+, 2 x USB 3.0, 1 console
- 1,500,000 SPI connections, 500,000 with deep packet inspection
- 2.1 Gbps IPSec VPN and 250 site-to-site tunnels
- SonicOS 7.0, managed from Network Security Manager or the firewall itself
Ordering information
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The firewall on its own, with no security subscription attached. Choose this only when you are adding the unit to an existing licence pool.
SonicWall TZ670 Appliance
-
SonicWall TZ670 - Compact Next-Generation Firewall for Advanced Security (Appliance Only, No Subscription) #02-SSC-2837Get a Quote
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall TZ670 Totalsecure - Advanced Edition - 1 Year #02-SSC-5675Get a Quote
-
SonicWall TZ670 Total Secure Managed Edition - 1 Year #03-SSC-6003Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall TZ670 Secure Upgrade Appliance Only No Attached Subscription (Existing SonicWall Customers Only) #02-SSC-8435Get a Quote
-
SonicWall TZ670 Secure Upgrade Plus - Advanced Edition - 2 Year #02-SSC-5685Get a Quote
-
SonicWall TZ670 Secure Upgrade Plus - Includes Appliance and Advanced Protection Services Suite - 3 Year #02-SSC-5684Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Service Suite for TZ670 - 2 Year #02-SSC-5054Get a Quote
-
SonicWall Essential Protection Service Suite for TZ670 - 3 Year #02-SSC-5055Get a Quote
-
SonicWall Essential Protection Service Suite for TZ670 - 5 Year #02-SSC-5057Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite for TZ670 - 1 Year #02-SSC-5547Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ670 - 2 Year #02-SSC-5548Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ670 - 3 Year #02-SSC-5549Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ670 - 5 Year #02-SSC-5551Get a Quote
Managed Protection Security Suite
The Advanced suite with SonicWall’s own management and monitoring on top. Sold as a renewal and available to three years.
SonicWall Managed Protection Security Suite Renewal / Upgrade (Renewal only - requires the TotalSecure Managed Edition appliance SKU)
-
SonicWall Managed Protection Security Service For TZ670 - 1 Year #03-SSC-5898Get a Quote
-
SonicWall Managed Protection Security Service For TZ670 - 2 Year #03-SSC-5900Get a Quote
-
SonicWall Managed Protection Security Service For TZ670 - 3 Year #03-SSC-5902Get a Quote
Capture Advanced Threat Protection
Multi-engine cloud sandboxing for files the gateway cannot judge on signature alone.
SonicWall Capture Advanced Threat Protection (Service subscription - appliance required)
-
SonicWall Capture Advanced Threat Protection Service for TZ670 Series - 1 Year #02-SSC-5035Get a Quote
-
SonicWall Capture Advanced Threat Protection Service for TZ670 SERIES - 2 Year #02-SSC-5036Get a Quote
-
SonicWall Capture Advanced Threat Protection Service for TZ670 Series - 3 Year #02-SSC-5037Get a Quote
-
SonicWall Capture Advanced Threat Protection Service for TZ670 Series - 5 Year #02-SSC-5039Get a Quote
Gateway Anti-Malware, IPS and Application Control
The three inspection engines on their own, for a site that licenses content filtering separately.
SonicWall Gateway Anti-Malware, IPS and Application Control (Service subscription - appliance required)
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ670 Series - 1 Year #02-SSC-5059Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ670 SERIES - 2 Year #02-SSC-5060Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ670 Series - 3 Year #02-SSC-5061Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ670 Series - 5 Year #02-SSC-5063Get a Quote
Content Filtering Premium
Reputation-based URL filtering with keyword and content scanning.
SonicWall Content Filtering Premium (Service subscription - appliance required)
-
SonicWall Content Filtering Service for TZ670 Series - 1 Year #02-SSC-5047Get a Quote
-
SonicWall Content Filtering Service for TZ670 SERIES - 2 Year #02-SSC-5048Get a Quote
-
SonicWall Content Filtering Service for TZ670 Series - 3 Year #02-SSC-5049Get a Quote
-
SonicWall Content Filtering Service for TZ670 Series - 5 Year #02-SSC-5051Get a Quote
24x7 Support
Round-the-clock telephone and online support with firmware entitlement and advance hardware replacement.
SonicWall 24x7 Support (Support contract)
-
SonicWall 24X7 Support for TZ670 Series - 1 Year #02-SSC-5029Get a Quote
-
SonicWall 24X7 Support for TZ670 SERIES - 2 Year #02-SSC-5030Get a Quote
-
SonicWall 24X7 Support for TZ670 Series - 3 Year #02-SSC-5031Get a Quote
-
SonicWall 24X7 Support for TZ670 Series - 5 Year #02-SSC-5033Get a Quote
Standard Support
Business-hours support with firmware entitlement and hardware replacement.
SonicWall Standard Support (Support contract)
-
SonicWall 8X5 Support For TZ670 Series - 1 Year #02-SSC-5865Get a Quote
-
SonicWall 8X5 Support For TZ670 Series - 2 Year #02-SSC-5866Get a Quote
-
SonicWall 8X5 Support For TZ670 Series - 3 Year #02-SSC-5867Get a Quote
-
SonicWall 8X5 Support For TZ670 Series - 5 Year #02-SSC-5869Get a Quote
High Availability
The second appliance in an active/standby pair, plus the licence that converts one back to a standalone unit.
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall TZ670 High Availability #02-SSC-5654Get a Quote
-
SonicWall Stateful High Availability Upgrade for TZ670 Series #02-SSC-5889Get a Quote
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall HA Conversion License to Standalone Unit for TZ670 Series #02-SSC-5890Get a Quote
Comprehensive Anti-Spam Service
Inbound mail filtering at the gateway, scored on SonicWall’s own reputation data before the message reaches the mail server.
SonicWall Comprehensive Anti-Spam Service (Service subscription - appliance required)
-
SonicWall Comprehensive Anti-Spam Service for TZ670 Series - 1 Year #02-SSC-5041Get a Quote
-
SonicWall Comprehensive Anti-Spam Service for TZ670 SERIES - 2 Year #02-SSC-5042Get a Quote
-
SonicWall Comprehensive Anti-Spam Service for TZ670 Series - 3 Year #02-SSC-5043Get a Quote
-
SonicWall Comprehensive Anti-Spam Service for TZ670 Series - 5 Year #02-SSC-5045Get a Quote
Advanced Reporting and Analytics (SaaS)
The same reporting hosted by SonicWall, in 7, 30, 90 and 365-day retention tiers. The retention period is part of the part number, so check it against the retention your auditor asks for.
SonicWall Advanced Reporting and Analytics (SaaS) (Service subscription - appliance required)
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics For TZ670 - 1 Year #03-SSC-4522Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics For TZ670 - 2 Year #03-SSC-4554Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics For TZ670 - 3 Year #03-SSC-4541Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics For TZ670 - 4 Year #03-SSC-4573Get a Quote
-
SonicWall SaaS 7 Days Of Advanced Reporting And Analytics For TZ670 - 5 Year #03-SSC-4582Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics For TZ670 - 1 Year #03-SSC-4519Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics For TZ670 - 2 Year #03-SSC-4551Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics For TZ670 - 3 Year #03-SSC-4559Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics For TZ670 - 4 Year #03-SSC-4546Get a Quote
-
SonicWall SaaS 30 Days Of Advanced Reporting And Analytics For TZ670 - 5 Year #03-SSC-4579Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics For TZ670 - 1 Year #03-SSC-4518Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics For TZ670 - 2 Year #03-SSC-4550Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics For TZ670 - 3 Year #03-SSC-4558Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics For TZ670 - 4 Year #03-SSC-4545Get a Quote
-
SonicWall SaaS 90 Days Of Advanced Reporting And Analytics For TZ670 - 5 Year #03-SSC-4578Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics For TZ670 - 1 Year #03-SSC-4515Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics For TZ670 - 2 Year #03-SSC-4523Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics For TZ670 - 3 Year #03-SSC-4555Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics For TZ670 - 4 Year #03-SSC-4542Get a Quote
-
SonicWall SaaS 365 Days Of Advanced Reporting And Analytics For TZ670 - 5 Year #03-SSC-4575Get a Quote
Device Management and Basic Reporting (SaaS)
Cloud management with 7 days of basic reporting — the entry tier, for sites that do not need the full analytics retention.
SonicWall Device Management and Basic Reporting (SaaS) (Service subscription - appliance required)
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For TZ 6Xx - 1 Year #03-SSC-9376Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For TZ 6Xx - 2 Year #03-SSC-9377Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For TZ 6Xx - 3 Year #03-SSC-9378Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For TZ 6Xx - 4 Year #03-SSC-9379Get a Quote
-
SonicWall SaaS Device Management And 7 Day Basic Reporting For TZ 6Xx - 5 Year #03-SSC-9380Get a Quote
SonicProtect Bundle
SonicWall’s multi-year services bundle, priced per chassis family rather than per model. Sold in three and five-year terms only.
SonicWall SonicProtect Bundle (Service subscription - appliance required)
-
SonicWall Gen 7 Sonicprotect Bundle For TZ 600 Family - 3 Year #03-SSC-2561Get a Quote
-
SonicWall Gen 7 Sonicprotect Bundle For TZ 600 Family - 5 Year #03-SSC-2560Get a Quote
Gen 6 Firewall Replacement
A replacement chassis for a site still running Gen 6 hardware, bundled with a year of the Advanced Protection Security Suite.
SonicWall Gen 6 Firewall Replacement Renewal / Upgrade (Trade-up - requires a Gen 6 or Gen 6.5 unit on record)
-
SonicWall TZ670 Gen6 Firewall Replacement With APSS - 1 Year #03-SSC-8145Get a Quote
Accessories
Storage modules and other field-fitted parts shared across the Gen 7 and Gen 8 ranges.
SonicWall Accessories
-
SonicWall M.2 32GB Storage Module For Gen7/Gen8 TZ NSa NSSP Series #02-SSC-3114Get a Quote
-
SonicWall M.2 64GB Storage Module For Gen7/Gen8 TZ NSa NSSP Series #02-SSC-3115Get a Quote
-
SonicWall M.2 128GB Storage Module For Gen7/Gen8 TZ NSa NSSP Series #02-SSC-3116Get a Quote
-
SonicWall M.2 256GB Storage Module For Gen7/Gen8 TZ NSa NSSP Series #02-SSC-3117Get a Quote
-
SonicWall Micro USB Console Cable for TZ670/570 Series #02-SSC-5173Get a Quote
-
SonicWall TZ670 / TZ570 Series FRU Power Supply #02-SSC-3078Get a Quote
-
SonicWall TZ670 / TZ570 RACKMOUNT KIT #02-SSC-3112Get a Quote
-
SonicWall M.2 512GB Storage Module For Gen7/Gen8 TZ NSa NSSP Series #02-SSC-8893Get a Quote
Appliance with Support
The firewall bundled with a support contract but no security subscription — for a site that licenses the protection suite separately.
SonicWall Appliance with Support (Appliance and support in one part number)
-
SonicWall TZ670 With 8X5 Support - 1 Year #02-SSC-5858Get a Quote
SSL VPN User Licences
Extra concurrent SSL VPN users on top of the two the appliance ships with. Sold in blocks and stackable up to the model’s published maximum.
SonicWall SSL VPN User Licences (Perpetual licence — appliance required)
-
SonicWall Firewall SSL VPN 1 User License #01-SSC-8629Get a Quote
-
SonicWall Firewall SSL VPN 5 User License #01-SSC-8630Get a Quote
-
SonicWall Firewall SSL VPN 10 User License #01-SSC-8631Get a Quote
-
SonicWall Firewall SSL VPN 15 User License #01-SSC-6111Get a Quote
-
SonicWall Firewall SSL VPN 25 User License #01-SSC-8632Get a Quote
-
SonicWall Firewall SSL VPN 50 User License #01-SSC-8633Get a Quote
-
SonicWall Firewall SSL VPN 100 User License #01-SSC-6112Get a Quote
-
SonicWall Firewall SSL VPN 250 User License #01-SSC-6113Get a Quote
-
SonicWall Firewall SSL VPN 500 User License #01-SSC-6117Get a Quote
-
SonicWall Firewall SSL VPN 1000 User License #01-SSC-6118Get a Quote
Global VPN Client for Windows
The IPSec client for Windows, licensed per concurrent connection. NetExtender and Mobile Connect are included with the appliance; this is the separate GVC client.
SonicWall Global VPN Client for Windows (Perpetual licence)
-
SonicWall Global VPN Client Windows - 1 License #01-SSC-5310Get a Quote
-
SonicWall Global VPN Client Windows - 5 Licenses #01-SSC-5316Get a Quote
Technical specifications
SonicWall TZ670 Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOS 7.0 |
|---|---|
| Interfaces | 8 x 1GbE, 2 x 10G SFP+, 2 x USB 3.0, 1 console |
| Wireless | Not fitted |
| Power over Ethernet (PoE) | Not fitted |
| Internal Storage (expansion) | 32 GB included, optional up to 256 GB |
| Centralized Management | Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs |
| Redundant Power Supply | Yes |
| Logical VLAN Interfaces | 256 |
| Single Sign-On Users | 2,500 |
| Access Points Supported | 32 |
Firewall and VPN Performance
| Firewall Inspection Throughput | 5 Gbps |
|---|---|
| Threat Prevention Throughput | 2.5 Gbps |
| Application Inspection Throughput | 3 Gbps |
| IPS Throughput | 3 Gbps |
| Anti-Malware Inspection Throughput | 2.5 Gbps |
| TLS/SSL Inspection and Decryption Throughput (DPI SSL) | 800 Mbps |
| IPSec VPN Throughput | 2.1 Gbps |
| Connections per Second | 25,000 |
| Maximum Connections (SPI) | 1,500,000 |
| Maximum Connections (DPI) | 500,000 |
| Maximum Connections (DPI SSL) | 75,000 |
VPN
| Site-to-Site VPN Tunnels | 250 |
|---|---|
| IPSec VPN Clients | 10 (500 maximum) |
| SSL VPN Licences | 2 (250 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-1, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14v |
| Route-Based VPN | RIP, OSPF, BGP |
| Certificate Support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms | Microsoft Windows 10 |
| NetExtender | Microsoft Windows 10, Linux |
| Mobile Connect | Apple iOS, macOS, Google Android, Kindle Fire, Chrome OS, Windows 10 |
Security Services
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL |
|---|---|
| Content Filtering Service | HTTP URL, HTTPS IP, keyword and content scanning, filtering on file types such as ActiveX, Java and cookies, allow/forbid lists |
| Comprehensive Anti-Spam Service | Yes |
| Application Visualization | Yes |
| Application Control | Yes |
| Capture Advanced Threat Protection | Yes |
Networking
| IP Address Assignment | Static, DHCP, PPPoE, L2TP and PPTP client, internal DHCP server, DHCP relay |
|---|---|
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) |
| Local User Database | 250 |
| VoIP | Full H.323v1-5, SIP |
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Certifications | FIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ICSA Network Antivirus / AntiMalware |
| High Availability | Active/Standby with stateful synchronization |
Hardware and Power
| Form Factor | Desktop |
|---|---|
| Power Supply | 60 W external |
| Input Power | 100-240 VAC, 50-60 Hz |
| Maximum Power Consumption | 13.1 W |
| Total Heat Dissipation | 55.1 BTU/hr |
| Dimensions (H x W x D) | 3.5 x 15 x 22.5 cm (1.38 x 5.91 x 8.85 in) |
| Weight | 0.97 kg (2.14 lbs) |
| Shipping Weight | 1.93 kg (4.25 lbs) |
| MTBF at 25°C | 43.9 years |
| Operating Temperature | 0°C to 40°C (32°F to 105°F) |
| Storage Temperature | -40°C to 70°C (-40°F to 158°F) |
| Humidity | 5-95% non-condensing |
| Regulatory Model Number | APL62-0F7 |
Notes
Figures are SonicWall’s published Gen 7 TZ specifications.
Gen 7 is the previous TZ generation and remains orderable; the Gen 8 TZ range is the current one.
Overview
TZ670
The top of the Gen 7 TZ range: 5 Gbps of firewall inspection, two 10G SFP+ uplinks and 32 GB of storage fitted.
Where the TZ670 fits
The top of the Gen 7 TZ range: 5 Gbps of firewall inspection, two 10G SFP+ uplinks and 32 GB of storage fitted. Every Gen 7 TZ runs the same SonicOS 7.0 build and the same security services, so the choice between them is capacity rather than capability.
Interested in the SonicWall TZ670?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote