- Canadian Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
SonicWall TZ680
The top of the Gen 8 TZ range: 5 Gbps of firewall inspection and two 10G SFP uplinks.
SonicOS 85 Gbps firewall2.5 Gbps threat preventionDesktop
- 5 Gbps firewall inspection, 2.5 Gbps with threat prevention on
- 8 x 1GbE RJ45, 2 x 10G SFP, 1 console (Micro-USB), 1 USB (Type-C)
- 1,600,000 SPI connections, 600,000 with deep packet inspection
- 2.5 Gbps IPSec VPN and 250 site-to-site tunnels
- SonicOS 8, managed from Network Security Manager
Ordering information
Hardware & subscription options
Every orderable SonicWall part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The firewall on its own, with no security subscription attached. Choose this only when you are adding the unit to an existing licence pool.
SonicWall TZ680 Appliance
-
SonicWall TZ680 Appliance Only #03-SSC-1839Get a Quote
SonicWall TZ680 Appliance
-
SonicWall TZ680 Secure Upgrade, Appliance Only #03-SSC-7020Get a Quote
TotalSecure Editions
The appliance bundled with a year of one of the three protection suites. Essential covers the core gateway services, Advanced adds Capture ATP and DNS security, Managed adds SonicWall’s own monitoring.
SonicWall TotalSecure Editions (Appliance and subscription in one part number)
-
SonicWall TZ680 TotalSecure Advanced Edition - 1 Year #03-SSC-6998Get a Quote
-
SonicWall TZ680 TotalSecure Managed Edition - 1 Year #03-SSC-6996Get a Quote
-
SonicWall TZ680 TotalSecure Essential Edition - 1 Year #03-SSC-6997Get a Quote
Secure Upgrade Plus
Replacing an older SonicWall with a Gen 8 unit, bundled with two or three years of the Advanced suite.
SonicWall Secure Upgrade Plus Renewal / Upgrade (Trade-up pricing for existing SonicWall sites)
-
SonicWall TZ680 Secure Upgrade Plus, Advanced Edition - 2 Year #03-SSC-7003Get a Quote
-
SonicWall TZ680 Secure Upgrade Plus, Advanced Edition - 3 Year #03-SSC-7004Get a Quote
Essential Protection Security Suite
The foundation bundle: gateway anti-malware, intrusion prevention, application control, content filtering and standard support.
SonicWall Essential Protection Security Suite (Service subscription - appliance required)
-
SonicWall Essential Protection Security Suite for TZ680 - 1 Year #03-SSC-6492Get a Quote
-
SonicWall Essential Protection Security Suite for TZ680 - 2 Year #03-SSC-6508Get a Quote
-
SonicWall Essential Protection Security Suite for TZ680 - 3 Year #03-SSC-6524Get a Quote
-
SonicWall Essential Protection Security Suite for TZ680 - 4 Year #03-SSC-6540Get a Quote
-
SonicWall Essential Protection Security Suite for TZ680 - 5 Year #03-SSC-6556Get a Quote
Advanced Protection Security Suite
Everything in Essential plus Capture ATP sandboxing, DNS security and 24x7 support.
SonicWall Advanced Protection Security Suite (Service subscription - appliance required)
-
SonicWall Advanced Protection Security Suite for TZ680 - 1 Year #03-SSC-6500Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ680 - 2 Year #03-SSC-6516Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ680 - 3 Year #03-SSC-6532Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ680 - 4 Year #03-SSC-6548Get a Quote
-
SonicWall Advanced Protection Security Suite for TZ680 - 5 Year #03-SSC-6564Get a Quote
Managed Protection Security Suite
The Advanced suite with SonicWall’s own management and monitoring on top. Sold as a renewal and available to three years.
SonicWall Managed Protection Security Suite Renewal / Upgrade (Renewal only - requires the TotalSecure Managed Edition appliance SKU)
-
SonicWall Managed Protection Security Suite for TZ680 - 1 Year #03-SSC-6489Get a Quote
-
SonicWall Managed Protection Security Suite for TZ680 - 2 Year #03-SSC-6505Get a Quote
-
SonicWall Managed Protection Security Suite for TZ680 - 3 Year #03-SSC-6521Get a Quote
Capture Advanced Threat Protection
Multi-engine cloud sandboxing for files the gateway cannot judge on signature alone.
SonicWall Capture Advanced Threat Protection (Service subscription - appliance required)
-
SonicWall Capture Advanced Threat Protection for TZ680 - 1 Year #03-SSC-6502Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ680 - 2 Year #03-SSC-6518Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ680 - 3 Year #03-SSC-6534Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ680 - 4 Year #03-SSC-6550Get a Quote
-
SonicWall Capture Advanced Threat Protection for TZ680 - 5 Year #03-SSC-6566Get a Quote
Gateway Anti-Malware, IPS and Application Control
The three inspection engines on their own, for a site that licenses content filtering separately.
SonicWall Gateway Anti-Malware, IPS and Application Control (Service subscription - appliance required)
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ680 - 1 Year #03-SSC-6495Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ680 - 2 Year #03-SSC-6511Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ680 - 3 Year #03-SSC-6527Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ680 - 4 Year #03-SSC-6543Get a Quote
-
SonicWall Gateway Anti-Malware, Intrusion Prevention and Application Control for TZ680 - 5 Year #03-SSC-6559Get a Quote
Content Filtering Premium
Reputation-based URL filtering with keyword and content scanning.
SonicWall Content Filtering Premium (Service subscription - appliance required)
-
SonicWall Content Filtering Service Premium Business Edition for TZ680 - 1 Year #03-SSC-6499Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ680 - 2 Year #03-SSC-6515Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ680 - 3 Year #03-SSC-6531Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ680 - 4 Year #03-SSC-6547Get a Quote
-
SonicWall Content Filtering Service Premium Business Edition for TZ680 - 5 Year #03-SSC-6563Get a Quote
DNS Security Service
Blocks resolution of known-malicious domains before a connection is opened.
SonicWall DNS Security Service (Service subscription - appliance required)
-
SonicWall DNS Security Service for TZ680 - 1 Year #03-SSC-6490Get a Quote
-
SonicWall DNS Security Service for TZ680 - 2 Year #03-SSC-6506Get a Quote
-
SonicWall DNS Security Service for TZ680 - 3 Year #03-SSC-6522Get a Quote
-
SonicWall DNS Security Service for TZ680 - 4 Year #03-SSC-6538Get a Quote
-
SonicWall DNS Security Service for TZ680 - 5 Year #03-SSC-6554Get a Quote
24x7 Support
Round-the-clock telephone and online support with firmware entitlement and advance hardware replacement.
SonicWall 24x7 Support (Support contract)
-
SonicWall 24x7 Support for TZ680 - 1 Year #03-SSC-6494Get a Quote
-
SonicWall 24x7 Support for TZ680 - 2 Year #03-SSC-6510Get a Quote
-
SonicWall 24x7 Support for TZ680 - 3 Year #03-SSC-6526Get a Quote
-
SonicWall 24x7 Support for TZ680 - 4 Year #03-SSC-6542Get a Quote
-
SonicWall 24x7 Support for TZ680 - 5 Year #03-SSC-6558Get a Quote
Standard Support
Business-hours support with firmware entitlement and hardware replacement.
SonicWall Standard Support (Support contract)
-
SonicWall Standard Support for TZ680 - 1 Year #03-SSC-6497Get a Quote
-
SonicWall Standard Support for TZ680 - 2 Year #03-SSC-6513Get a Quote
-
SonicWall Standard Support for TZ680 - 3 Year #03-SSC-6529Get a Quote
-
SonicWall Standard Support for TZ680 - 4 Year #03-SSC-6545Get a Quote
-
SonicWall Standard Support for TZ680 - 5 Year #03-SSC-6561Get a Quote
High Availability
The second appliance in an active/standby pair, plus the licence that converts one back to a standalone unit.
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall TZ680 High Availability Unit #03-SSC-7014Get a Quote
SonicWall High Availability (Must be paired with a standard unit)
-
SonicWall TZ680 HA Conversion Licence to Standalone Unit #03-SSC-7476Get a Quote
Technical specifications
SonicWall TZ680 Specifications
SonicWall published maximums, measured under the test conditions noted below.
Firewall General
| Operating System | SonicOS 8 |
|---|---|
| Interfaces | 8 x 1GbE RJ45, 2 x 10G SFP, 1 console (Micro-USB), 1 USB (Type-C) |
| Wireless | Not fitted |
| Power over Ethernet (PoE) | Not fitted |
| Internal Storage (expansion) | Optional, up to 512 GB |
| Centralized Management | Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs |
| Logical VLAN and Tunnel Interfaces | 256 |
| SAML Single Sign-On Users | 2,500 |
| Access Points Supported | 32 |
Firewall and VPN Performance
| Firewall Inspection Throughput | 5 Gbps |
|---|---|
| Threat Prevention Throughput | 2.5 Gbps |
| Application Inspection Throughput | 3 Gbps |
| IPS Throughput | 3 Gbps |
| Anti-Malware Inspection Throughput | 2.5 Gbps |
| TLS/SSL Inspection and Decryption Throughput | 800 Mbps |
| IPSec VPN Throughput | 2.5 Gbps |
| Connections per Second | 26,000 |
| Maximum Connections (SPI) | 1,600,000 |
| Maximum Connections (DPI) | 600,000 |
| Maximum Connections (TLS) | 75,000 |
VPN and ZTNA
| Site-to-Site VPN Tunnels | 250 |
|---|---|
| IPSec VPN Clients | 10 (500 maximum) |
| SSL VPN Licences | 2 (250 maximum) |
| Encryption / Authentication | DES, 3DES, AES (128, 192, 256-bit) / MD5, SHA-256, SHA-384, Suite B Cryptography |
| Key Exchange | Diffie Hellman Groups 1, 2, 5, 14 |
| Route-Based VPN | RIP, OSPF, BGP |
| VPN Features | Dead Peer Detection, DHCP over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN Client Platforms | Microsoft Windows 10 and Windows 11 |
| NetExtender | Microsoft Windows 10 and Windows 11, Linux |
| Mobile Connect | Apple iOS, macOS, Google Android |
Security Services
| Deep Packet Inspection Services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption |
|---|---|
| Content Filtering Service | Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning |
| Comprehensive Anti-Spam Service | Yes |
| Application Visualization | Yes |
| Application Control | Yes |
| Capture Advanced Threat Protection | Yes |
| Advanced DNS Filtering | Yes |
Networking
| NAT Modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
|---|---|
| Routing Protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.11e (WMM) |
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO, RADIUS accounting, NTLM, internal user database, 2FA, Terminal Services, Citrix, CAC |
| Local User Database | 1,000 |
| VoIP | Full H.323v5, SIP |
| High Availability | Active/Standby with stateful synchronization |
Hardware and Power
| Form Factor | Desktop |
|---|---|
| Power Supply | 12V / 1.34A |
| Input Power | 100-240 VAC, 50-60 Hz, 0.27A |
| Maximum Power Consumption | 16.99 W |
| Redundant Power Supply | Optional |
| Total Heat Dissipation | 57.93 BTU/hr |
| Dimensions (H x W x D) | 3.5 x 13 x 19 cm |
| Weight | 0.97 kg |
| Shipping Weight | 1.93 kg |
| MTBF at 25°C | 29.9 years |
| Operating Temperature | 0°C to +40°C |
| Storage Temperature | -40°C to +70°C |
| Humidity | 5-95% non-condensing |
| Regulatory Model Number | APL72-120 |
Notes
Figures are SonicWall’s published Gen 8 TZ specifications.
Managed Protection Security Suite is a renewal and runs to three years; the other suites run to five.
Overview
TZ680
The top of the Gen 8 TZ range: 5 Gbps of firewall inspection and two 10G SFP uplinks.
Where the TZ680 fits
The top of the Gen 8 TZ range: 5 Gbps of firewall inspection and two 10G SFP uplinks. Every Gen 8 TZ runs the same SonicOS 8 build and the same security services, so the choice between them is capacity rather than capability.
Interested in the SonicWall TZ680?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote