Categories

Already have a quote?

Challenge us to...

...beat any equivalent competitor or SonicWall price!

Click here to get in touch and ask us for a better price.

SonicWall Partner

Picture of SonicWall TZ670 TotalSecure Advanced Edition
Picture of SonicWall TZ670 TotalSecure Advanced Edition
Picture of SonicWall TZ670 TotalSecure Advanced Edition
Appliance
Max Protection
Reporting
Picture of SonicWall TZ670 TotalSecure Advanced Edition
Picture of SonicWall TZ670 TotalSecure Advanced Edition
Picture of SonicWall TZ670 TotalSecure Advanced Edition

SonicWall TZ670 TotalSecure Advanced Edition

SonicWall TZ670 hardware with 1 year of Advanced Protection Security Suite (APSS) including - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, DNS Filtering, 24x7 Support with firmware updates and cloud management with 7-Day alerting, advanced reporting & analytics.
SKU: 02-SSC-5675
£2,820.64
£2,215.33

The SonicWall TZ670 series, is the first desktop-form factor next-generation firewall (NGFW) with 10 Gigabit Ethernet interfaces.

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ670 delivers industry-validated security effectiveness with best-in-class priceperformance. TZ670 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, realtime breach detection and prevention.

Highlights
  1. 10 GbE interfaces in a desktop form factor
  2. SD-Branch ready
  3. Secure SD-WAN capability
  4. SonicExpress mobile App onboarding
  5. Zero-Touch Deployment
  6. Single-pane-of-glass-management through cloud or firewall
  7. SonicWall Switch, SonicWave Access Point and Capture Client integration
  8. Built-in and expandable storage
  9. Redundant power
  10. High port density
  11. Cellular failover
  12. SonicOS 7.0
  13. Groundbreaking performance
  14. High connection count
  15. Fast DPI performance
  16. Low TCO

SonicWall TZ570 and TZ670 Launch Video:

The TZ670 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ670 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling and switching capabilities, plus provides singlepane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

Small to Medium Size Business
  1. Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities
  2. Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass
  3. Attain business continuity by providing failover to cellular connectivity
  4. Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more
  5. Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies
Distributed Enterprise with SD-Branches
  1. Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch
  2. Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape
  3. Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3
  4. Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client
  5. Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations
  6. Improve business efficiency, performance and reduce costs by leveraging Gen 7 TZ's hardware and software enhancements, plus features such SD-WAN technology
  7. Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment
  8. Ensure business continuity by providing failover to cellular connectivity
  9. Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes
Diagram - SD Branch
General
Operating system SonicOS 7.0
Interfaces 8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console
Expansion Storage Expansion Slot (Up to 256GB, with 32 GB included)
Management Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs
Single Sign-On (SSO) Users 2500
VLAN interfaces 256
Access points supported (maximum) 32
 
Firewall/VPN Performance
Firewall inspection throughput 5.0 Gbps
Threat Prevention throughput 2.5 Gbps
Application inspection throughput 3.0 Gbps
IPS throughput 3.0 Gbps
Anti-malware inspection throughput 2.5 Gbps
TLS/SSL decryption and inspection throughput (DPI SSL) 800 Mbps
VPN throughput 2.1 Gbps
Connections per second 25000
Maximum connections (SPI) 1 500 000
Maximum connections (DPI) 500 000
Default/Maximum connections (DPI SSL) 30 000
VPN
Site-to-site VPN tunnels 250
IPSec VPN clients (maximum) 10 (500)
SSL VPN licenses (maximum) 2 (250)
Encryption/authentication DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN RIP, OSPF, BGP
Certificate support Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-toSonicWall VPN, SCEP
VPN features Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported Microsoft® Windows 10
NetExtender Microsoft® Windows 10, Linux
Mobile Connect Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Microsoft® Windows 10
 
Security Services
Deep Packet Inspection services Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS) HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service Yes
Application Visualization Yes
Application Control Yes
Capture Advanced Threat Protection Yes
DNS Security Yes
 
Networking
IP address assignment Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols BGP4, OSPF, RIPv1/v2, static routes, policy-based routing
QoS Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
Local user database 250
VoIP Full H.323v1-5, SIP
Standards TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications FIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus
Certifications pending FIPS 140-2 (with Suite B) Level 2, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS)
 
Hardware
Form factor Desktop
Power supply 60W
Maximum power consumption (W) 13.1
Input power 100 to 240 VAC, 50-60 Hz
Total heat dissipation 55.1 BTU
Dimensions 3.5 x 15 x 22.5 cm
1.38 x 5.91 x 8.85 in
Weight 0.97 kg / 2.14 lbs
WEEE weight 1.42 kg / 3.13 lbs
Shipping weight 1.93 kg / 4.25 lbs
MTBF (years) 43.9
Environment (Operating/Storage) 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity 5-95% non-condensing
 
Regulatory
Major regulatory compliance FCC Class B, FCC , ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
Advanced Protection Service Suite
Complete network security, content filtering, application control, CaptureATP, gateway anti-virus, anti-spam, 24x7 support, cloud management and reporting in a single integrated package.

The SonicOS architecture is at the core of SonicWall physical and virtual firewalls including the TZ, NSa, NSv and NSsp Series. SonicOS leverages our patented, single-pass, lowlatency, Reassembly-Free Deep Packet Inspection® (RFDPI) and patent-pending Real-Time Deep Memory Inspection™ (RTDMI) technologies to deliver industry-validated high security effectiveness, SD-WAN, real-time visualization, high-speed virtual private networking (VPN) and other robust security features.

Through a combination of cloud-based and on-box technologies we deliver protection to our firewalls that’s been validated by independent third party testing for its extremely high security effectiveness. Unknown threats are sent to SonicWall’s cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. Enhancing Capture ATP is our RTDMI™ technology. The RTDMI engine detects and blocks malware and zero-day threats by inspecting directly in memory. RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks where the malware’s weaponry is exposed for less than 100 nanoseconds.

At a Glance
  1. Complete network security solution
    All service licences included.
  2. Capture ATP
    Multi-engine network sandbox to prevent zero-day threats. See Capture Advanced Threat Protection Service (CATPS).
  3. Gateway anti-virus and anti-spyware protection
    Including DPI-SSL and RFDPI.
  4. Cutting-edge IPS technology
    Protects against worms, trojans, software vulnerabilities and other intrusions by scanning all network traffic for malicious or anomalous patterns.
  5. Application intelligence and control
    Set of granular, application-specific policies providing application classification and policy enforcement to help administrators control and manage both business and non-business related applications.
  6. Content filtering
    Enforce internet use policies and control internal access to inappropriate, unproductive and potentially illegal web content with comprehensive content filtering. See Content Filtering Service (CFS).
  7. Network Topology View
    Display hosts, access-points in the network based on device name, mac address and IP Address.
  8. 24x7 support with firmware updates and hardware replacement
    Including firmware updates and hardware replacement protects your business and your SonicWall investment.
  9. Management and reporting
    Manage and view reports on firewalls via cloud through Network Security Manager tile of Capture Security Center. See Capture Security Centre (CSC).
Datasheets

 SonicWall TZ Series Generation 7 Datasheet

 Datasheet - SonicOS 7 and Security Services

 Generation 7 Bundle Comparison

Remote Configuration & Setup

When you purchase a new firewall, SonicWall support does not cover initial configuration.  We can help you fill this gap by offering the optional add-on, “Remote Configuration & Support” when you purchase any of SonicWall TZ and NSa firewalls or from the Secure Mobile Access product sets. 

Our experienced technicians will guide you through the installation and configuration process during an initial telephone consultation, regardless of your level of experience or skill.  All we require is access to the appliance over the internet and a contact phone number for your on-site engineer. The service is for a maximum of 2 hours - additional time can be purchased by prior agreement.

 

The Process

  1. Remember to tick the “REMOTE CONFIGURATION?” checkbox (above) before adding the device to the basket.  Once you’ve completed the purchase, we will contact you to book a scheduled telephone appointment with one of our engineers*.
  2. You will need to ensure that the appliance is available remotely on HTTPS.**
  3. Our engineer will contact you during the scheduled appointment (please provide a valid telephone number) to guide you through the installation and configuration process.
  4. Our service is tailored for any skill level so if you require additional support (or for more advanced configuration assistance), you can request an additional appointment.
  5. Once we are satisfied that your appliance is up and running, we will provide details of the network configuration, including setup and login details for your records.
  6. You can also expect a post-installation health check to ensure that your appliance is functioning at optimum levels.
  7. If you already have your network configuration planned out, we will implement it accordingly. If you do not have these details, we can advise on best practices, network setups, ranges and policies to ensure the most secure and flexible configuration. Full details will be provided at the end of the process.

 

* For multiple appliances, you will need to book a session for each installation.

** Although we can advise you on how to enable this, it is your responsibility to perform the required gateway/router changes. You may need to contact your connectivity provider. By default, the device is available on HTTPS. 

 

Need a proforma invoice?

You can checkout using the purchase order option. For higher value orders (those totalling above £7000) please contact us directly for the best pricing for your requirements.

Need a quote? Have a question?

Fill out the form below and we'll get back to you as soon as possible.