Models:	TZ300	TZ350	TZ400	TZ500	TZ600
SonicOS Version	SonicOS
Security Processor	2 x 800 MHz	-	4 x 800 MHz	4 x 1 GHz	4 x 1.4 GHz
Interfaces	5x1GbE, 1 USB, 1 Console	5x1GbE, 1 USB, 1 Console	7x1GbE, 1 USB, 1 Console	8x1GbE, 2 USB, 1 Console	10x1GbE, 2 USB, 1 Console, 1 Expansion Slot
Memory (RAM)	1 GB	-	1 GB	1 GB	1 GB
Memory (flash)	64 MB	-	64 MB	64 MB	64 MB
Expansion	USB	USB	USB	2 USB	Expansion Slot (Rear)*, 2 USB
Single Sign-On (SSO) Users	500	500	500	500	500
VLAN Interfaces	25	25	50	50	50
SonicPoints supported (maximum)	8	8	16	16	24
Dell X-Series switch models supported	X1008/P, X1018/P, X1026/P, X1052/P, X4012
	TZ300	TZ350	TZ400	TZ500	TZ600
Firewall Inspection Throughput1	750 Mbps	1,000 Mbps	1,300 Mbps	1,400 Mbps	1,900 Mbps
Threat Prevention Throughput2	235 Mbps	335 Mbps	600 Mbps	700 Mbps	800 Mbps
Application Inspection Throughput2	375 Mbps	600 Mbps	1200 Mbps	1300 Mbps	1800 Mbps
IPS Throughput2	300 Mbps	400 Mbps	900 Mbps	1,000 Mbps	1,200 Mbps
Anti-malware Throughput2	235 Mbps	300 Mbps	600 Mbps	700 Mbps	800 Mbps
IMIX Throughput	200 Mbps	-	500 Mbps	700 Mbps	900 Mbps
SSL Inspection & Decryption (DPI SSL) Throughput2	60 Mbps	65 Mbps	180 Mbps	225 Mbps	300 Mbps
IPSec VPN Throughput3	300 Mbps	430 Mbps	900 Mbps	1,000 Mbps	1,100 Mbps
Connections per second	5,000	6,000	6,000	8,000	12,000
Maximum connections (SPI)	100,000	100,000	150,000	150,000	150,000
Maximum connections (DPI)	90,000	90,000	125,000	125,000	125,000
Maximum connections (DPI SSL)	25,000	25,000	25,000	25,000	25,000
VPN	TZ300	TZ350	TZ400	TZ500	TZ600
Site-to-Site VPN Tunnels	10	15	20	25	50
IPSec VPN Clients (maximum)	2 (25)	2 (25)	2 (25)	-	-
SSL VPN Licenses (maximum)	1 (50)	1 (75)	2 (100)	2 (150)	2 (200)
Virtual Assist Bundled (Maximum)	1 (30-day trial)	1 (30-day trial)	1 (30-day trial)	1 (30-day trial)	1 (30-day trial)
Encryption/Authentication	DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key Exchange	Diffie Hellman Groups 1, 2, 5, 14
Route-based VPN	RIP, OSPF
Certificate Support	Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-to-SonicWALL VPN, SCEP
VPN Features	Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN Client Platforms Supported	Microsoft Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10
NetExtender	Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
Mobile Connect	Apple iOS, Mac OS X, Google Android, Kindle Fire, Windows 8.1 (Embedded)
Security Services	TZ300	TZ350	TZ400	TZ500	TZ600
Deep Packet Inspection Services	Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS)	HTTP URL, HTTPS IP, keyword and content scanning, ActiveX, Java Applet, and cookie blocking bandwidth management on filtering categories, allow/forbid lists
Enforced Client Anti-Virus and Anti-Spyware	McAfee and Kaspersky
Comprehensive Anti-Spam Service	Supported
Application Visualization	Yes	Yes	Yes	Yes	Yes
Application Control	Yes	Yes	Yes	Yes	Yes
Capture Advanced Threat Protection	Yes	Yes	Yes	Yes	Yes
Networking	TZ300	TZ350	TZ400	TZ500	TZ600
IP Address Assignment	Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT Modes	1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing Protocols4	BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
QoS	Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication	XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
Local User Database	150			250
VoIP	Full H.323v1-5, SIP
Standards	TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications	FIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus
Certifications Pending	Common Criteria NDPP
Common Access Card (CAC)	Supported
High availability	Active/standby			Active/standby with stateful synchronization	Active/standby with stateful synchronization
Hardware	TZ300	TZ350	TZ400	TZ500	TZ600
Form Factor	Desktop
Power Supply (W)	24W external			36W external	60W external
Maximum Power Consumption (W)	6.9 / 12.0	6.9 / 12.0	9.2 / 13.8	13.4 / 17.7	16.1
Input Power	100 to 240 VAC, 50-60 Hz, 1 A
Total Heat Dissipation	23.5 / 40.9 BTU	23.5 / 40.9 BTU	31.3 / 47.1 BTU	45.9 / 60.5 BTU	55.1 BTU
Dimensions (in)	1.3x5.3x7.5	1.4x5.3x7.5	1.3x5.3x7.5	1.4x5.9x8.9	1.4x7.1x11.0
Dimensions (cm)	3.5x13.4x19	3.5x13.4x19	3.5x13.4x19	3.5x15x22.5	3.5x18x28
Weight	0.73 kg / 1.61 lbs 0.84 kg / 1.85 lbs	0.73 kg / 1.61 lbs 0.84 kg / 1.85 lbs	0.73 kg / 1.61 lbs 0.84 kg / 1.85 lbs	0.92 kg / 2.03 lbs 1.05 kg / 2.31 lbs	1.47 kg / 3.24 lbs
WEEE Weight	1.15 kg / 2.53 lbs 1.26 kg / 2.78 lbs	1.15 kg / 2.53 lbs 1.26 kg / 2.78 lbs	1.15 kg / 2.53 lbs 1.26 kg / 2.78 lbs	1.34 kg / 2.95 lbs 1.48 kg / 3.26 lbs	1.89 kg /4.16 lbs
Shipping Weight	1.37 kg / 3.02 lbs 1.48 kg / 3.26 lbs	1.37 kg / 3.02 lbs 1.48 kg / 3.26 lbs	1.37 kg / 3.02 lbs 1.48 kg / 3.26 lbs	1.93 kg / 4.25 lbs 2.07 kg / 4.56 lbs	2.48 kg / 5.47 lbs
MTBF (Years)	56.1	56.1	54.0	40.8	18.4
Environment	32-105° F, 0-40° C
Humidity	5-95% non-condensing
Regulatory	TZ300	TZ350	TZ400	TZ500	TZ600
Regulatory Model (wired)	APL28-0B4	-	APL28-0B4	APL29-0B6	APL30-0B8
Major Regulatory Compliance (wired)	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP	FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, UL cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP
Regulatory Model (wireless)	APL28-0B5	-	APL28-0B5	APL29-0B7	-
Major Regulatory Compliance (wireless)	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH	-

¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
² Full DPI/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
³ VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
⁴ BGP is available only on SonicWall TZ400, TZ500 and TZ600.
⁵ All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access points products (SonicPoints)
* Future use.

Models:	SOHO	SOHO 250	TZ300	TZ350
Operating system	SonicOS
Interfaces	5x1GbE, 1 USB, 1 Console		5x1GbE, 1 USB, 1 Console	5x1GbE, 1 USB, 1 Console
Power over Ethernet (PoE) support	—	—	TZ300P - 2 ports (2 PoE or 1 PoE+)	—
Expansion	USB
Management	CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs
Single Sign-On (SSO) Users	250	350	500	500
VLAN interfaces	25
Access points supported (maximum)	2	4	8	8
FIREWALL/VPN PERFORMANCE	SOHO	SOHO 250	TZ300	TZ350
Firewall inspection throughput1	300 Mbps	600 Mbps	750 Mbps	1.0 Gbps
Threat Prevention throughput2	150 Mbps	200 Mbps	235 Mbps	335 Mbps
Application inspection throughput2	—	275 Mbps	375 Mbps	600 Mbps
IPS throughput2	100 Mbps	250 Mbps	300 Mbps	400 Mbps
Anti-malware inspection throughput2	50 Mbps	100 Mbps	200 Mbps	300 Mbps
TLS/SSL inspection and decryption throughput (DPI SSL)2	30 Mbps	40 Mbps	50 Mbps	65 Mbps
IPSec VPN throughput3	100 Mbps	200 Mbps	300 Mbps	430 Mbps
Connections per second	1,800	3,000	5,000	6,000
Maximum connections (SPI)	10,000	50,000	100,000	100,000
Maximum connections (DPI)	10,000	50,000	90,000	90,000
Maximum connections (DPI SSL)	250	25,000	25,000	25,000
VPN	SOHO	SOHO 250	TZ300	TZ350
Site-to-site VPN tunnels	10	10	10	15
IPSec VPN clients (maximum)	1 (5)	1 (5)	1 (10)	1 (10)
SSL VPN licenses (maximum)	1 (10)	1 (25)	1 (50)	1 (75)
Virtual assist bundled (maximum)	—	1 (30-day trial)	1 (30-day trial)	1 (30-day trial)
Encryption/authentication	DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key exchange	Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN	RIP, OSPF, BGP
Certificate support	Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-toSonicWALL VPN, SCEP
VPN features	Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported	Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10
NetExtender	Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
Mobile Connect	Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome, Windows 8.1 (Embedded)
SECURITY SERVICES	SOHO	SOHO 250	TZ300	TZ350
Deep Packet Inspection services	Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS)	HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service	Supported
Application Visualization	No	Yes	Yes	Yes
Application Control	Yes	Yes	Yes	Yes
Capture Advanced Threat Protection	No	Yes	Yes	Yes
NETWORKING	SOHO	SOHO 250	TZ300	TZ350
IP address assignment	Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes	1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols4	BGP4, OSPF, RIPv1/v2, static routes, policy-based routing
QoS	Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database		LDAP (multiple domains), XAUTH/ RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
Local user database	150
VoIP	Full H.323v1-5, SIP
Standards	TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications	FIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus
Certifications pending	Common Criteria NDPP (Firewall and IPS)
Common Access Card (CAC)	Supported
High availability	No		Active/standby
HARDWARE	SOHO	SOHO 250	TZ300	TZ350
Form factor	Desktop
Power supply	24W external		24W external 65W external (TZ300P only)	24W external
Maximum power consumption (W)	6.4 / 11.3	6.9 / 11.3	6.9 / 12.0	6.9 / 12.0
Input power	100 to 240 VAC, 50-60 Hz, 1 A
Total heat dissipation	21.8 / 38.7 BTU	23.5 / 38.7 BTU	23.5 / 40.9 BTU	23.5 / 40.9 BTU
Dimensions	3.6 x 14.1 x 19 cm 1.42 x 5.55 x 7.48 in		3.5 x 13.4 x 19 cm 1.38 x 5.28 x 7.48 in	3.5 x 13.4 x 19 cm 1.38 x 5.28 x 7.48 in
Weight	0.34 kg / 0.75 lbs 0.48 kg / 1.06 lbs		0.73 kg / 1.61 lbs 0.84 kg / 1.85 lbs	0.73 kg / 1.61 lbs 0.84 kg / 1.85 lbs
WEEE weight	0.80 kg / 1.76 lbs 0.94 kg / 2.07 lbs		1.15 kg / 2.53 lbs 1.26 kg / 2.78 lbs	1.15 kg / 2.53 lbs 1.26 kg / 2.78 lbs
Shipping weight	1.20 kg / 2.64 lbs 1.34 kg / 2.95 lbs		1.37 kg / 3.02 lbs 1.48 kg / 3.26 lbs	1.37 kg / 3.02 lbs 1.48 kg / 3.26 lbs
MTBF (in years)	58.9/56.1 (wireless)	56.1	56.1	56.1
Environment (Operating/Storage)	32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity	5-95% non-condensing
REGULATORY	SOHO	SOHO 250	TZ300	TZ350
Major regulatory compliance (wired models)	FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, KCC/MSIP		FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, KCC/MSIP
Major regulatory compliance (wireless models)	FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH		FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH
INTEGRATED WIRELESS	SOHO	SOHO 250	TZ300	TZ350
Standards	802.11 a/b/g/n		802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
Frequency bands5	802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz		802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 2.412- 2.472 GHz, 5.180-5.825 GHz
Operating Channels	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64;		802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36- 48/52-64; 802.11ac: US and Canada 36- 48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
Transmit output power	Based on the regulatory domain specified by the system administrator
Transmit power control	Supported
Data rates supported	802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel		802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel
Modulation technology spectrum	802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM)		802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)

*Future use.

¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

² Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

³ VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

⁴ BGP is available only on SonicWALL TZ400, TZ500 and TZ600.

⁵ All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWALL's wireless access point products