Skip to Main Content »

Have a Question? We Can Help!
Call Toll-Free 866.403.5305

Welcome to Firewalls.com

Are you a Consultant or Reseller? Join our Partner Program for better pricing, support, & exclusive tools!

You're currently on:

SonicWall TZ Series Firewall Comparison

Need Help Choosing?
Call our Firewall Experts!
866-403-5305

Models:

TZ300

TZ350

TZ400

TZ500

TZ600

 TZ300TZ350TZ400TZ500TZ600
SonicOS VersionSonicOS
Security Processor2 x 800 MHz -4 x 800 MHz4 x 1 GHz4 x 1.4 GHz
Interfaces5x1GbE, 1 USB, 1 Console5x1GbE, 1 USB, 1 Console7x1GbE, 1 USB, 1 Console8x1GbE, 2 USB, 1 Console10x1GbE, 2 USB, 1 Console, 1 Expansion Slot
Memory (RAM)1 GB -1 GB1 GB1 GB
Memory (flash)64 MB -64 MB64 MB64 MB
ExpansionUSBUSBUSB2 USBExpansion Slot (Rear)*, 2 USB
Single Sign-On (SSO) Users500500500500500
VLAN Interfaces2525505050
SonicPoints supported (maximum)88161624
Dell X-Series switch models supportedX1008/P, X1018/P, X1026/P, X1052/P, X4012

 

TZ300

TZ350

TZ400

TZ500

TZ600

Firewall Inspection Throughput1750 Mbps1,000 Mbps1,300 Mbps1,400 Mbps1,900 Mbps
Threat Prevention Throughput2235 Mbps335 Mbps600 Mbps700 Mbps800 Mbps
Application Inspection Throughput2375 Mbps600 Mbps1200 Mbps1300 Mbps1800 Mbps
IPS Throughput2300 Mbps400 Mbps900 Mbps1,000 Mbps1,200 Mbps
Anti-malware Throughput2235 Mbps300 Mbps600 Mbps700 Mbps800 Mbps
IMIX Throughput200 Mbps -500 Mbps700 Mbps900 Mbps
SSL Inspection & Decryption (DPI SSL) Throughput260 Mbps65 Mbps180 Mbps225 Mbps300 Mbps
IPSec VPN Throughput3300 Mbps430 Mbps900 Mbps1,000 Mbps1,100 Mbps
Connections per second5,0006,0006,0008,00012,000
Maximum connections (SPI)100,000100,000150,000150,000150,000
Maximum connections (DPI)90,00090,000125,000125,000125,000
Maximum connections (DPI SSL)25,00025,00025,00025,00025,000

VPN

TZ300

TZ350

TZ400

TZ500

TZ600

Site-to-Site VPN Tunnels1015202550
IPSec VPN Clients (maximum)2 (25)2 (25)2 (25) - -
SSL VPN Licenses (maximum)1 (50)1 (75)2 (100)2 (150)2 (200)
Virtual Assist Bundled (Maximum)1 (30-day trial)1 (30-day trial)1 (30-day trial)1 (30-day trial)1 (30-day trial)
Encryption/AuthenticationDES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key ExchangeDiffie Hellman Groups 1, 2, 5, 14
Route-based VPN

RIP, OSPF

Certificate SupportVerisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-to-SonicWALL VPN, SCEP
VPN FeaturesDead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN Client Platforms SupportedMicrosoft Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10
NetExtenderMicrosoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
Mobile ConnectApple iOS, Mac OS X, Google Android, Kindle Fire, Windows 8.1 (Embedded)

Security Services

TZ300

TZ350

TZ400

TZ500

TZ600

Deep Packet Inspection ServicesGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS)HTTP URL, HTTPS IP, keyword and content scanning, ActiveX, Java Applet, and cookie blocking bandwidth management on filtering categories, allow/forbid lists
Enforced Client Anti-Virus and Anti-SpywareMcAfee and Kaspersky
Comprehensive Anti-Spam ServiceSupported
Application VisualizationYesYesYesYesYes
Application ControlYesYesYesYesYes
Capture Advanced Threat ProtectionYesYesYesYesYes

Networking

TZ300

TZ350

TZ400

TZ500

TZ600

IP Address AssignmentStatic, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT Modes1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing Protocols4BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
QoSBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
AuthenticationXAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
Local User Database150  250
VoIPFull H.323v1-5, SIP
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
CertificationsFIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus
Certifications PendingCommon Criteria NDPP
Common Access Card (CAC)Supported
High availabilityActive/standbyActive/standby with stateful synchronizationActive/standby with stateful synchronization

Hardware

TZ300

TZ350

TZ400

TZ500

TZ600

Form FactorDesktop
Power Supply (W)24W external36W external60W external
Maximum Power Consumption (W)6.9 / 12.06.9 / 12.09.2 / 13.813.4 / 17.716.1
Input Power100 to 240 VAC, 50-60 Hz, 1 A
Total Heat Dissipation23.5 / 40.9 BTU23.5 / 40.9 BTU31.3 / 47.1 BTU45.9 / 60.5 BTU55.1 BTU
Dimensions (in)1.3x5.3x7.51.4x5.3x7.51.3x5.3x7.51.4x5.9x8.91.4x7.1x11.0
Dimensions (cm)3.5x13.4x193.5x13.4x193.5x13.4x193.5x15x22.53.5x18x28
Weight0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
0.92 kg / 2.03 lbs
1.05 kg / 2.31 lbs
1.47 kg / 3.24 lbs
WEEE Weight1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.34 kg / 2.95 lbs
1.48 kg / 3.26 lbs
1.89 kg /4.16 lbs
Shipping Weight1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
1.93 kg / 4.25 lbs
2.07 kg / 4.56 lbs
2.48 kg / 5.47 lbs
MTBF (Years)56.156.154.040.818.4
Environment32-105° F, 0-40° C
Humidity5-95% non-condensing

Regulatory

TZ300

TZ350

TZ400

TZ500

TZ600

Regulatory Model (wired)APL28-0B4 -APL28-0B4APL29-0B6APL30-0B8
Major Regulatory Compliance (wired)FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, UL cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP
Regulatory Model (wireless)APL28-0B5 -APL28-0B5APL29-0B7-
Major Regulatory Compliance (wireless)FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACHFCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACHFCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACHFCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH-

1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 Full DPI/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4 BGP is available only on SonicWall TZ400, TZ500 and TZ600.
5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access points products (SonicPoints)
* Future use.

Models:

SOHO

SOHO 250

TZ300

TZ350

 SOHOSOHO 250 TZ300TZ350
Operating systemSonicOS
Interfaces5x1GbE, 1 USB, 1 Console5x1GbE, 1 USB, 1 Console5x1GbE, 1 USB, 1 Console
Power over Ethernet (PoE) supportTZ300P - 2 ports (2 PoE or 1 PoE+)
ExpansionUSB
ManagementCLI, SSH, Web UI, Capture Security Center, GMS, REST APIs
Single Sign-On (SSO) Users250350500500
VLAN interfaces25
Access points supported (maximum)2488

FIREWALL/VPN PERFORMANCE

SOHO

SOHO 250

TZ300

TZ350

Firewall inspection throughput1300 Mbps600 Mbps750 Mbps1.0 Gbps
Threat Prevention throughput2150 Mbps200 Mbps235 Mbps335 Mbps
Application inspection throughput2275 Mbps375 Mbps600 Mbps
IPS throughput2100 Mbps250 Mbps300 Mbps400 Mbps
Anti-malware inspection throughput250 Mbps100 Mbps200 Mbps300 Mbps
TLS/SSL inspection and decryption throughput (DPI SSL)230 Mbps40 Mbps50 Mbps65 Mbps
IPSec VPN throughput3100 Mbps200 Mbps300 Mbps430 Mbps
Connections per second1,8003,0005,0006,000
Maximum connections (SPI)10,00050,000100,000100,000
Maximum connections (DPI)10,00050,00090,00090,000
Maximum connections (DPI SSL)25025,00025,00025,000

VPN

SOHO

SOHO 250

TZ300

TZ350

Site-to-site VPN tunnels10101015
IPSec VPN clients (maximum)1 (5)1 (5)1 (10)1 (10)
SSL VPN licenses (maximum)1 (10)1 (25)1 (50)1 (75)
Virtual assist bundled (maximum)1 (30-day trial)1 (30-day trial)1 (30-day trial)
Encryption/authenticationDES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key exchangeDiffie Hellman Groups 1, 2, 5, 14v
Route-based VPNRIP, OSPF, BGP
Certificate supportVerisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-toSonicWALL VPN, SCEP
VPN featuresDead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supportedMicrosoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10
NetExtenderMicrosoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
Mobile ConnectApple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome, Windows 8.1 (Embedded)

SECURITY SERVICES

SOHO

SOHO 250

TZ300

TZ350

Deep Packet Inspection servicesGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS)HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam ServiceSupported
Application VisualizationNoYesYesYes
Application ControlYesYesYesYes
Capture Advanced Threat ProtectionNoYesYesYes

NETWORKING

SOHO

SOHO 250

TZ300

TZ350

IP address assignmentStatic, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols4BGP4, OSPF, RIPv1/v2, static routes, policy-based routing
QoSBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
AuthenticationLDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user databaseLDAP (multiple domains), XAUTH/ RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
Local user database150
VoIPFull H.323v1-5, SIP
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
CertificationsFIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus
Certifications pendingCommon Criteria NDPP (Firewall and IPS)
Common Access Card (CAC)Supported
High availabilityNoActive/standby

HARDWARE

SOHO

SOHO 250

TZ300

TZ350

Form factorDesktop
Power supply24W external24W external
65W external
(TZ300P only)
24W external
Maximum power consumption (W)6.4 / 11.36.9 / 11.36.9 / 12.06.9 / 12.0
Input power100 to 240 VAC, 50-60 Hz, 1 A
Total heat dissipation21.8 / 38.7 BTU23.5 / 38.7 BTU23.5 / 40.9 BTU23.5 / 40.9 BTU
Dimensions3.6 x 14.1 x 19 cm
1.42 x 5.55 x 7.48 in
3.5 x 13.4 x 19 cm
1.38 x 5.28 x 7.48 in
3.5 x 13.4 x 19 cm
1.38 x 5.28 x 7.48 in
Weight0.34 kg / 0.75 lbs
0.48 kg / 1.06 lbs
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
WEEE weight0.80 kg / 1.76 lbs
0.94 kg / 2.07 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
Shipping weight1.20 kg / 2.64 lbs
1.34 kg / 2.95 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
MTBF (in years)58.9/56.1 (wireless)56.156.156.1
Environment (Operating/Storage)32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity5-95% non-condensing

REGULATORY

SOHO

SOHO 250

TZ300

TZ350

Major regulatory compliance (wired models)FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, KCC/MSIPFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, KCC/MSIP
Major regulatory compliance (wireless models)FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACHFCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH

INTEGRATED WIRELESS

SOHO

SOHO 250

TZ300

TZ350

Standards802.11 a/b/g/n802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
Frequency bands5802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 2.412- 2.472 GHz, 5.180-5.825 GHz
Operating Channels802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64;802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36- 48/52-64; 802.11ac: US and Canada 36- 48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
Transmit output powerBased on the regulatory domain specified by the system administrator
Transmit power controlSupported
Data rates supported802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel
Modulation technology spectrum802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM)802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)

*Future use.

1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

2 Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.

3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.

4 BGP is available only on SonicWALL TZ400, TZ500 and TZ600.

5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWALL's wireless access point products


Please wait...

Thank You.

{{var product.name}}
has been added to your cart

Continue shopping
View cart & checkout