Skip to Main Content »

Have a Question? We Can Help!
Call Toll-Free 866.403.5305

Welcome to Firewalls.com

You're currently on:

SonicWall TZ Series Firewall Comparison

Models:

SOHO

TZ300

TZ400

TZ500

TZ600

 SOHOTZ300TZ400TZ500TZ600
SonicOS VersionSonicOS
Security Processor2 x 400 MHz /
2 x 800 MHz
2 x 800 MHz4 x 800 MHz4 x 1 GHz4 x 1.4 GHz
Interfaces5x1GbE, 1 USB, 1 Console5x1GbE, 1 USB, 1 Console7x1GbE, 1 USB, 1 Console8x1GbE, 2 USB, 1 Console10x1GbE, 2 USB, 1 Console, 1 Expansion Slot
Memory (RAM)512 MB / 1GB1 GB1 GB1 GB1 GB
Memory (flash)32 MB / 64 MB64 MB64 MB64 MB64 MB
ExpansionUSBUSBUSB2 USBExpansion Slot (Rear)*, 2 USB
Single Sign-On (SSO) Users250500500500500
VLAN Interfaces2525505050
SonicPoints supported (maximum)28161624
Dell X-Series switch models supportedNot availableX1008/P, X1018/P, X1026/P, X1052/P, X4012

 

SOHO

TZ300

TZ400

TZ500

TZ600

Firewall Inspection Throughput1300 Mbps750 Mbps1,300 Mbps1,400 Mbps1,500 Mbps
Full DPI Throughput250 Mbps100 Mbps300 Mbps400 Mbps500 Mbps
Application Inspection Throughput2-300 Mbps900 Mbps1,000 Mbps1,100 Mbps
IPS Throughput2100 Mbps300 Mbps900 Mbps1,000 Mbps1,100 Mbps
Anti-malware Throughput250 Mbps100 Mbps300 Mbps400 Mbps500 Mbps
IMIX Throughput60 Mbps200 Mbps500 Mbps700 Mbps900 Mbps
SSL Inspection & Decryption (DPI SSL) Throughput215 Mbps45 Mbps100 Mbps150 Mbps200 Mbps
IPSec VPN Throughput3100 Mbps300 Mbps900 Mbps1,000 Mbps1,100 Mbps
Connections per second1,8005,0006,0008,00012,000
Maximum connections (SPI)10,00050,000100,000125,000150,000
Maximum connections (DPI)10,00050,00090,000100,000125,000
Maximum connections (DPI SSL)100500500750750

VPN

SOHO

TZ300

TZ400

TZ500

TZ600

Site-to-Site VPN Tunnels1010202550
IPSec VPN Clients (maximum)1 (5)1 (10)2 (25)2 (25)2 (25)
SSL VPN Licenses (maximum)1 (10)1 (50)2 (100)2 (150)2 (200)
Virtual Assist Bundled (Maximum)-1 (30-day trial)1 (30-day trial)1 (30-day trial)1 (30-day trial)
Encryption/AuthenticationDES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key ExchangeDiffie Hellman Groups 1, 2, 5, 14
Route-based VPNRIP, OSPF
Certificate SupportVerisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-to-SonicWALL VPN, SCEP
VPN FeaturesDead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN Client Platforms SupportedMicrosoft Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10
NetExtenderMicrosoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
Mobile ConnectApple iOS, Mac OS X, Google Android, Kindle Fire, Windows 8.1 (Embedded)

Security Services

SOHO

TZ300

TZ400

TZ500

TZ600

Deep Packet Inspection ServicesGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS)HTTP URL, HTTPS IP, keyword and content scanning, ActiveX, Java Applet, and cookie blocking bandwidth management on filtering categories, allow/forbid lists
Enforced Client Anti-Virus and Anti-SpywareMcAfee and Kaspersky
Comprehensive Anti-Spam ServiceSupported
Application VisualizationNoYesYesYesYes
Application ControlYesYesYesYesYes
Capture Advanced Threat ProtectionNoYesYesYesYes

Networking

SOHO

TZ300

TZ400

TZ500

TZ600

IP Address AssignmentStatic, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT Modes1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing Protocols4BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
QoSBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
AuthenticationXAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user databaseXAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
Local User Database150250
VoIPFull H.323v1-5, SIP
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
CertificationsFIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus
Certifications PendingCommon Criteria NDPP
Common Access Card (CAC)Supported
High availabilityNoActive/standbyActive/standbyActive/standby with stateful synchronizationActive/standby with stateful synchronization

Hardware

SOHO

TZ300

TZ400

TZ500

TZ600

Form FactorDesktop
Power Supply (W)24W external24W external24W external36W external60W external
Maximum Power Consumption (W)6.4 / 11.36.9 / 12.09.2 / 13.813.4 / 17.716.1
Input Power100 to 240 VAC, 50-60 Hz, 1 A
Total Heat Dissipation21.8 / 38.7 BTU23.5 / 40.9 BTU31.3 / 47.1 BTU45.9 / 60.5 BTU55.1 BTU
Dimensions (in)1.4x5.6x7.51.3x5.3x7.51.3x5.3x7.51.4x5.9x8.91.4x7.1x11.0
Dimensions (cm)3.6x14.1x193.5x13.4x193.5x13.4x193.5x15x22.53.5x18x28
Weight0.34 kg / 0.75 lbs
0.48 kg / 1.06 lbs
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
0.73 kg / 1.61 lbs
0.84 kg / 1.85 lbs
0.92 kg / 2.03 lbs
1.05 kg / 2.31 lbs
1.47 kg / 3.24 lbs
WEEE Weight0.80 kg / 1.76 lbs
0.94 kg / 2.07 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.15 kg / 2.53 lbs
1.26 kg / 2.78 lbs
1.34 kg / 2.95 lbs
1.48 kg / 3.26 lbs
1.89 kg /4.16 lbs
Shipping Weight1.20 kg / 2.64 lbs
1.34 kg / 2.95 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
1.37 kg / 3.02 lbs
1.48 kg / 3.26 lbs
1.93 kg / 4.25 lbs
2.07 kg / 4.56 lbs
2.48 kg / 5.47 lbs
MTBF (Years)58.9/56.1 (wireless)56.154.040.818.4
Environment40-105° F, 0-40° C
Humidity5-95% non-condensing

Regulatory

SOHO

TZ300

TZ400

TZ500

TZ600

Regulatory Model (wired)APL31-0B9APL28-0B4APL28-0B4APL29-0B6APL30-0B8
Major Regulatory Compliance (wired)FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIPFCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, UL cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP
Regulatory Model (wireless)APL41-0BAAPL28-0B5APL28-0B5APL29-0B7-
Major Regulatory Compliance (wired)FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACHFCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACHFCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACHFCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH-

1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 Full DPI/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4 BGP is available only on SonicWall TZ400, TZ500 and TZ600.
5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access points products (SonicPoints)
* Future use.


Please wait...

Thank You.

{{var product.name}}
has been added to your cart

Continue shopping
View cart & checkout