Model

SonicWall TZ400 (01-SSC-0213)

Operating system

SonicOS

Interfaces

7x1GbE, 1 USB, 1 Console

Power over Ethernet (PoE) support

Expansion

USB

Management

CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs

Single Sign-On (SSO) Users

500

VLAN interfaces

50

Access points supported (maximum)

16

FIREWALL/VPN PERFORMANCE

TZ400 SERIES

Firewall inspection throughput

1.3 Gbps

Threat Prevention throughput

600 Mbps

Application inspection throughput

1.2 Gbps

IPS throughput

900 Mbps

Anti-malware inspection throughput

600 Mbps

TLS/SSL inspection and decryption throughput (DPI SSL)

180 Mbps

IPSec VPN throughput

900 Mbps

Connections per second

6000

Maximum connections (SPI)

150000

Maximum connections (DPI)

125000

Maximum connections (DPI SSL)

25000

VPN

TZ400 SERIES

Site-to-site VPN tunnels

20

IPSec VPN clients (maximum)

2 (25)

SSL VPN licenses (maximum)

2 (100)

Virtual assist bundled (maximum)

1 (30-day trial)

Encryption/authentication

DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography

Key exchange

Diffie Hellman Groups 1, 2, 5, 14v

Route-based VPN

RIP, OSPF, BGP

VPN features

Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN

Global VPN client platforms supported

Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10

NetExtender

Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE

Mobile Connect

Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome, Windows 8.1 (Embedded

SECURITY SERVICES

TZ400 SERIES

Deep Packet Inspection services

Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL

Content Filtering Service (CFS)

HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists

Comprehensive Anti-Spam Service

Supported

Application Visualization

Yes

Application Control

Yes

Capture Advanced Threat Protection

Yes

NETWORKING

TZ400 SERIES

IP address assignment

Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay

NAT modes

1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode

Routing protocols

BGP4, OSPF, RIPv1/v2, static routes, policy-based routing

QoS

Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)

Authentication

LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)

Local user database

150

VoIP

Full H.323v1-5, SIP

Standards

TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3

Certifications

FIPS 140-2 (with Suite B) Level 2, UC APL, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS)

Common Access Card (CAC)

Supported

High availability

Active/standby