Model

SonicWall TZ670 (02-SSC-5675)

Operating system

SonicOS 7.0

Interfaces

8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console

Power over Ethernet (PoE) support

N/A

Expansion

Storage Expansion Slot (Up to 256GB, with 32 GB included)

Management

Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs

Single Sign-On (SSO) Users

2500

VLAN interfaces

256

Access points supported (maximum)

32

FIREWALL/VPN PERFORMANCE

TZ670 SERIES

Firewall inspection throughput

5.00 Gbps

Threat Prevention throughput

2.50 Gbps

Application inspection throughput

3.0 Gbps

IPS throughput

3.0 Gbps

Anti-malware inspection throughput

2.50 Gbps

TLS/SSL inspection and decryption throughput (DPI SSL)

800 Mbps

IPSec VPN throughput

2.10 Gbps

Connections per second

25000

Maximum connections (SPI)

1500000

Maximum connections (DPI)

500000

Maximum connections (DPI SSL)

30000

VPN

TZ670 SERIES

Site-to-site VPN tunnels

250

IPSec VPN clients (maximum)

10 (500)

SSL VPN licenses (maximum)

2 (200)

Encryption/authentication

DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography

Key exchange

Diffie Hellman Groups 1, 2, 5, 14v

Route-based VPN

RIP, OSPF, BGP

Route-based VPN

Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP

VPN features

Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN

Global VPN client platforms supported

Microsoft® Windows 10

NetExtender

Microsoft® Windows 10, Linux

Mobile Connect

Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10

SECURITY SERVICES

TZ670 SERIES

Deep Packet Inspection services

Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL

Content Filtering Service (CFS)

HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists

Comprehensive Anti-Spam Service

Yes

Application Visualization

Yes

Application Control

Yes

Capture Advanced Threat Protection

Yes

DNS Security

Yes

NETWORKING

TZ670 SERIES

IP address assignment

Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay

NAT modes

1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode

Routing protocols

BGP, OSPF, RIPv1/v2, static routes, policy-based routing

QoS

Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)

Authentication

LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)

Local user database

250

VoIP

Full H.323v1-5, SIP

Standards

TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3

Certifications

FIPS 140-2 (with Suite B) Level 2, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS)

HARDWARE

TZ670 SERIES

Form factor

Desktop

Power supply

60W external

Maximum power consumption (W)

13.1

Input power

100-240 VAC, 50-60 Hz

Total heat dissipation

55.1 BTU

Dimensions

3.5 x 15 x 22.5 (cm)
1.38 x 5.91 x 8.85 in

Weight

0.97 kg / 2.14 lbs

WEEE weight

1.42 kg / 3.13 lbs

Shipping weight

1.93 kg / 4.25 lbs

MTBF (in years)

43.9

Environment (Operating/Storage)

32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)

Humidity

5-95% non-condensing