Guideline only

TZ280 (~70 Devices)
Entry hardware-only desktop model (8x1GbE + 2x1G SFP), offering 2.5 Gbps firewall / 1 Gbps threat prevention throughput, aimed at home offices, small offices, and lean branches.

TZ380 (~80 Devices)
Steps up to Multi-Gig SFP+ (2x5G/2.5G/1G) with 3.5 Gbps firewall / 1.5 Gbps threat prevention throughput, and offers a wireless TZ380W variant with Wi-Fi 6, for small organisations and lean branches.

TZ480 (~100 Devices)
Same port layout as the TZ380 but pushes to 4 Gbps firewall / 2 Gbps threat prevention throughput, for small organisations and distributed enterprises with SD-Branch locations.

TZ580 (~120 Devices)
Adds more headroom at 4.5 Gbps firewall / 2.2 Gbps threat prevention throughput with the same Multi-Gig SFP+ uplinks, targeting small-to-mid-sized organisations and SD-Branch deployments (also the reference model in SonicWall's PoE-heavy branch diagrams).

TZ680 (~150 Devices)
Top of the TZ line with true 10G SFP uplinks (2x10G/5G/2.5G/1G) and the highest throughput in the range at 5 Gbps firewall / 2.5 Gbps threat prevention, for mid-sized organisations and larger SD-Branch sites.

SonicWall TZ Series (Gen 8) Datasheet

NSa 2800 (~300 Devices)
Entry point of the Gen 8 mid-range line, with 16x1GbE + 3x10G SFP+ ports, up to 8 Gbps firewall throughput and 7 Gbps threat prevention, aimed at medium-sized enterprises replacing the NSa 2700.

NSa 3800 (~ 600 Devices)
Steps up port density (24x1GbE + 10x10G SFP+) and pushes throughput to 12 Gbps firewall / 8 Gbps threat prevention, suited to expanding businesses and branch-heavy networks, replacing the NSa 3700.

NSa 4800 (~ 1200 Devices)
A 1U rackmount model with high port density (24x1GbE + 8x10G SFP+) and a jump to 20 Gbps firewall / 13 Gbps threat prevention throughput, built for campus and enterprise edge deployments.

SonicWall NSa Series (Gen 8) Datasheet

SonicWall Gen 8: Architecture and Services

Network Security Manager SaaS

Managed Protection Security Suite