TZ500 Network Security Firewall
Expand, control and protect your network.
A fast connection to your business, school, remote office or retail site is only half the story; you also need to be able to securely manage it. The TZ500 and TZ600 give you enterprise-grade protection to stop cyberattacks as you expand and control your network.
The TZ500 offers a no-compromise approach to securing growing networks. For distributed enterprises with remote offices, all TZ products can be managed by the central office using a larger SonicWall firewall and GMS.
- High-performance security engine.
- Advanced IPSec and SSL VPN.
- Streamlined GUI and advanced management.
- Content/URL filtering.
- Intrusion prevention.
- Gateway anti-virus and anti-spyware.
- SonicWall Mobile Connect app.
- Wireless network security.
Firewall Product Features
Warranty & Support
|Operating system||SonicOS 6.x|
|Security processing cores||4|
|Interfaces||8x1Gbe, 2 USB, 1 Console|
|Single Sign On (SSO) Users||500|
|Access points supported (max)||16|
|Firewall inspection throughput1||1,400 Mbps|
|Threat Prevention throughput2 (Max Security)||400 Mbps|
|Threat Prevention throughput2,6 (Performance Optimized)||800 Mbps|
|Application inspection throughput2||1.0 Gbps|
|IPS throughput2||1.0 Gbps|
|Anti-malware inspection throughput2||400 Mbps|
|IMIX throughput3||700 Mbps|
|TLS/SSL inspection and decryption throughput (DPI SSL)2||150 Mbps|
|IPSec VPN throughput3||1.0 Gbps|
|Connections per second||8,000|
|Maximum connections (SPI)||125,000|
|Maximum connections (DPI)||100,000|
|Maximum connections (DPI SSL)||750|
|Site-to-site VPN tunnels||25|
|IPSec VPN clients (maximum)||2 (25)|
|SSL VPN licenses (maximum)||2 (150)|
|Virtual assist bundled (maximum)||1 (30-day trial)|
|Encryption/authentication||DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography|
|Key exchange||Diffie Hellman Groups 1, 2, 5, 14|
|Route-based VPN||RIP, OSPF|
|Certificate support||Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for Dell SonicWALL-to-Dell SonicWALL VPN, SCEP|
|VPN features||Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN|
|Global VPN client platforms supported||Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit|
|NetExtender||Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE|
|Mobile Connect||Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded)|
|Deep Packet Inspection services||Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL|
|Content Filtering Service (CFS)||HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists|
|Comprehensive Anti-Spam Service||Supported|
|Capture Advanced Threat Protection||Yes|
|IP address assignment||Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay|
|NAT modes||1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode|
|Routing protocols4||BGP4, OSPF, RIPv1/v2, static routes, policy-based routing, multicast|
|QoS||Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)|
|Authentication||LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix|
|Local user database||250|
|VoIP||Full H.323v1-5, SIP|
|Standards||TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3|
|Certifications||FIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Fir ewall, ICSA Anti-virus|
|Certifications pending||Common Criteria NDPP|
|Common Access Card (CAC)||Supported|
|High Availability||Active/Standby with stateful synchronization|
|Power supply (W)||36W external|
|Maximum power consumption (W)||13.4 / 17.7|
|Input power||100 to 240 VAC, 50-60 Hz, 1 A|
|Total heat dissipation||45.9 / 60.5 BTU|
|Weight||0.92 kg / 2.03 lbs
1.05 kg / 2.31 lbs
|WEEE weight||1.34 kg / 2.95 lbs
1.48 kg / 3.26 lbs
|Shipping weight||1.93 kg / 4.25 lbs
2.07 kg / 4.56 lbs
|Environment||32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)|
|Regulatory Model (Wired)||APL29-0B6|
|Major regulatory compliance (Wired Models)||FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, BSMI, KCC/MSIP|
|Regulatory Model (Wireless)||APL29-0B7|
|Major regulatory compliance (Wireless Models)||FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH|
|Standards||802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS|
|Frequency bands5||802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 2.412- 2.472 GHz, 5.180-5.825 GHz|
|Operating Channels||802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64; 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64|
|Transmit output power||Based on the regulatory domain specified by the system administrator|
|Transmit power control||Supported|
|Data rates supported||802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel|
|Modulation technology spectrum||802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)|
- 1Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
- 2Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
- 3VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
- 4BGP is available only on SonicWall TZ400, TZ500 and TZ600.
- 5All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access points products (SonicPoints)
- 6Performance optimized mode can provide significant increases in performance without major impact to threat prevention efficacy.
- Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence and Control Service subscription
- Content Filtering Service subscription
- 24x7 Support subscription
- Capture Advanced Threat Protection (ATP) Service subscription (click for datasheet)
At a glance
Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention, Application Intelligence and Control Service - CGSS & AGSS
- Real-time gateway anti-virus engine that scans for viruses, worms, Trojans and other Internet threats in real-time.
- Dynamic spyware protection blocks the installation of malicious spyware and disrupts existing spyware communications.
- Powerful intrusion prevention protects against an array of network-based threats such as worms, Trojans and other malicious code.
- Application intelligence and control provides application classification and policy enforcement.
- Dynamically updated signature database for continuous threat protection.
Content Filtering Service (CFS) - CGSS & AGSS
- Comprehensive content filtering provides control of internal access to inappropriate, unproductive and potentially illegal web content.
- Website ratings cached locally on SonicWall firewalls make response time to frequently visited sites virtually instantaneous.
- Dynamically updated rating architecture cross-references all requested websites against a database in the cloud containing millions of URLs, IP addresses and domains and then compares each rating to the local policy setting.
24x7 Support - CGSS & AGSS
- Software and firmware updates and upgrades maintain network security to keep your solution as good as new.
- Around-the-clock access to chat, telephone, email and web-based support for basic configuration and troubleshooting assistance.
- Advance Exchange hardware replacement in the event of failure.
- Annual subscription to SonicWall’s Service Bulletins and access to electronic support tools and moderated discussion groups.
Capture Advanced Threat Protection (Capture ATP) - AGSS
- Block zero-day attacks before they enter your network.
- Rapidly deploy remediation signatures to other network security appliances.
- Establish advanced protection against the changing threat landscape.
- Analyze a broad range of file types.
- SonicWall TZ500 [01-SSC-0211] £994.00
- SonicWall TZ500 Support Bundle 8x5 (1 Year) [01-SSC-0425] £1162.00
- SonicWall TZ500 TotalSecure (1 Year) [01-SSC-0445] £1473.00
- SonicWall TZ500 TotalSecure - Advanced Edition (1 Year) [01-SSC-1708] £1689.00
- SonicWall TZ500 Wireless-AC [01-SSC-0449] £1097.00
- SonicWall TZ500 Wireless-AC Support Bundle 8x5 (1 Year) [01-SSC-0427] £1284.00
- SonicWall TZ500 Wireless-AC TotalSecure - Advanced Edition (1 Year) [01-SSC-1710] £1807.00
- SonicWall TZ500 Secure Upgrade Plus 2 Years CGSS [01-SSC-0428] £1473.00
- SonicWall TZ500 Secure Upgrade Plus 3 Years CGSS [01-SSC-0429] £1803.00
- SonicWall TZ500 Secure Upgrade Plus - Advanced Edition (2 Years) [01-SSC-1738] £1689.00
- SonicWall TZ500 Secure Upgrade Plus - Advanced Edition (3 Years) [01-SSC-1739] £2176.00
- SonicWall TZ500 Wireless-AC Secure Upgrade Plus - Advanced Edition (2 Years) [01-SSC-1752] £1807.00
- SonicWall TZ500 Wireless-AC Secure Upgrade Plus - Advanced Edition (3 Years) [01-SSC-1753] £2305.00
- SonicWall TZ500 High Availability (HA) Unit [01-SSC-0439] £792.00
1. SonicWall support subscriptions & renewals
- SonicWall Standard Support for TZ500 Series (1 Year) [01-SSC-0470] £169.00
- SonicWall 24x7 Support for TZ500 Series (1 Year) [01-SSC-0476] £228.00
2. SonicWall security subscriptions & renewals
- Gateway Anti-Malware and Intrusion Prevention for SonicWall TZ500 Series (1 Year) [01-SSC-0458] £218.00
- Content Filtering Service Premium Business Edition for SonicWall TZ500 Series (1 Year) [01-SSC-0464] £258.00
- Comprehensive Anti-Spam Service for SonicWall TZ500 Series (1 Year) [01-SSC-0482] £397.00
3. SonicWall remote access client licences
4. SonicWall add-ons & replacements
- SonicWall TZ500 Replacement Power Supply [01-SSC-0437] £28.00
- SonicWall TZ500 Rack Mount Kit [01-SSC-0438] £155.00
- 3rd Party Rackmount Kit For SonicWall TZ500 [RM-SW-T5] £135.00
- Stateful HA Upgrade for SonicWall TZ500 Series [01-SSC-0494] £218.00
- HA Conversion License to Standalone Unit for SonicWall TZ500 Series [01-SSC-0501] £258.00
- Expanded License for SonicWall TZ500 Series [01-SSC-0502] £297.00
5. SonicWall centralised management & reporting
- SonicWall GMS 5 Node Software License [01-SSC-7680] £1513.00