Free delivery

McAfee SECURE sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
Dynamic search > > >
UK Sales: 0333 2405667
• SonicWall Specialist
• Expert Advice
• Free next working day delivery if ordered before 4.30pm (Mon-Fri)*
• Live Stock Feed
• Secure Ordering
• No Credit Card Surcharges
• Established 2006
SonicWall TZ600 Secure Upgrade Plus 3 Years CGSS

SonicWall TZ600 Secure Upgrade Plus 3 Years CGSS

  1. Max. Throughput: 1.5 Gbps,
  2. Full DPI Throughput: 300 - 600 Mbps,
  3. Recommend Users: <70,
  4. Interfaces: 10 x 1 Gb,
  5. Max. SSL VPN Clients: 200



(£2,614.80 inc VAT)
43   item(s) *

TZ600 Network Security Firewall - Expand, control and protect your network.
A fast connection to your business, school, remote office or retail site is only half the story; you also need to be able to securely manage it. The TZ500 and TZ600 give you enterprise-grade protection to stop cyberattacks as you expand and control your network.

The TZ600 offers enterprise-class features and uncompromising performance. For distributed enterprises with remote offices, all TZ products can be managed by the central office using a SonicWall NSA or SuperMassive firewall and GMS.

Firewall Product Features

10 x 1 GbE Copper Interfaces
1 - 70
1.5 Gbps
300 - 600 Mbps
200 Mbps
1.1 Gbps
900 Mbps
150,000 (125,000 with DPI)
2 (25 max)
2 (200 Max)
3-Year Subscription Included
3-Year Subscription Included
3-Year Subscription Included
3-Year Subscription Included
3-Year Subscription Included
30-Day FREE Trial
30-Day FREE Trial

Warranty & Support

3-Yr hardware/3-Yr support, firmware updates
Dynamic Support 24x7
Hardware overview
Operating system SonicOS 6.x
Security processing cores 4
Interfaces 10x1Gbe, 2 USB, 1 Console, 1 Expansion Slot
Expansion Expansion Slot (Rear), 2 USB
Single Sign On (SSO) Users 500
VLAN interfaces 50
Access points supported (max) 24
Firewall/VPN performance
Firewall inspection throughput1 1,500 Mbps
Threat Prevention throughput2 (Max Security) 500 Mbps
Threat Prevention throughput2,6 (Performance Optimized) 1.0 Gbps
Application inspection throughput2 1.1 Gbps
IPS throughput2 1.1 Gbps
Anti-malware inspection throughput2 500 Mbps
IMIX throughput3 900 Mbps
TLS/SSL inspection and decryption throughput (DPI SSL)2 200 Mbps
IPSec VPN throughput3 1.1 Gbps
Connections per second 12,000
Maximum connections (SPI) 150,000
Maximum connections (DPI) 125,000
Maximum connections (DPI SSL) 750
Site-to-site VPN tunnels 50
IPSec VPN clients (maximum) 2 (25)
SSL VPN licenses (maximum) 2 (200)
Virtual assist bundled (maximum) 1 (30-day trial)
Encryption/authentication DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key exchange Diffie Hellman Groups 1, 2, 5, 14
Route-based VPN RIP, OSPF
Certificate support Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for Dell SonicWALL-to-Dell SonicWALL VPN, SCEP
VPN features Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported Microsoft® Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit
NetExtender Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE
Mobile Connect Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Windows 8.1 (Embedded)
Security Services
Deep Packet Inspection services Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS) HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service Supported
Application Visualization Yes
Application Control Yes
Capture Advanced Threat Protection Yes
IP address assignment Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols4 BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
QoS Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix
Local user database 250
VoIP Full H.323v1-5, SIP
Certifications FIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Fir ewall, ICSA Anti-virus
Certifications pending Common Criteria NDPP
Common Access Card (CAC) Supported
High Availability Active/Standby with stateful synchronization
Form factor Desktop
Power supply (W) 60W external
Maximum power consumption (W) 16.1
Input power 100 to 240 VAC, 50-60 Hz, 1 A
Total heat dissipation 55.1 BTU
Dimensions 3.5x18x28cm
Weight 1.47 kg / 3.24 lbs
WEEE weight 1.89 kg /4.16 lbs
Shipping weight 2.48 kg / 5.47 lbs
MTBF (Years) 18.4
Environment 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity 5-95% non-condensing
Regulatory Model (Wired) APL30-0B8
Major regulatory compliance (Wired Models) FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, BSMI, KCC/MSIP
Regulatory Model (Wireless) n/a
Major regulatory compliance (Wireless Models) n/a
Integrated Wireless
Standards n/a
Frequency bands5 n/a
Operating Channels n/a
Transmit output power n/a
Transmit power control n/a
Data rates supported n/a
Modulation technology spectrum n/a
    *Future use.
  1. Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
  2. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
  3. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
  4. BGP is available only on SonicWall TZ400, TZ500 and TZ600.
  5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access points products (SonicPoints)
  6. Performance optimized mode can provide significant increases in performance without major impact to threat prevention efficacy.

Advanced Gateway Security Suite (AGSS)

At a glance

Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention, Application Intelligence and Control Service - CGSS & AGSS

  • Real-time gateway anti-virus engine that scans for viruses, worms, Trojans and other Internet threats in real-time.
  • Dynamic spyware protection blocks the installation of malicious spyware and disrupts existing spyware communications.
  • Powerful intrusion prevention protects against an array of network-based threats such as worms, Trojans and other malicious code.
  • Application intelligence and control provides application classification and policy enforcement.
  • Dynamically updated signature database for continuous threat protection.

Content Filtering Service (CFS) - CGSS & AGSS

  • Comprehensive content filtering provides control of internal access to inappropriate, unproductive and potentially illegal web content.
  • Website ratings cached locally on SonicWall firewalls make response time to frequently visited sites virtually instantaneous.
  • Dynamically updated rating architecture cross-references all requested websites against a database in the cloud containing millions of URLs, IP addresses and domains and then compares each rating to the local policy setting.

24x7 Support - CGSS & AGSS

  • Software and firmware updates and upgrades maintain network security to keep your solution as good as new.
  • Around-the-clock access to chat, telephone, email and web-based support for basic configuration and troubleshooting assistance.
  • Advance Exchange hardware replacement in the event of failure.
  • Annual subscription to SonicWall’s Service Bulletins and access to electronic support tools and moderated discussion groups.

Capture Advanced Threat Protection (Capture ATP) - AGSS

  • Block zero-day attacks before they enter your network.
  • Rapidly deploy remediation signatures to other network security appliances.
  • Establish advanced protection against the changing threat landscape.
  • Analyze a broad range of file types.

All variations with this model

1. SonicWall support subscriptions & renewals

3. SonicWall remote access client licences

5. SonicWall centralised management & reporting