Firewall General |
Operating system | SonicOS 7.0
| Interfaces | 8x1GbE, 2×2.5G SFP+, 2 USB 3.0, 1 Console
| Wireless support | 2×2 802.11ac Wave 2 (TZ570W)
| Power over Ethernet (PoE) support | 5 PoE or 3PoE+ (TZ570P)
| Storage expansion slot (Bottom) | Optional up to 256GB
| Management | Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs
| Redundant power supply | Yes
| Single Sign-On (SSO) Users | 2,500
| VLAN interfaces | 256
| Access points supported (maximum) | 32
|
---|
|
Firewall/VPN Performace |
Firewall inspection throughput | 4 Gbps
| Threat Prevention throughput | 2 Gbps
| Application inspection throughput | 2.5 Gbps
| IPS throughput | 2.5 Gbps
| Anti-malware inspection throughput | 2 Gbps
| TLS/SSL inspection and decryption throughput (DPI SSL) | 750 Mbps
| IPSec VPN throughput | 1.8 Gbps
| Connections per second | 16,000
| Maximum connections (SPI) | 1,250,000
| Maximum connections (DPI) | 400,000
| Maximum connections (DPI SSL) | 50,000
| Site-to-site VPN tunnels | 200
| IPSec VPN clients (maximum) | 10 (500)
| SSL VPN licenses (maximum) | 2 (200)
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v
| Route-based VPN | RIP, OSPF, BGP4
| Certificate support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
| VPN features | Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
| Global VPN client platforms supported | Microsoft® Windows 10
| NetExtender | Microsoft® Windows 10, Linux
| Mobile Connect | Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10
|
---|
|
Security Services |
Deep Packet Inspection services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
| Content Filtering Service (CFS) | HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
| Comprehensive Anti-Spam Service | Yes
| Application Visualization | Yes
| Application Control | Yes
| Capture Advanced Threat Protection | Yes
|
---|
|
Networking |
IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
| NAT modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
| Routing protocols | BGP4, OSPF, RIPv1/v2, static routes, policy-based routing
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
| Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
| Local user database | 250
| VoIP | Full H.323v1-5, SIP
| Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
| Certifications | Granted: FIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware, Pending: Common Criteria NDPP (with VPN and IPS), DoDIN, CSfC
| High availability | Active/Standby with stateful synchronization
|
---|
|
Hardware |
Form factor | Desktop
| Power supply | 60W external (TZ570/570W), 180W external (TZ570P only)
| Maximum power consumption (W) | 13.4 (TZ570), 15.3 (TZ570W), 108.75 (TZ570P)
| Input power | 100 – 240 VAC, 50-60 Hz, 3A
| Total heat dissipation | 44.7 (TZ570), 52.17 (TZ570W), 370.84 (TZ570P)
| Dimensions | 3.5×13.5×19 (cm) 1.8×5.3×7.5 (in)
| Weight | 0.97 kg / 2.14 lbs (TZ570), 0.99 kg / 2.18 lbs (TZ570W), 1.05 kg / 2.31 lbs (TZ570P)
| WEEE weight | 1.42 kg / 3.13 lbs (TZ570), 1.47 kg / 3.24 lbs (TZ570W), 1.57 kg / 3.46 lbs (TZ570P)
| Shipping weight | 1.93 kg / 4.25 lbs (TZ570), 1.98 kg / 4.36 lbs (TZ570W), 2.08 kg / 4.58 lbs (TZ570P)
| MTBF (in years) | 26.1 (TZ570), 23.3 (TZ570W), 31.7 (TZ570P)
| Environment (Operating/Storage) | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
| Humidity | 5-95% non-condensing
|
---|
|
Regulatory |
Major regulatory compliance (wired models) | FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
| Major regulatory compliance (wireless models) | FCC Class B, FCC RF ICES Class B, IC RF CE (R&TTE, EMC, LVD, RoHS), RCM, VCCI Class B, MIC/TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, ANATEL
| Major regulatory compliance (PoE models) | FCC Class A, ICES Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, UL/ cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/ MSIP, ANATEL
|
---|
|
Integrated Wireless |
Standards | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
| Frequency bands | 802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz
| Transmit output power | Based on the regulatory domain specified by the system administrator
| Transmit power control | Supported
|
---|
|