- Description
- Specifications
Secondary TZ570 Firewall Unit for Active/Standby High Availability Failover with 8x GbE Ports, SFP+ Expansion, and Gen 7 SonicOS 7.0
The SonicWall TZ570 High Availability unit (02-SSC-5694) is a secondary firewall appliance that pairs with a primary TZ570 to create an active/standby failover configuration. When the primary firewall fails or loses connectivity, the HA unit automatically takes over all firewall, VPN, and security functions with no manual intervention, maintaining continuous protection for production network traffic. The HA unit is identical hardware to the standard TZ570: 8 GbE copper ports, 2 SFP+ expansion slots, and Gen 7 SonicOS 7.0 architecture.
The HA designation means this unit is licensed specifically as the standby partner in a high availability pair. It operates in passive mode during normal conditions, continuously synchronizing configuration, state, and session data from the primary unit, and activates only when the primary goes offline. This provides the same level of protection as running two fully licensed firewalls at a significantly lower cost, making hardware redundancy accessible for organizations that cannot tolerate firewall downtime.
Where the TZ570 HA Fits
- Branch offices and remote sites with uptime requirements where the HA pair eliminates the firewall as a single point of failure, automatic failover maintains VPN tunnels and security policies without manual intervention, and the SFP+ expansion slots support fiber uplinks at sites with fiber-based WAN connectivity
- Retail, healthcare, and financial branch locations where compliance requirements mandate continuous network security coverage, the active/standby configuration provides sub-second failover for point-of-sale systems, patient record access, and transaction processing, and the desktop form factor fits in limited IT closet space without rack infrastructure
- Distributed enterprise and managed service provider deployments where standardizing on TZ570 HA pairs across multiple locations provides consistent failover capability at every site, zero-touch deployment simplifies rollout of both primary and HA units, and the 8-port GbE density handles segmented branch network topologies
What the TZ570 HA Delivers
- Active/Standby Failover: Continuously synchronizes configuration, state tables, and session data from the primary TZ570. Automatic takeover when the primary unit fails, maintaining VPN tunnels, security policies, and active sessions with minimal disruption to network traffic.
- Identical TZ570 Hardware: 8 GbE copper ports (10/100/1000Base-T), 2 SFP+ expansion slots for fiber uplinks or 10G connectivity, USB for expandable storage up to 256 GB. Desktop and rack-mountable form factor (8.9 x 5.9 x 1.4 inches, 2.14 lb) with optional redundant power supply.
- Gen 7 SonicOS 7.0 Platform: Full Gen 7 architecture with TLS 1.3 deep packet inspection, SD-WAN, Capture ATP support, and RTDMI/RFDPI threat prevention. Single-pane-of-glass management for firewalls, switches, and access points.
- Cost-Effective Redundancy: HA-licensed unit provides full hardware redundancy at a lower cost than deploying two independently licensed TZ570 firewalls. TAA compliant for government procurement of redundant network security infrastructure.
What Is High Availability in Firewalls
High availability in firewalls refers to a deployment architecture where two identical firewall appliances operate as a pair to eliminate the firewall as a single point of failure. In an active/standby configuration like the TZ570 HA pair, the primary unit handles all traffic while the standby unit mirrors its configuration and session state in real time. If the primary unit fails due to hardware failure, power loss, or network issues, the standby unit takes over within seconds, maintaining active VPN tunnels, security policies, and session continuity. The 02-SSC-5694 is the standby unit in this pair and requires a separately purchased primary TZ570 with an active security subscription to form a complete HA deployment.
