- Description
- Specifications
First Desktop Next-Generation Firewall with 10 Gigabit Ethernet, SFP/SFP+ Expansion, Expandable Storage, and Redundant Power for High-Throughput Networks
The SonicWall TZ670 is the first desktop-form-factor next-generation firewall with 10 Gigabit Ethernet interfaces, delivering the highest port speed in the TZ Series across 8 RJ-45 ports with two SFP/SFP+ expansion slots for fiber uplinks to the core network. The 10 GbE port speed provides headroom for aggregating traffic from multiple Wi-Fi 6E access points, NVMe storage systems, and high-bandwidth cloud applications without a port-speed bottleneck at the firewall. The unit ships as hardware only with SonicOS 7.0, ready to pair with SonicWall Essential, Threat, or Advanced security subscriptions.
The TZ670 is the top of SonicWall's Gen 7 TZ desktop lineup, stepping up from the TZ570's 5 GbE ports to full 10 GbE with both SFP and SFP+ expansion slot compatibility for 1G or 10G fiber modules. Built-in and expandable storage up to 256GB supports on-box logging, reporting, firmware backup, and content caching for network environments that need local data retention. An optional second power supply provides hardware redundancy, and secure SD-WAN routes traffic across multiple ISP connections based on application priority. Zero-Touch Deployment with the SonicExpress app provisions remote sites from a central console.
Where the TZ670 Fits
- Mid-size headquarters and regional offices with 100 to 200 users where the 10 GbE ports aggregate traffic from Wi-Fi 6E access points and gigabit switches without creating a bottleneck at the firewall, SFP/SFP+ expansion slots connect to the core switch or WAN over fiber, and expandable storage up to 256GB keeps compliance logs and reports on-box
- Distributed enterprise with bandwidth-intensive applications where the TZ670 anchors each site with 10 GbE wired throughput that supports video conferencing, VoIP, cloud backup, and SaaS applications simultaneously, SD-WAN failover across multiple ISP connections maintains application uptime, and Zero-Touch Deployment provisions sites remotely without dispatching technicians
- Government agencies and regulated industries requiring TAA-compliant hardware where Gen 7 NGFW architecture with Real-Time Deep Memory Inspection and TLS 1.3 decryption inspects encrypted threats that legacy firewalls cannot see, an optional redundant power supply eliminates a single point of failure, and AES-256 IPsec VPN tunnels secure site-to-site traffic across public internet connections
What the TZ670 Delivers
- 10 GbE Ports with SFP/SFP+ Expansion: 8 multi-gigabit 10 GbE RJ-45 ports plus 2 SFP/SFP+ expansion slots supporting both 1G SFP and 10G SFP+ modules for fiber or direct-attach copper uplinks. First desktop NGFW with 10 Gigabit Ethernet interfaces.
- Gen 7 NGFW with TLS 1.3 Inspection: SonicOS 7.0 with Real-Time Deep Memory Inspection (RTDMI), reassembly-free deep packet inspection, gateway antivirus, anti-spyware, intrusion prevention, content filtering, application control, URL filtering, and SSL/TLS 1.3 decryption. AES-256, AES-192, AES-128, and 3DES encryption.
- SD-WAN with Zero-Touch Deployment: Secure SD-WAN routes application traffic across multiple WAN links based on priority and link health. Zero-Touch Deployment and SonicExpress app enable remote site provisioning. SD-Branch ready for centralized management of SonicWall switches and SonicWave access points.
- 256GB Expandable Storage with Redundant Power: Built-in storage with expansion up to 256GB for logging, reporting, caching, and firmware backup. Optional second power supply for hardware redundancy. Desktop and rack-mountable form factor at 8.9 x 5.9 x 1.4 inches, 2.14 pounds. TAA compliant.
