- Description
- Specifications
Secondary TZ670 Firewall Unit for Active/Standby High Availability Failover with 10 GbE Ports, SFP/SFP+ Expansion, and Gen 7 SonicOS 7.0
The SonicWall TZ670 High Availability unit (02-SSC-5654) is a secondary firewall appliance that pairs with a primary TZ670 to create an active/standby failover configuration. When the primary firewall fails or loses connectivity, the HA unit automatically takes over all firewall, VPN, and security functions with no manual intervention, maintaining continuous protection for production network traffic. The HA unit is identical hardware to the standard TZ670: 8 ports of 10 GbE copper, 2 SFP/SFP+ expansion slots, and Gen 7 SonicOS 7.0 architecture.
The HA designation means this unit is licensed specifically as the standby partner in a high availability pair. It operates in passive mode during normal conditions, continuously synchronizing configuration, state, and session data from the primary unit, and activates only when the primary goes offline. This provides the same level of protection as running two fully licensed firewalls at a significantly lower cost, making hardware redundancy accessible for organizations that cannot tolerate firewall downtime.
Where the TZ670 HA Fits
- Branch offices and remote sites with uptime requirements where the HA pair eliminates the firewall as a single point of failure, automatic failover maintains VPN tunnels and security policies without manual intervention, and the 10 GbE port density handles high-bandwidth branch connections to headquarters and cloud services
- Retail, healthcare, and financial branch locations where compliance requirements mandate continuous network security coverage, the active/standby configuration provides sub-second failover for point-of-sale systems, patient record access, and transaction processing, and the desktop form factor fits in limited IT closet space without rack infrastructure
- Distributed enterprise and managed service provider deployments where standardizing on TZ670 HA pairs across multiple locations provides consistent failover capability at every site, zero-touch deployment simplifies rollout of both primary and HA units, and the SFP/SFP+ expansion slots support fiber uplinks at sites with fiber-based WAN connectivity
What the TZ670 HA Delivers
- Active/Standby Failover: Continuously synchronizes configuration, state tables, and session data from the primary TZ670. Automatic takeover when the primary unit fails, maintaining VPN tunnels, security policies, and active sessions with minimal disruption to network traffic.
- Identical TZ670 Hardware: 8 ports of 10 GbE copper (10/100/1000Base-T, 10GBase-X), 2 SFP/SFP+ expansion slots for fiber uplinks, USB for expandable storage up to 256 GB. Desktop and rack-mountable form factor (8.9 x 5.9 x 1.4 inches, 2.14 lb) with optional redundant power supply.
- Gen 7 SonicOS 7.0 Platform: Full Gen 7 architecture with TLS 1.3 deep packet inspection, SD-WAN, Capture ATP support, and RTDMI/RFDPI threat prevention. Single-pane-of-glass management for firewalls, switches, and access points.
- Cost-Effective Redundancy: HA-licensed unit provides full hardware redundancy at a lower cost than deploying two independently licensed TZ670 firewalls. TAA compliant for government procurement of redundant network security infrastructure.
