- Description
- Specifications
Gen 7 Desktop NGFW with 10 GbE Ports, SFP/SFP+ Expansion, and 2-Year Advanced Protection Service Suite Including Capture Client Endpoint Security, Cloud App Security, and NSM
The SonicWall TZ670 Secure Upgrade Plus with Advanced Edition (02-SSC-5685) is a Gen 7 next-generation firewall bundled with a 2-year Advanced Protection Service Suite (APSS) subscription that activates the full security stack from initial deployment. The package includes the TZ670 hardware platform with 8 ports of 10 GbE copper, 2 SFP/SFP+ expansion slots, and SonicOS 7.0, plus 2 years of gateway antivirus, anti-spyware, intrusion prevention, application control, content filtering, Capture ATP cloud sandboxing with RTDMI, Capture Client endpoint protection, Cloud App Security for SaaS applications, and Network Security Manager (NSM) cloud management.
The Secure Upgrade Plus Advanced Edition delivers the highest subscription tier available for the TZ670 through the Secure Upgrade Plus bundle program, combining hardware procurement with 2 years of endpoint protection, SaaS application security, and centralized cloud management on top of the full gateway threat prevention stack. The TZ670 hardware provides this in a desktop form factor with optional rack mounting, redundant power supply support, expandable storage up to 256 GB, integrated SD-WAN, and zero-touch deployment for multi-site rollouts. The single-SKU bundle eliminates separate network security subscription procurement and ensures all services are active on day one with a 2-year commitment that reduces annual renewal overhead.
Where the TZ670 Secure Upgrade Plus Advanced Fits
- Organizations deploying new firewall infrastructure with unified gateway and endpoint protection where the 2-year Advanced Edition subscription bundles Capture Client endpoint security alongside the TZ670 gateway services, providing coordinated threat response between the firewall and endpoints without requiring separate endpoint licensing, and the Secure Upgrade Plus program provides a trade-in path from older Gen 5 or Gen 6 SonicWall appliances
- Businesses with SaaS application security and compliance requirements where Cloud App Security extends protection to Microsoft 365, Google Workspace, and other cloud applications, the TZ670 gateway handles on-premises traffic with TLS 1.3 deep packet inspection, and the 2-year subscription term maintains continuous coverage with automatic signature updates for compliance monitoring
- Multi-site and managed environments needing centralized management where Network Security Manager (NSM) provides cloud-based management of TZ670 firewalls across distributed locations, zero-touch deployment simplifies remote provisioning, and the single subscription covers gateway security, endpoint protection, and cloud management under one renewal cycle with a 2-year commitment
What the TZ670 Secure Upgrade Plus Advanced Delivers
- 2-Year Advanced Protection Service Suite (APSS): Includes gateway antivirus, anti-spyware, intrusion prevention, application control, content filtering, Capture ATP with RTDMI, Capture Client endpoint protection, Cloud App Security for SaaS platforms, and Network Security Manager (NSM) cloud management. 24/7 support with firmware updates and hardware warranty coverage for the full subscription term.
- 10 GbE Desktop Hardware Platform: 8 ports of 10 GbE copper (10/100/1000Base-T, 10GBase-X), 2 SFP/SFP+ expansion slots for fiber uplinks, USB port, and expandable storage up to 256 GB. Desktop and rack-mountable form factor (8.9 x 5.9 x 1.4 inches, 2.14 lb) with optional redundant power supply.
- Gen 7 SonicOS 7.0 with Full DPI: TLS 1.3 deep packet inspection across all traffic, Reassembly-Free Deep Packet Inspection (RFDPI), integrated SD-WAN with application-aware routing, and single-pane-of-glass management of firewalls, switches, and access points.
- Single-SKU Procurement: Hardware, gateway security, endpoint protection, cloud app security, and cloud management in one part number with a 2-year subscription term. TAA compliant for government procurement. WEEE, RoHS, and REACH environmental compliance.
What Does SonicWall Capture Client Do
SonicWall Capture Client is a cloud-managed endpoint protection platform that installs on workstations and laptops to provide threat prevention, behavioral monitoring, and device management outside the firewall perimeter. Capture Client uses a SentinelOne-powered agent for signature-based and behavioral detection, automated rollback of ransomware changes, and device compliance enforcement. When bundled in the Advanced Protection Service Suite, Capture Client coordinates with the TZ670 gateway to share threat intelligence between the network perimeter and endpoints, enabling the firewall to enforce access policies based on endpoint health status. The 02-SSC-5685 includes 2 years of Capture Client as part of the APSS subscription, covering endpoint protection alongside gateway security, Cloud App Security, and NSM cloud management without requiring a separate endpoint licensing purchase.
