We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
White desktop firewall appliance with front panel ports and indicator lights

SonicWall

SonicWall 02-SSC-2833 TZ570 firewall appliance 8x1GbE 2x5GbE

SKU CH-1J5D-3B7EA MPN 02-SSC-2833

Desktop firewall appliance with 8 Gigabit and 2 five-Gigabit ports, deep-packet inspection services and 1,250,000 simultaneous sessions

  • TypeWired
  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • SecuritySecurity Services Deep Packet Inspection services: Gateway A
  • Ports8x1GbE, 2x5GbE, 2 USB 3.0

Hardware TZ 570

Option Hardware Only

  • Industry-validated security effectiveness with ICSA and FIPS certifications
  • 10 high-density ports: eight 1GbE and two 5GbE SFP+
  • Zero-Touch Deployment enables rapid multi-site rollout with minimal IT effort
  • 1,250,000 simultaneous sessions and 2,500 maximum users for scalable performance
  • 200 site-to-site VPN tunnels and up to 500 IPSec clients for secure connectivity

Appliance for small to mid-sized organisations

The SonicWall TZ570 is a desktop next-generation firewall built for small to mid-sized organisations and distributed enterprises with SD-Branch sites. It delivers validated security effectiveness with high port density in a compact form factor. The appliance includes 8x1GbE and 2x5GbE interfaces plus two USB 3.0 ports for expandable storage up to 256GB. It supports up to 2,500 users and 1,250,000 simultaneous sessions.

Interface limits of the 10-port design

The ten Ethernet ports provide 8x1GbE and 2x5GbE connectivity, capping uplink throughput at 5GbE per SFP+ interface. Deep Packet Inspection services such as Gateway Anti-Virus, Intrusion Prevention and DPI SSL run within the appliance's processing ceiling of 13.4W maximum power draw. VPN capacity is limited to 200 site-to-site tunnels, 10 concurrent IPSec clients (expandable to 500) and 2 SSL VPN licenses (expandable to 200). Buyers who need more concurrent VPN tunnels or higher multi-gigabit port counts cannot meet those needs with this model.

Desktop deployment with Zero-Touch option

The desktop form factor plugs into standard 100-240 VAC power and connects via the 10 Ethernet ports and console. Zero-Touch Deployment allows simultaneous rollout across multiple sites with minimal on-site IT involvement. Common issues include underestimating the licence upgrades required for full SSL VPN or IPSec client counts, and overlooking the need for an optional second power supply when redundancy is required. Expandable storage must be sourced separately to enable logging, caching and firmware backup features.

Highlights

  • Industry-validated security effectiveness with ICSA and FIPS certifications
  • 10 high-density ports: eight 1GbE and two 5GbE SFP+
  • Zero-Touch Deployment enables rapid multi-site rollout with minimal IT effort
  • 1,250,000 simultaneous sessions and 2,500 maximum users for scalable performance
  • 200 site-to-site VPN tunnels and up to 500 IPSec clients for secure connectivity

Specifications

BrandSONICWALL
SeriesTZ 570
ModelTZ 570
Part Number02-SSC-2833
TypeWired
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
SecuritySecurity Services
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Ports8x1GbE, 2x5GbE, 2 USB 3.0
Simultaneous Sessions1,250,000
Maximum Users2500
VPNSite-to-site VPN tunnels: 200
IPSec VPN clients (maximum:) 10 (500)
SSL VPN licenses (maximum): 2 (200)
Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN: RIP, OSPF, BGP
Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported: Microsoft®, Windows 10
NetExtender: M
CertificationsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
ComplianceFCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
Power Input100-240 VAC,
50-60 Hz
Max Power Consumption13.4W
Shipping weight2.27 kg
Package size457 × 279 × 102 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

Should I pick the TZ570, TZ570W or TZ570P model for my branch office?

The TZ570 is the non-wireless, non-PoE variant with 8×1 GbE and 2×5 GbE ports; choose TZ570W if you need built-in Wi-Fi or TZ570P if you need PoE+ on the LAN ports.

What does the 1,250,000 simultaneous-session figure mean for daily traffic?

It is the maximum number of concurrent connections the firewall can track; each user session, VPN tunnel or inspected flow consumes one entry, so the limit determines how many active flows the box can handle before new ones are dropped.

How do the 2×5GbE SFP+ ports constrain my uplink design?

They accept 5 Gbps SFP+ transceivers or direct-attach cables, giving two high-speed uplinks or stack links; the remaining 8×1 GbE ports serve LAN segments, and total throughput cannot exceed the appliance’s licensed security-services performance.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.