We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
White rectangular desktop firewall appliance with front port array and SonicWall branding

SonicWall

SonicWall TZ 670 firewall appliance 8x1GbE 2x10GbE 1Y APSS 02-SSC-5675

SKU CH-B0VT-ZSF8T MPN 02-SSC-5675

Desktop firewall with 8×1GbE and 2×10GbE ports, 2.5–3.5Gbps throughput and 1-year Advanced Protection Security Suite

  • TypeWired
  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Speed8x1GbE, 2x10GbE, 2 USB 3.0
  • SecuritySecurity Services Deep Packet Inspection services: Gateway A

Hardware TZ 670

Option Total Secure (Appliance + 1Y APSS)

  • Enterprise-grade security with 2.5–3.5 Gbps throughput
  • 8×1 GbE and 2×10 GbE ports for high-speed connectivity
  • Supports up to 1,250,000 simultaneous sessions
  • Includes 1-year Advanced Protection Security Suite
  • FIPS 140-2 Level 2 and ICSA certified

Purpose-built for mid-sized networks

The SonicWall TZ 670 is a desktop security appliance engineered for distributed enterprise and SD-Branch locations. It delivers stateful inspection throughput of 2.5 to 3.5 Gbps and supports up to 1,250,000 concurrent sessions for 2,500 users. The bundled one-year Advanced Protection Security Suite activates gateway anti-virus, anti-spyware, intrusion prevention, DPI SSL and comprehensive content filtering from day one.

Desktop form factor with mixed-speed ports

Eight 1 GbE RJ45 ports and two 10 GbE SFP+ interfaces provide flexible copper and fibre uplinks without requiring a rack shelf. Two USB 3.0 ports and a console port sit on the same chassis for local management or cellular failover. The unit draws a maximum of 13.1 W from a 100-240 VAC supply, so it runs cool on a shelf or in a wiring closet.

One-year APSS subscription unlocks cloud operations

The included licence enables cloud-based centralized management, zero-touch deployment and seven days of cloud reporting alongside the core security services. Site-to-site VPN capacity reaches 250 tunnels with IPsec client support for up to 500 users and SSL VPN for 250. Certifications include FIPS 140-2 Level 2 with Suite B, ICSA firewall and anti-malware, plus global safety and emissions marks.

Highlights

  • Enterprise-grade security with 2.5–3.5 Gbps throughput
  • 8×1 GbE and 2×10 GbE ports for high-speed connectivity
  • Supports up to 1,250,000 simultaneous sessions
  • Includes 1-year Advanced Protection Security Suite
  • FIPS 140-2 Level 2 and ICSA certified

Specifications

BrandSONICWALL
SeriesTZ 670
ModelTZ 670 - 1Y APSS
Part Number02-SSC-5675
TypeWired
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
Speed8x1GbE, 2x10GbE, 2 USB 3.0
SecuritySecurity Services
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Ports8 x 1GbE RJ45
Simultaneous Sessions1250000
Maximum Users2500
VPNSite-to-site VPN tunnels: 250
IPSec VPN clients (maximum:) 10 (500)
SSL VPN licenses (maximum): 2 (250)
Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN: RIP, OSPF, BGP
Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported: Microsoft®, Windows 10
NetExtender: M
Throughput2.5Gbps - 3.5Gbps
CertificationsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
ComplianceFCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
Power Input100-240 VAC,
50-60 Hz
Max Power Consumption13.1W
Features1 year of Advanced Protection Services Suite (APSS): This bundle includes essential bundle services along with cloud management and cloud-based reporting for 7 days.
Dimensions3.5x15x22.5 (cm)
1.38x5.91x 8.85 in
Weight0.97 kg / 2.14 lbs
Shipping weight2.27 kg
Package size450 × 267 × 76 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What throughput does the 10GbE SFP+ interface cap at in practice?

The appliance delivers 2.5 to 3.5 Gbps throughput, so the 10 GbE SFP+ ports will not exceed that range.

What physical space and power does the desktop unit need?

It is a desktop form factor powered by an internal 100-240 VAC supply drawing up to 13.1 W.

How is the appliance deployed and what step is often missed?

Zero-Touch Deployment provisions the unit automatically, but the 1-year Advanced Protection Security Suite licence must be activated to enable the security services.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.