We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small silver desktop firewall appliance with front port array

SonicWall

SonicWall TZ470 firewall appliance 02-SSC-6798 2Y APSS

SKU CH-TXSF-KZKQB MPN 02-SSC-6798

Desktop firewall with eight 1GbE and two 2.5GbE ports, 1,000,000 concurrent sessions, and a two-year Advanced Protection Security Suite

  • TypeWired
  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • SecuritySecurity Services Deep Packet Inspection services: Gateway A
  • Ports8x1GbE, 2x2.5GbE, 2 USB 3.0, 1 Console

Hardware TZ 470

Option Secure Upgrade Plus (Appliance + 2Y APSS)

  • Supports up to 2500 users for growing networks
  • Handles 1000000 simultaneous sessions without slowdown
  • Includes 2-year Advanced Protection Security Suite
  • Offers 8x1GbE and 2x2.5GbE ports for flexible connectivity
  • Compact desktop form factor fits tight spaces

Desktop firewall for small organisations

The SonicWall TZ470 appliance combines eight 1 GbE ports and two 2.5 GbE ports with a two-year Advanced Protection Security Suite licence. It targets small businesses and distributed enterprise sites that need integrated threat prevention, content filtering and secure SD-WAN in a compact desktop form factor. The bundle includes cloud management and seven-day reporting.

Throughput limited by 2.5 GbE uplinks

WAN and LAN interfaces top out at 2.5 GbE, so aggregate throughput cannot exceed that line rate even when deep packet inspection is disabled. The unit handles up to one million simultaneous sessions and supports 2500 concurrent users, but VPN tunnel counts are capped at 150 site-to-site and 200 IPsec clients. SSL VPN licences default to two with a 150-user maximum.

Simple desktop placement with console access

The appliance measures 3.5 by 13.5 by 19 centimetres and weighs 0.83 kilogram, so it sits on a shelf or desk without rack hardware. A single console port provides local CLI access for initial setup, while zero-touch deployment can pull configuration from the cloud. USB 3.0 ports accept storage or a 3G/4G modem, though the latter is not included.

Highlights

  • Supports up to 2500 users for growing networks
  • Handles 1000000 simultaneous sessions without slowdown
  • Includes 2-year Advanced Protection Security Suite
  • Offers 8x1GbE and 2x2.5GbE ports for flexible connectivity
  • Compact desktop form factor fits tight spaces

Specifications

BrandSONICWALL
SeriesTZ 470
ModelTZ 470 - 2Y APSS
Part Number02-SSC-6798
TypeWired
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
SecuritySecurity Services
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Ports8x1GbE, 2x2.5GbE, 2 USB 3.0,
1 Console
Simultaneous Sessions1000000
Maximum Users2500
VPNSite-to-site VPN tunnels: 150
IPSec VPN clients (maximum:) 5 (200)
SSL VPN licenses (maximum): 2 (150)
Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN: RIP, OSPF, BGP
Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported: Microsoft®, Windows 10
NetExtender: Mi
CertificationsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA
Network Antivirus / AntiMalware
ComplianceFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick,VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL,WEEE, REACH,BSMI, KCC/MSIP, ANATEL
Power Input100 - 240 VAC,
50-60 Hz, 3A
Max Power Consumption19.95W
Features2 years of Advanced Protection Services Suite: This bundle includes essential bundle services along with cloud management and cloud-based reporting for 7 days.
Dimensions3.5x13.5x19 (cm)
1.8x5.3x7.5 (in)
Weight0.83 kg / 1.82 lbs
Shipping weight2.27 kg
Package size457 × 279 × 102 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

Which SonicWall TZ470 model includes the two-year Advanced Protection Security Suite?

Part number 02-SSC-6798 is the TZ470 desktop firewall bundled with a two-year Advanced Protection Security Suite that adds gateway anti-virus, intrusion prevention, DPI SSL, content filtering, anti-spam, application control and Capture Advanced Threat Protection.

What does the one-million simultaneous-session rating mean for daily operation?

The appliance can maintain up to 1,000,000 concurrent sessions, so it will handle heavy multi-user traffic such as web browsing, VPN tunnels and cloud applications without session-table exhaustion.

How do the 2.5 GbE SFP+ ports limit real-world throughput?

The two 2.5 GbE SFP+ interfaces cap any single WAN or LAN link at 2.5 Gbps, so aggregate throughput cannot exceed that speed per port even if the firewall's inspection engine could process more.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.