We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact desktop firewall appliance, matte black finish, front port array visible

SonicWall

SonicWall TZ670 02-SSC-2837 firewall appliance

SKU CH-T13E-KFS65 MPN 02-SSC-2837

Desktop firewall appliance with 8x1GbE and 2x10GbE ports, supporting 1250000 simultaneous sessions and 250 site-to-site VPN tunnels for up to 2500 users

  • TypeWired
  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Speed8x1GbE, 2x10GbE, 2 USB 3.0
  • SecuritySecurity Services Deep Packet Inspection services: Gateway A

Hardware TZ 670

Option Hardware Only

  • Protects networks with gateway anti-virus and intrusion prevention
  • Connects sites securely using up to 250 site-to-site VPN tunnels
  • Manages traffic through 8 Gigabit and 2 10-Gigabit Ethernet ports
  • Supports up to 2,500 users with 1,250,000 simultaneous sessions
  • Deploys rapidly via zero-touch provisioning and cloud management

SonicWall TZ670 mid-sized enterprise firewall

The SonicWall TZ670 is a desktop firewall appliance built for mid-sized organisations and distributed enterprises with SD-Branch locations. It provides wired connectivity through eight 1GbE ports and two 10GbE SFP+ ports plus two USB 3.0 interfaces. Deep packet inspection services cover gateway anti-virus, anti-spyware, intrusion prevention and DPI SSL. The unit supports up to 1,250,000 simultaneous sessions and 2,500 users.

Desktop form factor with Zero-Touch Deployment

The appliance arrives in a compact desktop chassis measuring 3.5 by 15 by 22.5 centimetres and weighing 0.97 kilogram. Zero-Touch Deployment allows the device to be provisioned remotely without on-site configuration. A single console port provides local management access if required. Ensure rack or shelf space accommodates the stated dimensions and that a 100-240 VAC power source is available.

Verify WAN capacity and licence requirements

Confirm that your upstream links do not exceed the two 10GbE SFP+ ports and eight 1GbE ports provided. Site-to-site VPN capacity is limited to 250 tunnels while SSL VPN licences default to two with a maximum of 250. Organisations needing more concurrent VPN users or additional security subscriptions should validate licence upgrades before ordering.

Highlights

  • Protects networks with gateway anti-virus and intrusion prevention
  • Connects sites securely using up to 250 site-to-site VPN tunnels
  • Manages traffic through 8 Gigabit and 2 10-Gigabit Ethernet ports
  • Supports up to 2,500 users with 1,250,000 simultaneous sessions
  • Deploys rapidly via zero-touch provisioning and cloud management

Specifications

BrandSONICWALL
SeriesTZ 670
ModelTZ 670
Part Number02-SSC-2837
TypeWired
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
Speed8x1GbE, 2x10GbE, 2 USB 3.0
SecuritySecurity Services
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Ports8 x 1GbE, 2 x 10GbE, 2 x USB 3.0, 1 Console
Simultaneous Sessions1250000
Maximum Users2500
VPNSite-to-site VPN tunnels: 250
IPSec VPN clients (maximum:) 10 (500)
SSL VPN licenses (maximum): 2 (250)
Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN: RIP, OSPF, BGP
Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported: Microsoft®, Windows 10
NetExtender: M
CertificationsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
ComplianceFCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
Power Input100-240 VAC,
50-60 Hz
Max Power Consumption13.1W
Dimensions3.5x15x22.5 (cm)
1.38x5.91x 8.85 in
Weight0.97 kg / 2.14 lbs
Shipping weight2.27 kg
Package size457 × 279 × 102 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

How do I confirm the TZ670 02-SSC-2837 is processing traffic correctly after deployment?

The management dashboard shows active sessions up to 1,250,000 and connected users up to 2,500; security service status panels display Gateway Anti-Virus, Anti-Spyware, IPS and DPI SSL inspection running in real time.

What ships with the 02-SSC-2837 desktop unit and what must I source separately?

The box contains the TZ670 appliance with 8×1GbE, 2×10GbE SFP+, 2×USB 3.0 and 1 Console port, plus a 100–240 VAC power cord; SFP+ transceivers and patch cables for the network ports are not included.

Which TZ670 variant should I choose for a site needing up to 250 site-to-site VPN tunnels and 500 IPSec clients?

This 02-SSC-2837 model supports 250 site-to-site tunnels, 500 IPSec VPN clients (10 bundled) and 250 SSL VPN users (2 bundled), matching the stated capacity for mid-sized or distributed enterprise deployments.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.