We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small silver desktop firewall with eight RJ-45 ports and two SFP+ cages on the front

SonicWall

SonicWall TZ670 02-SSC-5685 firewall appliance 8x1GbE 2x10GbE 2yr APSS

SKU CH-VH4P-9M786 MPN 02-SSC-5685

Desktop firewall with 8×1 GbE and 2×10 GbE ports, supporting up to 2500 users and 1 250 000 sessions, bundled with two years of Advanced Protection Security Suite

  • TypeWired
  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Speed8x1GbE, 2x10GbE, 2 USB 3.0
  • SecuritySecurity Services Deep Packet Inspection services: Gateway A

Hardware TZ 670

Option Secure Upgrade Plus (Appliance + 2Y APSS)

  • 8 Gigabit Ethernet and 2 10 Gigabit SFP+ ports for high-speed wired connectivity
  • 2-year Advanced Protection Security Suite with cloud management and 7-day reporting included
  • Deep Packet Inspection SSL, IPS, anti-virus, anti-spyware and content filtering
  • Desktop form factor with 13.1 W max power draw and 100-240 VAC input
  • FIPS 140-2 Level 2, ICSA and IPv6/USGv6 certifications for validated security compliance

SonicWall TZ670 Firewall Appliance

The SonicWall TZ670 is a desktop firewall appliance built for mid-sized organisations and distributed enterprises with SD-Branch sites. It combines eight Gigabit Ethernet ports, two 10G SFP+ interfaces and two USB 3.0 ports with a 2-year Advanced Protection Security Suite subscription. The bundle delivers gateway anti-virus, intrusion prevention, DPI-SSL inspection and content filtering alongside cloud-based management and reporting.

Interface Limits and Throughput

The appliance provides eight RJ-45 ports operating at 10/100/1000Base-T and two SFP+ slots for 10GBase-X connectivity. Deep packet inspection services share the same processing pipeline, so sustained multi-gigabit throughput with full SSL decryption will be lower than the raw interface rates. Maximum concurrent sessions reach 1,250,000 and the licensed user count caps at 2,500, which constrains very large deployments.

Deployment and Common Issues

Zero-touch deployment and a single-pane-of-glass cloud console simplify initial setup for branch offices. The desktop form factor measures 3.5 by 15 by 22.5 centimetres and draws up to 13.1 watts from a 100-240 VAC supply. Installers sometimes overlook the need for compatible SFP+ transceivers in the 10G slots and forget to activate the 2-year APSS licence before the included services expire.

Highlights

  • 8 Gigabit Ethernet and 2 10 Gigabit SFP+ ports for high-speed wired connectivity
  • 2-year Advanced Protection Security Suite with cloud management and 7-day reporting included
  • Deep Packet Inspection SSL, IPS, anti-virus, anti-spyware and content filtering
  • Desktop form factor with 13.1 W max power draw and 100-240 VAC input
  • FIPS 140-2 Level 2, ICSA and IPv6/USGv6 certifications for validated security compliance

Specifications

BrandSONICWALL
SeriesTZ 670
ModelTZ 670 - 2Y APSS
Part Number02-SSC-5685
TypeWired
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
Speed8x1GbE, 2x10GbE, 2 USB 3.0
SecuritySecurity Services
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Ports8x1GbE, 2x10GbE, 2 USB 3.0
Simultaneous Sessions1250000
Maximum Users2500
VPNSite-to-site VPN tunnels: 250
IPSec VPN clients (maximum:) 10 (500)
SSL VPN licenses (maximum): 2 (250)
Encryption/authentication: DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange: Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN: RIP, OSPF, BGP
Certificate support: Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP
VPN features: Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN client platforms supported: Microsoft®, Windows 10
NetExtender: M
CertificationsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
ComplianceFCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
Power Input100-240 VAC,
50-60 Hz
Max Power Consumption13.1W
Features2 years of Advanced Protection Services Suite (APSS): This bundle includes essential bundle services along with cloud management and cloud-based reporting for 7 days.
Dimensions3.5x15x22.5 (cm)
1.38x5.91x 8.85 in
Weight0.97 kg / 2.14 lbs
Shipping weight31.75 kg
Package size1148 × 676 × 198 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

Which TZ670 configuration does part number 02-SSC-5685 provide?

This SKU is a desktop TZ670 with eight 1GbE RJ-45 ports, two 10G SFP+ slots, two USB 3.0 ports and a 2-year Advanced Protection Security Suite licence.

How does the 1,250,000 simultaneous-session limit affect daily operation?

The firewall can track up to 1,250,000 concurrent sessions, so even heavy multi-user traffic stays inspected without session-table exhaustion.

What practical throughput ceiling do the 10G SFP+ interfaces impose?

The two 10G SFP+ ports cap any single flow or aggregate WAN link at 10 Gbit/s, while the eight 1GbE ports each top out at 1 Gbit/s.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.