SonicWall TZ280 2.5 Gbps Next-Gen Firewall Appliance, HW Only

Product description

Enterprise-grade protection. Small-office simplicity.

The SonicWall TZ280 Gen 8 next-generation firewall delivers 2.5 Gbps of threat inspection, Zero-Trust access, and cloud-based management. Protect your home office, small business,or branch network without enterprise complexity. Also available as TZ280P (PoE+) and TZ280W (Wi-Fi 6)

Industry-validated security in a quiet desktop footprint.

Fanless. Under 13W. Built on SonicOS 8. The TZ280 packs 2.5 Gbps firewall throughput, 1 Gbps of threat prevention, and 1.2 Gbps IPSec VPN into a unit you can deploy on a shelf, wall-mount, or in a closet. Secure Wi-Fi, remote users, and site-to-site VPN from one appliance.

Self-managed or fully managed – choose your level of protection. Advanced Threat Protection Cloud Tools & Coverage Fully Managed by SonicSentry Enhanced Reporting & Coverage

Enterprise throughput in a desktop box.

Every port, every indicator – built for real-world deployment.

The TZ280 gives you eight 1 GbE copper ports, two 1G SFP uplinks, a Micro-USB console for out-of-band management, USB-C and USB Type-A for storage or 5G/LTE failover, and a full status LED array so you always know your network is healthy.

SonicWall TZ280 Gen 8 Firewall – Technical Specifications.

Configurations TZ280 (base) | TZ280P (4x PoE+,120W) | TZ280W (2×2 Wi-Fi 6) Firewall throughput 2.5 Gbps stateful inspection throughput. Threat prevention throughput 1 Gbps with full IPS, anti-malware, and application control enabled (Capture ATP licensed separately). IPS throughput 1.5 Gbps. IPSec VPN throughput 1.2 Gbps. Connections 1,000,000 maximum SPI connections; 200,000 DPI; 35,000 TLS; 12,000 new connections per second. Interfaces 8× 1 GbE RJ45 copper, 2× 1G SFP, 1× USB Type-C, 1× USB Type-A, 1× Micro-USB console. VPN capacity 200 site-to-site VPN tunnels; 5 IPSec VPN clients included (expandable to 200); 1 SSL VPN license included (expandable to 50). Wireless AP support Controls up to 16 SonicWall wireless access points (access points sold separately). Form factor & dimensions Fanless desktop; 3.5 × 13 × 19 cm; 0.82 kg; wall-mountable. Power 12 V / 1.03 A DC; 12.36 W maximum consumption; 100–240 VAC 50/60 Hz input; optional redundant power supply. Operating environment 0°C to +40°C operating; 5–95% non-condensing humidity; MTBF 51.7 years @ 25°C. Licensed service suites Compatible with SonicWall Essential Protection Service Suite (EPSS) and Advanced Protection Service Suite (APSS). Service suites licensed separately. Operating System SonicOS 8 – the unified Gen 8 security operating system with integrated firewall, VPN, SD-WAN, and wireless controller.

Compare the SonicWall TZ Series (Gen 8) and size up with confidence.

Customer Reviews

5.0 out of 5 stars 2

5.0 out of 5 stars 1

—

—

—
Recommended for

Home/small office

Small org/branch

Small org/SD-Branch

Growing organization

Larger organization

Firewall throughput

2.5 Gbps

3.5 Gbps

4 Gbps

4.5

5 Gbps

Threat prevention throughput

1 Gbps

1.5 Gbps

2 Gbps

2.2 Gbps

2.5 Gbps

IPSec VPN throughput

1.2 Gbps

1.6 Gbps

2 Gbps

2.2 Gbps

2.5 Gbps

Max SAML SSO users

1,000

1,000

2,500

2,500

2,500

Access points supported

16

16

32

32

32

SFP uplinks

2× 1G SFP

2× 5G/2.5G/1G SFP+

2× 5G/2.5G/1G SFP+

2× 5G/2.5G/1G SFP+

2× 10G SFP

Site-to-site VPN tunnels

200

200

200

250

250

APPLIANCE ONLY: Hardware unit sold without a service subscription — security services, firmware updates and support are NOT included and must be purchased separately to activate protection.
PERFORMANCE: Up to 2.5 Gbps firewall inspection, 1 Gbps threat prevention and 1.2 Gbps IPSec VPN throughput driven by SonicWall’s patented Reassembly-Free Deep Packet Inspection (RFDPI) engine.
CONNECTIVITY: 8x1GbE + 2x1G SFP in a desktop form factor; zero-touch deploy and manage on-box or via cloud Network Security Manager (NSM).
THREAT PROTECTION: SonicOS 8 delivers intrusion prevention, gateway anti-malware, application control, TLS/SSL decryption, Capture ATP multi-engine sandboxing (RTDMI) and reputation-based content & DNS filtering with an active service subscription.
BUILT FOR SMALL BUSINESS & BRANCH: Secure SD-WAN, IPSec and SSL VPN plus Zero-Trust Network Access through Cloud Secure Edge keep distributed sites and remote workers protected.