SonicWall TZ670
Include TOTAL SECURE – ESSENTIAL EDITION - 1 YR
รายละเอียดสินค้าโดยย่อ
- อุปกรณ์ Next Gen Firewall Gen7.0 ทุกรุ่นมาพร้อมกับ Essential Protection Service Suite (EPSS) ประกอบไปด้วย
- Capture Advanced Threat Protection
- Gateway Anti-Virus, Anti-Spyware
- Intrusion Prevention,
- Application Firewall Service
- Content Filtering Services
- Comprehensive Anti-Spam
- 24 x 7 support
- มี Multi-Engine Sandbox พร้อมทั้ง Capture Advanced Threat Protection (ATP) ในการป้องกัน Ransomware
- มี Application Throughput และ Threat Prevention Throughput ที่สูงและใช้งานได้จริง
- สามารถใช้งาน Secure SD-WAN, Load Balance Link บนตัวอุปกรณ์ โดยไม่มีค่าใช้จ่าย
- รองรับการเก็บ Log ตาม พรบ. ออก Report และวิเคราะห์ภัยคุกคาม Analytics ทั้งแบบ On-premise และ Cloud
- รองรับการทำงานแบบ HA (Active / Standby) โดยไม่มีค่าใช้จ่าย license และ MA Support เพิ่มเติม
- รองรับ multi-gigabit ports 1GB/2.5GB/10GB ตั้งแต่รุ่น TZ series จนถึง NSA series
- สามารถเชื่อมต่ออินเตอร์เน็ตผ่าน 4G/5G แบบ USB dongle
- 24 x 7 support ร่วมการแจ้งปัญหาผ่าน web portal, phone และ email แบบ 24 x 7 และในกรณีเครื่องเสีย มีเครื่องใหม่ทดแทน พร้อมทั้ง update firmware ได้ตลอดระยะเวลา MA
FIREWALL GENERAL |
TZ270 SERIES |
TZ370 SERIES |
TZ470 SERIES |
TZ570 SERIES |
TZ670 SERIES |
|||
---|---|---|---|---|---|---|---|---|
Operating system | SonicOS 7.0 | |||||||
Interfaces | 8x1GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console | 8x1GbE, 2x10GbE, 2 USB 3.0, 1 Console | |||
Power over Ethernet (PoE) support | N/A | N/A | N/A | 5 PoE or 3PoE+ (TZ570P) | N/A | |||
Storage Expansion slot | Optional up to 256GB | Optional up to 256GB, 32GB included | ||||||
Management | Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs | |||||||
Single Sign-On (SSO) Users | 1,000 | 1,000 | 2,500 | 2,500 | 2,500 | |||
VLAN interfaces | 64 | 128 | 128 | 256 | 256 | |||
Access points supported (maximum) | 16 | 16 | 32 | 32 | 32 | |||
FIREWALL/VPN PERFORMANCE |
TZ270 |
TZ370 |
TZ470 |
TZ570 |
TZ670 |
|||
Firewall inspection throughput1 | 2 Gbps | 3 Gbps | 3.5 Gbps | 4 Gbps | 5 Gbps | |||
Threat Prevention throughput2 | 750 Mbps | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | |||
Application inspection throughput2 | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | 3 Gbps | |||
IPS throughput2 | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | 3.0 Gbps | |||
Anti-malware inspection throughput2 | 750 Mbps | 1 Gbps | 1.5 Gbps | 2 Gbps | 2.5 Gbps | |||
TLS/SSL inspection and decryption throughput (DPI SSL)2 | 300 Mbps | 500 Mbps | 600 Mbps | 750 Mbps | 800 Mbps | |||
IPSec VPN throughput3 | 750 Mbps | 1.3 Gbps | 1.5 Gbps | 1.8 Gbps | 2.1 Gbps | |||
Connections per second | 6,000 | 9,000 | 12,000 | 16,000 | 25,000 | |||
Maximum connections (SPI) | 750,000 | 900,000 | 1,000,000 | 1,250,000 | 1,500,000 | |||
Maximum connections (DPI) | 150,000 | 200,000 | 550,000 | 400,000 | 500,000 | |||
Maximum connections (DPI SSL) | 25,000 | 30,000 | 35,000 | 50,000 | 75,000 | |||
VPN |
TZ270 |
TZ370 |
TZ470 |
TZ570 |
TZ670 |
|||
Site-to-site VPN tunnels | 50 | 100 | 150 | 200 | 250 | |||
IPSec VPN clients (maximum) | 5 (200) | 5 (200) | 5 (200) | 10 (500) | 10 (500) | |||
SSL VPN licenses (maximum) | 1 (50) | 2 (100) | 2 (150) | 2 (20) | 2 (250) | |||
Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography | |||||||
Key exchange | Diffie Hellman Groups 1, 2, 5, 14v | |||||||
Route-based VPN | RIP, OSPF, BGP | |||||||
VPN features | Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN | |||||||
Global VPN client platforms supported | Microsoft® Windows 10 | |||||||
NetExtender | Microsoft Windows 10, Linux | |||||||
Mobile Connect | Apple® iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10 | |||||||
SECURITY SERVICES |
TZ470 SERIES |
|||||||
Deep Packet Inspection services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL | |||||||
Content Filtering Service (CFS) | HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists | |||||||
Comprehensive Anti-Spam Service | Yes | |||||||
Application Visualization | Yes | |||||||
Application Control | Yes | |||||||
Capture Advanced Threat Protection | Yes | |||||||
DNS Security | Yes | |||||||
NETWORKING |
TZ270 |
TZ370 |
TZ470 |
TZ570 |
TZ670 |
|||
IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay | |||||||
NAT modes | 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode | |||||||
Routing protocols4 | BGP, OSPF, RIPv1/v2, static routes, policy-based routing | |||||||
QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) | |||||||
Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC) | |||||||
Local user database | 150 | 250 | 250 | 250 | 250 | |||
VoIP | Full H.323v1-5, SIP | |||||||
Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 | |||||||
Certifications | FIPS 140-2 (with Suite B) Level 2, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS) | |||||||
HARDWARE |
TZ270 |
TZ370 |
TZ470 |
TZ570 |
TZ670 |
|||
Form factor | Desktop | |||||||
Power supply | 36W | 36W | 36W | 60W | 60W | |||
Maximum power consumption (W) | 16.84 (TZ270), 18.91 (TZ270W) | 16.84 (TZ370), 18.91 (TZ370W) | 19.95 (TZ470), 21.98 (TZ470W) | 13.4 (TZ570), 15.3 (TZ570W), 108.75 (TZ570P) | 13.1 | |||
Input power | 100-240 VAC, 50-60 Hz, 3A | 100-240 VAC, 50-60 Hz, 3A | 100-240 VAC, 50-60 Hz, 3A | 100-240 VAC, 50-60 Hz | 100-240 VAC, 50-60 Hz | |||
Total heat dissipation (BTU) | 57.42 (TZ270), 64.48 (TZ270W) | 57.42 (TZ270), 64.48 (TZ270W) | 68.03 (TZ470), 74.95 (TZ470W) | 44.7 (TZ570), 52.17 (TZ570W), 370.84 (TZ570P) | 55.1 | |||
Dimensions | 3.5x13.5x19 (cm) 1.8x5.3x7.5 (in) | 3.5x13.5x19 (cm) 1.8x5.3x7.5 (in) | 3.5x13.5x19 (cm) 1.8x5.3x7.5 (in) | 3.5x15x22.5 (cm) 1.38x5.91x8.85 in | 3.5x15x22.5 (cm) 1.38x5.91x 8.85 in | |||
Weight | 0.82 kg / 1.81 lbs (TZ270), 0.85 kg / 1.87 lbs (TZ270W) | 0.82 kg / 1.81 lbs (TZ370), 0.85 kg / 1.87 lbs (TZ370W) | 0.83 kg / 1.82 lbs (TZ470), 0.87 kg / 1.92 lbs (TZ470W) | 0.97 kg / 2.14 lbs (TZ570), 0.99 kg / 2.18 lbs (TZ570W), 1.05 kg / 2.31 lbs (TZ570P) | 0.97 kg / 2.14 lbs | |||
WEEE weight | 1.18 kg / 2.6 lbs (TZ270), 1.24 kg / 2.73 lbs (TZ270W) | 1.18 kg / 2.6 lbs (TZ370), 1.24 kg / 2.73 lbs (TZ370W) | 1.24 kg / 2.73 lbs (TZ470), 1.27 kg / 2.8 lbs (TZ470W) | 1.42 kg / 3.13 lbs (TZ570), 1.47 kg / 3.24 lbs (TZ570W), 1.57 kg / 3.46 lbs (TZ570P) | 1.42 kg / 3.13 lbs | |||
Shipping weight | 1.41 kg / 3.11 lbs (TZ270), 1.47 kg / 3.25 lbs (TZ270W) | 1.41 kg / 3.11 lbs (TZ370), 1.47 kg / 3.25 lbs (TZ370W) | 1.43 kg / 3.15 lbs (TZ470), 1.51 kg / 3.33 lbs (TZ470W) | 1.93 kg / 4.25 lbs (TZ570), 1.98 kg / 4.36 lbs (TZ570W), 2.08 kg / 4.58 lbs (TZ570P) | 1.93 kg / 4.25 lbs | |||
MTBF (in years) | 51.1 (TZ270), 27.1 (TZ270W) | 51.1 (TZ370), 27.1 (TZ370W) | 46 (TZ470), 24.1 (TZ470W) | 26.1 (TZ570), 23.3 (TZ570W), 31.7 (TZ570P) | 43.9 | |||
Environment (Operating/Storage) | 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C) | |||||||
Humidity | 5-95% non-condensing | |||||||
REGULATORY |
TZ270 SERIES |
TZ370 SERIES |
TZ470 SERIES |
TZ570 SERIES |
TZ670 SERIES |
|||
Major regulatory compliance (wired models) | FCC Class B, FCC , ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/ GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL |
*Future use.
1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4 BGP is available only on SonicWall TZ400, TZ500 and TZ470.
5 All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products