SonicWall TZ500 Series
SonicWall TZ500 Series
The SonicWall TZ series of Unified Threat Management (UTM) firewalls is ideally suited for any organization that requires enterprise-grade network protection. SonicWALL TZ series firewalls provide broad protection with advanced security services consisting of on-box and cloud-based anti-malariated-spyware, application control, intrusion prevention system (IPS), and URL filtering. To counter the trend of encrypted attacks, the TZ series has the processing power to inspect encrypted/TLS connections against the latest threats. Combined with Dell X-Series switches, selected TZ series firewalls can directly manage the security of these additional ports.
FIREWALL GENERAL | TZ500 SERIES |
Operating system | SonicOS |
Interfaces | 8×1 GbE, 2 USB, 1 Console |
Power over Ethernet (PoE) support | |
Expansion | 2 USB |
Management | CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs |
Single Sign-On (SSO) Users | 500 |
VLAN interfaces | 50 |
Access points supported (maximum) | 16 |
FIREWALL/VPN PERFORMANCE | TZ500 SERIES |
Firewall inspection throughput | 1.4 Gbps |
Threat Prevention throughput | 700 Mbps |
Application inspection throughput | 1.3 Mbps |
IPS throughput | 1.0 Mbps |
Anti-malware inspection throughput | 700 Mbps |
TLS/SSL inspection and decryption throughput (DPI SSL) | 225 Mbps |
IPSec VPN throughput | 1.0 Gbps |
Connections per second | 8,000 |
Maximum connections (SPI) | 150,000 |
Maximum connections (DPI) | 125,000 |
Maximum connections (DPI SSL) | 25,000 |
VPN | TZ500 SERIES |
Site-to-site VPN tunnels | 25 |
IPSec VPN clients (maximum) | 2 (25) |
SSL VPN licenses (maximum) | 2 (125) |
Virtual assist bundled (maximum) | 1 (30-day trial) |
Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Crytography |
Key exchange | Diffie Hellman Groups 1, 2, 5, 14v |
Route-based VPN | RIP, OSPF, BGP |
Certificate support | Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to- SonicWall VPN, SCEP |
VPN features | Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal Redundant VPN Gateway, Route-based VPN |
Global VPN client platforms supported | Microsoft Windows Vista 32/64-bit, Windows 7 32/64-bit Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Windows 10 |
NetExtender | Microsoft Windows Vista 32/64-bit, Windows 7, Windows 8.0 32/64-bit, Windows 8.1 32/64-bit, Mac OS X 10.4+, Linux FC3+/Ubuntu 7+/OpenSUSE |
Mobile Connect | Apple iOS, Mac OS X, Google Android, Kindle Fire, Chrome, Windows 8.1 (Embedded) |
SECURITY SERVICES | TZ500 SERIES |
Deep Packet Inspection services | Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL |
Content Filtering Service (CFS) | HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists |
Comprehensive Anti-Spam Service | Supported |
Application Visualization | Yes |
Application Control | Yes |
Capture Advanced Threat Protection | Yes |
NETWORKING | TZ500 SERIES |
IP address assignment | Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
NAT modes | 1:1, 1:many, many:many, flexible NAT (overlapping Ips), PAT, transparent mode |
Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
QoS | Bandwidth priority, max bandwidth,guaranteed bandwidth, DSCP marking, 802.1e (WMM) |
NETWORKING CONT’D | TZ500 SERIES |
Authentication | LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Service, Citrix, Common Access Card (CAC) |
Local user database | 250 |
VoIP | Full H.323v1-5, SIP |
Standards | TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
Certifications | FIPS 140-2 (with Suite B) Level 2, UC APL, VPNC, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus |
Certifications pending | Common Criteria NDPP (Firewall and IPS) |
Common Access Card (CAC) | Supported |
High availability | Active/Standby with stateful synchronization |
HARDWARE | TZ500 SERIES |
Form factor | Desktop |
Power supply | 36W external |
Maximum power consumption (W) | 13.4 / 17.7 |
Input power | 100 to 240 VAC, 50-60 Hz, 1A |
Total heat dissipation | 45.9 / 60.5 BTU |
Dimensions | 3.5 x 15 x 22.5 cm 1.38 x 5.91 x 8.86 in |
Weight | 0.92 kg / 2.03 lbs 1.05 kg / 2.31 lbs |
WEEE weight | 1.34 kg / 2.95 lbs 1.48 kg / 3.26 lbs |
Shipping weight | 1.93 kg / 4.25 lbs 2.07 kg / 4.56 lbs |
MTBF (in years) | 40.8 |
Environment (Operating/Storage) | 32F-105F (0C-40C)/-40 to 158F (-40C to 70C) |
Humidity | 5-95% non-condensing |
REGULATORY | TZ500 SERIES |
Major regulatory compliance (wired models) | FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH, KCC/MSIP |
Major regulatory compliance (wireless models) | FCC Class B, FCC RF ICES Class B, IC RF CE (RED, RoHS), RCM, VCCI Class B, MIC/ TELEC, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE, REACH |
INTEGRATED WIRELESS | TZ500 SERIES |
Standards | 802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK, 02.1x, EAP-PEAP, EAP-TTLS |
Frequency bands | 802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz; 802.11ac: 2.412- 2.472 GHz, 5.180-5.825 GHz |
Operating Channels | 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, T802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36- 48/52-64; 802.11ac: US and Canada 36- 48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64aiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64 |
Transmit output power | Based on the regulatory domain specified by the system administrator |
Transmit power control | Supported |
Data rates supported | 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel |
Modulation technology spectrum | 802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division Multiplexing (OFDM) |
Specs
System Performance
Firewall throughput | 1.4 Gbps |
Firewall IMIX | 700 Mbps |
Antivirus Throughput | 700 Mbps |
Concurrent connections | 150,000 |
New connections/sec | 8000 |
IPS throughput | 1.0 Gbps |
Threat Protection Throughput | 700 Mbps |
IPSec VPN throughput | 1.0 Gbps |
Application Control Throughput | 1.3 Gbps |
Physical interfaces
GE RJ45 Ports | 8x1GbE |
USB Port | 2 USB |
Console Port | 1 Console |
Dimensions & Enviroment
Mounting | Desktop |
Dimensions Width x Depth x Height (inches) | 1.38 x 5.91 x 8.86 |
Dimensions Height x Width x Length (mm) | 3.5 x 15 x 22.5 |
Weight | 0.92 kg / 2.03 lbs, 1.05 kg / 2.31 lbs |
Power supply | 36W external |
AC input voltage | 100-240 VAC, 50-60 Hz, 1 A |
Power Consumption | 13.4 / 17.7 W (Maximum) |
Mean Time Between Failure (MTBF) | 40.8 |
Operating Temperature | 32°-105° F (0°-40° C) |
Storage Temperature | -40° to 158° F (-40° to 70° C) |
Humidity | 5-95% non-condensing |