Name: SonicWALL TZ 400 Network Security/Firewall Appliance
SKU: 9133
Price: 1010.95 USD
Availability: InStock

For small branch office locations, the SonicWall TZ400 series delivers enterprise-grade protection. Flexible
wireless deployment is available with optional 802.11ac dual-band wireless integrated into the firewall.

A high-performance integrated threat prevention platform for small/medium organizations and distributed enterprises.

Get high-speed threat prevention in a flexible, integrated security solution with the SonicWall TZ Series. Designed for small networks and distributed enterprises with remote and branch locations, the TZ Series offers five different models that can be tuned to meet your specific needs. Advanced networking and management features such as Secure SD-WAN and Zero-Touch Deployment make it easy to bring up new sites as you need. Add optional capabilities including PoE/PoE+ support and 802.11ac WiFi to create a unified security solution that protects your network and data from the latest threats over wired and wireless connections.

Integrated Threat Prevention and SD-WAN Platform

Consolidate essential security and networking capabilities in a single, integrated solution
Protect against known and unknown attacks with cloud-based and on-box threat prevention
Decrypt and inspect TLS/SSL and SSH encrypted traffic in real time
Gain enhanced flexibility by adding optional integrated 802.11ac wireless or PoE/PoE+
Easily deploy and configure with Zero-Touch Deployment
Centrally manage using cloud-based Capture Security Center

Advanced Threat Prevention

Block more attacks with Real-Time Deep Memory Inspection (RTDMI) & Reassembly-Free Deep Packet Inspection (RFDPI)
Prevent advanced threats with cloud-based and on-box threat prevention
Decrypt and inspect TLS/SSL-encrypted traffic in real time
Inspect for threats on all ports and protocols without file size limitations

High Speed Performance

Leverage multi-core parallel-processing hardware architecture
Achieve fast performance using Gigabit Ethernet interfaces
Take advantage of single-pass stream-based inspection
Inspect simultaneous network streams using deep packet inspection
Add integrated 802.11ac wireless

Network Control and Flexibility

Access a wide range of networking features in SonicWall’s powerful SonicOS operating system
Grow your distributed network while lowering costs with Secure SD-WAN
Power your PoE-enabled devices with integrated PoE/PoE+ support
Gain insight into and control over application usage across the network
Segment your network with VLANs

Secure Connectivity

Access resources behind the firewall remotely and securely using native SSL VPN
Connect from virtually any operating system – Apple^® iOS, Google^® Android, Windows^® 8.1, Mac OS^® X, Kindle Fire and Linux
Scan for and remove hidden threats over the VPN connection

SonicWall Capture Cloud Platform

Take advantage of threat intelligence consolidated from more than one million SonicWall sensors
Stay protected in real time with automatically delivered signatures developed by SonicWall Capture Labs researchers
Continually access the Capture Cloud Platform for millions of malware signatures
Utilize single pane of glass management, licensing, reporting and analytics through the Capture Cloud Platform

Search this service on AnswerBook

Documentation

Data Sheet

Advanced Threat Protection Option

SonicOS Data Sheet

11 Cool Things Your Firewall Should Do

Decryption and Inspection of Encrypted Traffic

Visit the SonicWALL Worldwide Security Center

Search this service on AnswerBook

Product Comparison Chart

Legend: S — Standard, O — Optional, N — Not Available

	SOHO	TZ300	TZ400	TZ500	TZ600
TotalSecure Firewall Overview
Deep Packet Inspection Firewall	S	S	S	S	S
Stateful Packet Inspection Firewall	S	S	S	S	S
Unlimited File Size Protection	S	S	S	S	S
Protocols Scanned	S	S	S	S	S
Security Services Included
Application Intelligence and Control	S	S	S	S	S
Intrusion Prevention Service	S	S	S	S	S
Gateway Anti-Virus and Anti-Spyware	S	S	S	S	S
Content & URL Filtering (CFS)	S	S	S	S	S
SSL Inspection (DPI SSL)	S	S	S	S	S
Content Filtering Client (CFC)¹	O	O	O	O	O
Analyzer Reporting¹	O	O	O	O	O
Capture Advance Threat Protection¹	N	O	O	O	O
Enforced Client Anti-Virus and Anti-Spyware¹	O	O	O	O	O
24×7 Support	S	S	S	S	S
Firewall General
Interfaces	5×1-GbE, 1 USB, 1 Console	5×1-GbE, 1 USB, 1 Console	7×1-GbE, 1 USB, 1 Console	8×1-GbE, 2 USB, 1 Console	10×1-GbE, 2 USB, 1 Console, 1 Expansion Slot
Management	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs	CLI, SSH, Web GUI, Capture Security Center, GMS, REST APIs
Nodes Supported	Unrestricted	Unrestricted	Unrestricted	Unrestricted	Unrestricted
Site-to-Site VPN Tunnels	10	10	20	25	50
IPSec VPN Clients (Maximum)	1 (5)	1 (10)	2 (25)	2 (25)	2 (25)
SSL VPN Licenses (Maximum)	1 (10)	1 (50)	2 (100)	2 (150)	2 (200)
VLAN Interfaces	25	25	50	50	50
Wireless Controller	S	S	S	S	S
WWAN Failover (4G/LTE)	S	S	S	S	S
Network Switch Management	N	S	S	S	S
Firewall/VPN Performance
Firewall Inspection Throughput²	300 Mbps	750 Mbps	1.3 Gbps	1.4 Gbps	1.5 Gbps
Threat Prevention Throughput³	50 Mbps	100 Mbps	300 Mbps	400 Mbps	500 Mbps
Application Inspection Throughput³	–	300 Mbps	900 Mbps	1.0 Gbps	1.1 Gbps
IPS Throughput³	100 Mbps	300 Mbps	900 Mbps	1.0 Gbps	1.1 Gbps
Anti-Malware Inspection Throughput³	50 Mbps	100 Mbps	300 Mbps	400 Mbps	500 Mbps
IMIX Throughput	60 Mbps	200 Mbps	500 Mbps	700 Mbps	900 Mbps
DPI SSL Throughput	15 Mbps	45 Mbps	100 Mbps	150 Mbps	200 Mbps
VPN Throughput⁴	100 Mbps	300 Mbps	900 Mbps	1.0 Gbps	1.1 Gbps
Maximum Connections (SPI)	10,000	50,000	100,000	125,000	150,000
Maximum Connections (DPI)	10,000	50,000	90,000	100,000	125,000
Maximum Connections (DPI SSL)	100	500	500	750	750
New Connections/Sec	1,800	5,000	6,000	8,000	12,000
Features
Logging	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog	Analyzer, Local Log, Syslog
Network Traffic Visualization	S	S	S	S	S
Netflow/IPFIX Reporting	N	S	S	S	S
SNMP	S	S	S	S	S
Authentication	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
Dynamic Routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing	BGP, OSPF, RIPv1/v2, static routes, policy-based routing
Secure SD-WAN	S	S	S	S	S
Single Sign-on (SSO)	S	S	S	S	S
Voice over IP (VoIP) Security	S	S	S	S	S
Interface to Interface Scanning	S	S	S	S	S
PortShield Security	S	S	S	S	S
Link Redundancy	S	S	S	S	S
Policy-based Routing	S	S	S	S	S
Route-based VPN	S	S	S	S	S
Dynamic Bandwidth Management	S	S	S	S	S
Stateful High Availability	N	N	N	O	O
Multi-WAN	S	S	S	S	S
Load Balancing	S	S	S	S	S
Object-based Management	S	S	S	S	S
Policy-based NAT	S	S	S	S	S
Inbound Load Balancing	S	S	S	S	S
IKEv2 VPN	S	S	S	S	S
TLS/SSL/SSH Decryption and Inspection	S	S	S	S	S
SSL Control	S	S	S	S	S
Auto-provision VPN	S	S	S	S	S
Biometric Authentication	S	S	S	S	S
DNS Proxy	S	S	S	S	S
Hardware Failover	N	Active/Standby	Active/Standby	Active/Standby with stateful synchronization	Active/Standby with stateful synchronization
Integrated Wireless
Standards	802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	802.11a/b/g/n/ac (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS	–
Frequency bands⁵	802.11a: 5.180-5.825 GHz	802.11a: 5.180-5.825 GHz	802.11a: 5.180-5.825 GHz	802.11a: 5.180-5.825 GHz	—
“	802.11b/g: 2.412-2.472 GHz	802.11b/g: 2.412-2.472 GHz	802.11b/g: 2.412-2.472 GHz	802.11b/g: 2.412-2.472 GHz
“	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11n: 2.412-2.472 GHz, 5.180-5.825 GHz
“	—	802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz	802.11ac: 2.412-2.472 GHz, 5.180-5.825 GHz	—
Operating Channels	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4	802.11a: US and Canada 12, Europe 11, Japan 4, Singapore 4, Taiwan 4
“	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	802.11b/g: US and Canada 1-11, Europe 1-13, Japan 1-14 (14-802.11b only)	—
“	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13	—
“	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	—
“	—	802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64	—
Transmit output power	Based on the regulatory domain specified by the system administrator	Based on the regulatory domain specified by the system administrator	Based on the regulatory domain specified by the system administrator	Based on the regulatory domain specified by the system administrator
Transmit power control	Supported	Supported	Supported	Supported	–
Data rates supported	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	802.11a: 6,9,12,18,24,36,48,54 Mbps per channel	–
“	802.11b: 1,2,5.5,11 Mbps per channel	802.11b: 1,2,5.5,11 Mbps per channel	802.11b: 1,2,5.5,11 Mbps per channel	802.11b: 1,2,5.5,11 Mbps per channel	—
“	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	802.11g: 6,9,12,18,24,36,48,54 Mbps per channel	—
“	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15,30, 45, 60, 90, 120, 135, 150 Mbps per channel	—
“	—	802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,	802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,	802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180,	—
“	—	200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel	200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel	200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel	—
Modulation technology spectrum	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	802.11a: Orthogonal Frequency Division Multiplexing (OFDM)	–
“	802.11b: Direct Sequence Spread Spectrum (DSSS)	802.11b: Direct Sequence Spread Spectrum (DSSS)	802.11b: Direct Sequence Spread Spectrum (DSSS)	802.11b: Direct Sequence Spread Spectrum (DSSS)	—
“	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS)	—
“	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	802.11n: Orthogonal Frequency Division Multiplexing (OFDM)	—
“	—	802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)	802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)	802.11ac: Orthogonal Frequency Division Multiplexing (OFDM)	—

1. Services must be purchased separately.
2. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3. Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
4. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall’s wireless access point products.
*Future use. All specifications, features and availability are subject to change.

Search this service on AnswerBook