Gen 7 TZ models (TZ270, TZ370, TZ470, TZ570, TZ670) use the first generation of SonicWall's current hardware platform running SonicOS 7. Gen 7.1 models (TZ280, TZ380, TZ480, TZ580, TZ680 and the TZ80) use updated hardware internals with higher throughput, larger DPI connection tables, and improved TLS/SSL inspection capacity at each tier. Gen 7.1 models also tend to include expanded base SSL VPN licensing. If you are buying new, Gen 7.1 is generally the better value at the same price point.

For offices with up to 25 users, the TZ270 or TZ280 covers most small business needs. For 25 to 75 users, the TZ370 or TZ380 provides better throughput and a larger DPI connection table. If you are close to 100 users or run bandwidth-heavy applications, step up to the TZ470 or TZ480. Call or message a Firewalls.com engineer for a free sizing recommendation based on your specific environment.

The W suffix indicates an integrated wireless access point built into the TZ appliance. W models include dual-band Wi-Fi and let you manage wired and wireless traffic under a single SonicOS policy without a separate wireless controller. They are a good fit for small offices where running separate wired and wireless security appliances is not practical.

A TZ firewall functions at the stateful packet inspection level without a subscription. However, advanced features such as deep packet inspection, Capture ATP sandboxing, content filtering, anti-malware, and application control require an active security service subscription such as Advanced Gateway Security Suite or TotalSecure. Firewalls.com recommends purchasing hardware bundled with a subscription to ensure full protection from day one.

The TZ280P adds PoE+ ports to the standard TZ280, letting you power devices such as wireless access points, IP cameras, and VoIP phones directly from the firewall. The firewall throughput, DPI performance, and SonicOS feature set are identical. Choose the TZ280P if you want to consolidate your switching and power delivery for small networked devices without adding a separate PoE switch.

Yes. Every TZ model supports SSL-VPN and IPsec VPN. The number of concurrent SSL VPN sessions varies by model, ranging from 5 on the TZ80 to 250 on the TZ670 and TZ680. Remote workers connect using the SonicWall Mobile Connect app available for Windows, macOS, iOS, and Android. If you expect a large remote workforce, confirm the SSL VPN license count for your target model before purchasing.