Yes. The TZ680 is available as an appliance-only purchase with no subscription attached, the same way most Gen 8 TZ models work. If you already have a security subscription you plan to run separately, or don't need one right away, just order the hardware-only SKU and we'll confirm stock and shipping for you.

No. Integrated wireless in the current Gen 8 TZ lineup is only available on the TZ380W. The TZ680 is wired only, so if you need Wi-Fi at this performance tier, pair it with a SonicWave access point instead.

Yes. SonicOS 8 includes an official migration tool built specifically for importing settings from a TZ670 to a TZ680, so this is one of the more straightforward hardware upgrades in the lineup. Older models further back, like a TZ500 or TZ400, don't have the same direct migration path and typically need manual reconfiguration.

Yes. SSL VPN client licenses can be added to an existing TZ680 at any time, beyond what's included with your base bundle. Send us your current license count and how many additional users you need, and we'll quote the upgrade.

Yes, the TZ680 is a capable replacement for a TZ500, with significantly higher throughput and the newer SonicOS 8 platform. Since the TZ500 isn't part of SonicOS 8's official migration path, your settings won't import directly, and our configuration services team can help rebuild your policies on the new unit.