Different sources publish different "recommended user" ranges for the TZ570 series, which is where a lot of the confusion comes from. There's no hard user cap enforced by the hardware itself; the real technical ceiling is 1.25 million maximum SPI connections. In practice, 50 to 75 users is a reasonable planning number for typical office traffic with full security services enabled, but actual capacity depends on which services you run and how your team uses the network. Our engineers can help size this against your specific traffic profile.

It depends on the SKU. Bundles labeled Secure Upgrade Plus or similar upgrade-specific SKUs are subscription-only and assume you already own a qualifying appliance to attach the license to, they don't include a new physical unit. If you need the hardware itself, look for a bundle that explicitly lists an appliance in the description, or ask us to confirm before you order so you don't end up with a license and no box to run it on.

Yes. Both the Essential and Advanced Protection Security Suite bundles include SonicWall support coverage, which covers hardware replacement for defective units alongside the security services and firmware updates. Support level, 8x5 or 24x7, depends on which bundle and term you choose.

Yes. SonicWall's Secure Upgrade Plus program lets you trade in an existing TZ570W toward either a replacement TZ570W or the Gen 8 TZ580, generally at a reduced price versus buying new outright. Let us know which direction you want to go and we'll confirm the eligible trade-in SKU.

All three share the same firewall hardware and throughput. The TZ570W adds integrated 802.11ac Wave 2 Wi-Fi, while the TZ570P swaps that out for built-in PoE/PoE+ ports to power access points, phones, or cameras directly from the firewall. The base TZ570 has neither, for sites that don't need on-device wireless or PoE.