We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small white desktop firewall appliance with front RJ45 ports

SonicWall

SonicWall TZ280 firewall appliance 03-SSC-6919 Total Secure 1Y APSS

SKU CH-0W4Q-E1XC0 MPN 03-SSC-6919

Desktop firewall with 8×1 GbE and 2 SFP ports, 2.5 Gbps inspection throughput, 1 Gbps threat prevention, 1 million sessions, and a 1-year Advanced Protection Security Suite licence

  • Form factorDesktop
  • Port count8 × 1GbE RJ45, 2 x SFP
  • Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security featuresDeep Packet inspection services: Gateway Anti-Virus, Anti-Sp
  • Simultaneous sessions1,000,000

Hardware TZ 280

Configuration Total Secure (Appliance + 1Y APSS)

  • Enterprise-grade threat prevention at 1 Gbps throughput backed by Deep Packet Inspection services
  • Secure SD-WAN connectivity with Zero-Touch Deployment for rapid branch rollout
  • Centralised cloud management via Network Security Manager simplifies multi-site administration
  • 8 × 1 GbE copper plus 2 SFP ports deliver flexible WAN and LAN connectivity
  • Compact 3.5 × 13 × 19 cm desktop form factor fits space-constrained offices

Designed for small-office security

The SonicWall TZ280 is a desktop firewall appliance built for home offices, small offices and lean branches. It delivers industry-validated threat prevention with a one-year Advanced Protection Security Suite licence included. The unit provides centralized, cloud-based management through Network Security Manager and supports Zero-Touch Deployment for rapid rollout.

Eight copper ports and two SFP uplinks

Network connectivity is limited to eight 1GbE RJ45 interfaces and two 1G SFP slots, so aggregate throughput cannot exceed the physical line rate of those ports. Firewall inspection throughput reaches 2.5 Gbps, while threat prevention, anti-malware and TLS decryption are each capped at 1 Gbps. Application and IPS inspection peak at 1.5 Gbps, and VPN throughput tops out at 1.2 Gbps.

Replaces basic routers lacking integrated security

The appliance upgrades environments that rely on simple routers or older firewalls without deep-packet inspection, sandboxing or reputation-based content filtering. The jump is worthwhile when simultaneous sessions must scale toward 1,000,000 and up to 1000 users need secure SD-WAN, DNS security and Wi-Fi 6 access-point management. It does not suit buyers who need multi-gigabit copper interfaces or higher VPN throughput.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $920.99
Typical for this category: the median of 669 items is $806.99.

Specifications

Product
Brand nameSONICWALL
Product lineTZ280
Model nameTZ280 - Total Secure (1Y APSS)
Part number03-SSC-6919
Connectivity
Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
Ports & slots
Port count8 × 1GbE RJ45, 2 x SFP
Size & build
Form factorDesktop
Product dimensions3.5 × 13 × 19 (cm)
Product weight0.82 Kg
Shipping weight1.81 kg
Package size363 × 218 × 69 mm
Environment & compliance
Certified standardsIPv6
CertificationsMajor regulatory compliance
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB
More details
Security featuresDeep Packet inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering Service (CFS): Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Advanced DNS Filtering
Simultaneous sessions1,000,000
Maximum users1000

Other versions of this model

5 more in the same range

Questions about this item

What is the difference between the Total Secure 1Y APSS bundle and a plain TZ280 appliance?

The Total Secure bundle adds a one-year Advanced Protection Security Suite licence that includes gateway anti-virus, anti-spyware, intrusion prevention, TLS decryption and reputation-based content filtering, while the plain appliance ships without those subscription services.

How much real-world threat-prevention throughput will I see on the 1 Gbps rated port?

The appliance is rated for 1 Gbps threat-prevention throughput, so with all security engines enabled you can expect up to 1 Gbps of inspected traffic on the 1 GbE copper or SFP interfaces.

Which management interface does the USB Type-C port provide?

The USB Type-C port is a local console connection for initial setup and CLI access; day-to-day management is handled through the web UI or the cloud-based Network Security Manager.

More in Firewall Appliances & VPN Gateways

Similar items