We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact desktop firewall appliance, matte black finish, front port array visible

SonicWall

SonicWall TZ670 02-SSC-2837 firewall appliance

SKU CH-T13E-KFS65 MPN 02-SSC-2837

Desktop firewall appliance with 8x1GbE and 2x10GbE ports, supporting 1250000 simultaneous sessions and 250 site-to-site VPN tunnels for up to 2500 users

  • Rated speed8 × 1GbE, 2 × 10GbE, 2 USB 3.0
  • Form factorDesktop
  • Port count8 × 1GbE, 2 × 10GbE, 2 x USB 3.0, 1 Console
  • Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security featuresServices Deep Packet Inspection services: Gateway Anti-Virus

Hardware TZ 670

Configuration Hardware Only

  • Protects networks with gateway anti-virus and intrusion prevention
  • Connects sites securely using up to 250 site-to-site VPN tunnels
  • Manages traffic through 8 Gigabit and 2 10-Gigabit Ethernet ports
  • Supports up to 2,500 users with 1,250,000 simultaneous sessions
  • Deploys rapidly via zero-touch provisioning and cloud management

SonicWall TZ670 mid-sized enterprise firewall

The SonicWall TZ670 is a desktop firewall appliance built for mid-sized organisations and distributed enterprises with SD-Branch locations. It provides wired connectivity through eight 1GbE ports and two 10GbE SFP+ ports plus two USB 3.0 interfaces. Deep packet inspection services cover gateway anti-virus, anti-spyware, intrusion prevention and DPI SSL. The unit supports up to 1,250,000 simultaneous sessions and 2,500 users.

Desktop form factor with Zero-Touch Deployment

The appliance arrives in a compact desktop chassis measuring 3.5 by 15 by 22.5 centimetres and weighing 0.97 kilogram. Zero-Touch Deployment allows the device to be provisioned remotely without on-site configuration. A single console port provides local management access if required. Ensure rack or shelf space accommodates the stated dimensions and that a 100-240 VAC power source is available.

Verify WAN capacity and licence requirements

Confirm that your upstream links do not exceed the two 10GbE SFP+ ports and eight 1GbE ports provided. Site-to-site VPN capacity is limited to 250 tunnels while SSL VPN licences default to two with a maximum of 250. Organisations needing more concurrent VPN users or additional security subscriptions should validate licence upgrades before ordering.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,239.99
Pricier than about 63% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSONICWALL
Product lineTZ 670
Model nameTZ 670
Part number02-SSC-2837
Product typeWired
Performance
Rated speed8 × 1GbE, 2 × 10GbE, 2 USB 3.0
Connectivity
Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
Ports & slots
Port count8 × 1GbE, 2 × 10GbE, 2 x USB 3.0, 1 Console
Power
Power requirements100-240 VAC,
50-60 Hz
Max power draw13.1 W
Size & build
Form factorDesktop
Product dimensions3.5 × 15 × 22.5 (cm)
1.38 × 5.91x 8.85 in
Product weight0.97 kg / 2.14 lb
Shipping weight2.27 kg
Package size457 × 279 × 102 mm
Environment & compliance
Certified standardsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
CertificationsFCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
More details
Security featuresServices
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Simultaneous sessions1250000
Maximum users2500

Other versions of this model

5 more in the same range

Questions about this item

How do I confirm the TZ670 02-SSC-2837 is processing traffic correctly after deployment?

The management dashboard shows active sessions up to 1,250,000 and connected users up to 2,500; security service status panels display Gateway Anti-Virus, Anti-Spyware, IPS and DPI SSL inspection running in real time.

What ships with the 02-SSC-2837 desktop unit and what must I source separately?

The box contains the TZ670 appliance with 8×1GbE, 2×10GbE SFP+, 2×USB 3.0 and 1 Console port, plus a 100–240 VAC power cord; SFP+ transceivers and patch cables for the network ports are not included.

Which TZ670 variant should I choose for a site needing up to 250 site-to-site VPN tunnels and 500 IPSec clients?

This 02-SSC-2837 model supports 250 site-to-site tunnels, 500 IPSec VPN clients (10 bundled) and 250 SSL VPN users (2 bundled), matching the stated capacity for mid-sized or distributed enterprise deployments.

More in Firewall Appliances & VPN Gateways

Similar items