We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small silver desktop firewall with eight RJ-45 ports and two SFP+ cages on the front

SonicWall

SonicWall TZ670 02-SSC-5685 firewall appliance 8x1GbE 2x10GbE 2yr APSS

SKU CH-VH4P-9M786 MPN 02-SSC-5685

Desktop firewall with 8×1 GbE and 2×10 GbE ports, supporting up to 2500 users and 1 250 000 sessions, bundled with two years of Advanced Protection Security Suite

  • Rated speed8 × 1GbE, 2 × 10GbE, 2 USB 3.0
  • Form factorDesktop
  • Port count8 × 1GbE, 2 × 10GbE, 2 USB 3.0
  • Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security featuresServices Deep Packet Inspection services: Gateway Anti-Virus

Hardware TZ 670

Configuration Secure Upgrade Plus (Appliance + 2Y APSS)

  • 8 Gigabit Ethernet and 2 10 Gigabit SFP+ ports for high-speed wired connectivity
  • 2-year Advanced Protection Security Suite with cloud management and 7-day reporting included
  • Deep Packet Inspection SSL, IPS, anti-virus, anti-spyware and content filtering
  • Desktop form factor with 13.1 W max power draw and 100-240 VAC input
  • FIPS 140-2 Level 2, ICSA and IPv6/USGv6 certifications for validated security compliance

SonicWall TZ670 Firewall Appliance

The SonicWall TZ670 is a desktop firewall appliance built for mid-sized organisations and distributed enterprises with SD-Branch sites. It combines eight Gigabit Ethernet ports, two 10G SFP+ interfaces and two USB 3.0 ports with a 2-year Advanced Protection Security Suite subscription. The bundle delivers gateway anti-virus, intrusion prevention, DPI-SSL inspection and content filtering alongside cloud-based management and reporting.

Interface Limits and Throughput

The appliance provides eight RJ-45 ports operating at 10/100/1000Base-T and two SFP+ slots for 10GBase-X connectivity. Deep packet inspection services share the same processing pipeline, so sustained multi-gigabit throughput with full SSL decryption will be lower than the raw interface rates. Maximum concurrent sessions reach 1,250,000 and the licensed user count caps at 2,500, which constrains very large deployments.

Deployment and Common Issues

Zero-touch deployment and a single-pane-of-glass cloud console simplify initial setup for branch offices. The desktop form factor measures 3.5 by 15 by 22.5 centimetres and draws up to 13.1 watts from a 100-240 VAC supply. Installers sometimes overlook the need for compatible SFP+ transceivers in the 10G slots and forget to activate the 2-year APSS licence before the included services expire.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $3,135.99
Pricier than about 82% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSONICWALL
Product lineTZ 670
Model nameTZ 670–2Y APSS
Part number02-SSC-5685
Product typeWired
Performance
Rated speed8 × 1GbE, 2 × 10GbE, 2 USB 3.0
Connectivity
Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
Ports & slots
Port count8 × 1GbE, 2 × 10GbE, 2 USB 3.0
Power
Power requirements100-240 VAC,
50-60 Hz
Max power draw13.1 W
Size & build
Form factorDesktop
Product dimensions3.5 × 15 × 22.5 (cm)
1.38 × 5.91x 8.85 in
Product weight0.97 kg / 2.14 lb
Shipping weight31.75 kg
Package size1148 × 676 × 198 mm
Environment & compliance
Certified standardsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
CertificationsFCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
More details
Security featuresServices
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Simultaneous sessions1250000
Maximum users2500

Other versions of this model

5 more in the same range

Questions about this item

Which TZ670 configuration does part number 02-SSC-5685 provide?

This SKU is a desktop TZ670 with eight 1GbE RJ-45 ports, two 10G SFP+ slots, two USB 3.0 ports and a 2-year Advanced Protection Security Suite licence.

How does the 1,250,000 simultaneous-session limit affect daily operation?

The firewall can track up to 1,250,000 concurrent sessions, so even heavy multi-user traffic stays inspected without session-table exhaustion.

What practical throughput ceiling do the 10G SFP+ interfaces impose?

The two 10G SFP+ ports cap any single flow or aggregate WAN link at 10 Gbit/s, while the eight 1GbE ports each top out at 1 Gbit/s.

More in Firewall Appliances & VPN Gateways

Similar items