We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small rectangular desktop appliance in dark finish with front port array

SonicWall

SonicWall TZ670 HA firewall appliance 02-SSC-5654

SKU CH-GC2X-8XPTQ MPN 02-SSC-5654

High-availability desktop firewall with eight 1 GbE and two 10 GbE ports for up to 2,500 users

  • Rated speed8 × 1GbE, 2 × 10GbE, 2 USB 3.0
  • Form factorDesktop
  • Port count8 × 1GbE, 2 × 10GbE, 2 USB 3.0
  • Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • Security featuresServices Deep Packet Inspection services: Gateway Anti-Virus

Hardware TZ 670

Configuration High Availability

  • High-availability active/standby pairing keeps networks running during hardware failure
  • 8×1GbE plus 2×10GbE ports provide flexible high-speed connectivity
  • Deep packet inspection with gateway anti-virus and intrusion prevention blocks threats in real time
  • Supports up to 1,250,000 simultaneous sessions for large user populations
  • FIPS 140-2 Level 2 certified encryption meets strict compliance requirements

TZ670 HA secondary appliance

The SonicWall TZ670 HA appliance is a desktop-form-factor firewall built to serve as the standby unit in a high-availability pair. It supports up to 2,500 users and 1,250,000 simultaneous sessions for mid-sized organisations and distributed enterprise sites. Deep packet inspection services include gateway anti-virus, anti-spyware, intrusion prevention and DPI SSL. The unit provides eight 1 GbE ports, two 10 GbE SFP+ ports and two USB 3.0 ports.

HA pairing upgrade

This appliance replaces a single-firewall deployment by adding stateful active/standby synchronisation with a primary TZ670. The jump is worth it when uninterrupted connectivity is required for branch offices or SD-Branch locations that cannot tolerate failover downtime. It delivers 250 site-to-site VPN tunnels and up to 500 IPsec VPN clients for secure remote access. Certifications include FIPS 140-2 Level 2 with Suite B cryptography and ICSA firewall and anti-malware validation.

Desktop install and sync

Installation uses a standard 100-240 VAC supply consuming a maximum of 13.1 W, fitting a compact 3.5 x 15 x 22.5 cm footprint. Zero-touch deployment and single-pane-of-glass cloud management simplify initial configuration. The most common issue is mismatched firmware or licence tiers between the active and standby units, which breaks stateful synchronisation. Console access is available for troubleshooting HA handshake failures.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,103.99
Pricier than about 60% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSONICWALL
Product lineTZ 670
Model nameTZ 670 HA
Part number02-SSC-5654
Product typeWired
Performance
Rated speed8 × 1GbE, 2 × 10GbE, 2 USB 3.0
Connectivity
Supported standardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Supported protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
Ports & slots
Port count8 × 1GbE, 2 × 10GbE, 2 USB 3.0
Power
Power requirements100-240 VAC,
50-60 Hz
Max power draw13.1 W
Size & build
Form factorDesktop
Product dimensions3.5 × 15 × 22.5 (cm)
1.38 × 5.91x 8.85 in
Product weight0.97 kg / 2.14 lb
Shipping weight2.27 kg
Package size457 × 279 × 102 mm
Environment & compliance
Certified standardsFIPS 140-2 Level 2 (with Suite B), IPv6/USGv6, ICSA Network Firewall, ICSA Firewall Enterprise, ISCA Network Antivirus / AntiMalware
CertificationsFCC Class B, FCC, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL
More details
Security featuresServices
Deep Packet Inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS): HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Simultaneous sessions1250000
Maximum users2500

Other versions of this model

5 more in the same range

Questions about this item

How much rack or desk depth does the 22.5 cm chassis require?

The desktop unit measures 22.5 cm deep, 15 cm wide and 3.5 cm high, so allow at least 25 cm of clear depth for cable bend radius behind the 10 GbE and 1 GbE ports.

What cabling step is often missed when forming the HA pair?

Connect the two appliances with a dedicated 10 GbE SFP+ link for stateful synchronization, then enable HA in the management console before applying licences.

Which consumable items will need replacement during the appliance life?

The internal fan and the AC power supply are the only field-replaceable parts; swap the fan when bearing noise appears and the supply if it fails to maintain 13.1 W output.

More in Firewall Appliances & VPN Gateways

Similar items