SonicWall TZ280P Firewall (Gen 8), Appliance only | 03-SSC-1829

The SonicWall TZ280P is the PoE+ variant of the entry model in SonicWall's Gen 8 TZ Series of next-generation firewalls, an integrated SD-Branch platform designed for home offices, small offices, and lean branch locations that need industry-validated security effectiveness at a low total cost of ownership. It shares its core hardware and security architecture with the base TZ280 and wireless TZ280W, but adds built-in Power over Ethernet so a single appliance can both secure the network and power nearby devices.

Of its 8x 1GbE copper ports, 4 support 802.3at/af PoE/PoE+ with up to 30W available per port and a 120W total PoE power budget, enough to directly power IP phones, security cameras, and SonicWave access points without a separate PoE injector or switch, ideal for small retail stores or branch LANs with a handful of powered endpoints. Beyond the PoE ports, the TZ280P also includes 2x 1G SFP ports, a Micro-USB console port for out-of-band management, and a USB Type-C port with dedicated WWAN status LEDs that supports an optional 5G/LTE USB WWAN card for cellular failover.

Firewall performance matches the rest of the TZ280 Series: 2.5 Gbps of firewall inspection throughput, 1.5 Gbps of application inspection and IPS throughput, 1 Gbps of threat prevention and anti-malware inspection throughput, 430 Mbps of TLS/SSL inspection and decryption (DPI-SSL) throughput, and 1.2 Gbps of IPSec VPN throughput, with 12,000 connections per second and up to 1,000,000 maximum SPI connections, 200,000 DPI connections, and 35,000 TLS connections.

VPN and remote access capabilities include up to 200 site-to-site VPN tunnels, 5 included IPSec VPN clients (expandable to 200), and 1 included SSL-VPN license (expandable to 50), with support for AES encryption, Suite B Cryptography, and route-based VPN over RIP/OSPF/BGP. Security services include Reassembly-Free Deep Packet Inspection, Gateway Anti-Virus and Anti-Spyware, Intrusion Prevention System, Application Control, Capture Advanced Threat Protection powered by cloud-based multi-engine sandboxing and patented Real-Time Deep Memory Inspection (RTDMI) technology, TLS 1.3 decryption, reputation-based Content Filtering Service 5.0, and Advanced DNS Filtering, all centrally managed via Network Security Manager (NSM) 3.0+, CLI, SSH, Web UI, or REST APIs, with support for up to 64 logical VLAN and tunnel interfaces and 16 managed SonicWave access points.

Deployment is simplified through Zero-Touch Deployment and the SonicExpress mobile app.

Physically, the TZ280P shares the same compact desktop chassis as the rest of the TZ280 Series, weighing 0.85kg. Because of its PoE+ output, it runs on a larger 180W-rated power supply and draws up to 130W maximum (versus just 12.36W on the non-PoE TZ280), with a total heat dissipation of 443 BTU and an MTBF rating of 26.65 years at 25°C, reflecting the added thermal load of powering connected PoE devices.