Skip to main content
  • $3,733.80
  • $4,667.25
  • Save: $933.45 (20%)
  • Free 80-day Returns
  • Login to Make an Offer
    Sold by Newegg

    Shipped by Newegg

    Price alert
    Shop it at NeweggBusiness.

    SonicWall TZ680 Firewall (Gen 8) w/ Total Secure (1-Year Advanced Protection Security Suite) | 03-SSC-6998

    • TZ 280
    • TZ 280W
    • TZ 280P
    • TZ380
    • TZ380W
    • TZ480
    • TZ 580
    • TZ680
    • Hardware Only
    • High Availability
    • Total Secure (Appliance + 1Y EPSS)
    • Total Secure (Appliance + 1Y APSS)
    • Secure Upgrade Plus (Appliance + 2Y APSS)
    • Secure Upgrade Plus (Appliance + 3Y APSS) +1Y CSE
    • BEST FOR MID-SIZED BUSINESS & SD-BRANCH: The SonicWall TZ680 is the top Gen 8 desktop next-generation firewall (NGFW) running SonicOS 8, delivering 5 Gbps firewall inspection, 2.5 Gbps threat prevention, and 2.5 Gbps IPSec VPN throughput.
    • 1-YEAR ADVANCED PROTECTION SECURITY SUITE (APSS): Includes Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, DNS Filtering, 24x7 Support with firmware updates And Cloud Management with 7-Day Alerting, Advanced Reporting & Analytics.
    • 8x GbE + 2x 10G MULTI-GIG SFP+ PORTS: Eight 1GbE copper ports plus two 10G/5G/2.5G/1G SFP+ uplinks, USB Type-C for optional 5G/LTE cellular failover, and a Micro-USB console port.
    • HANDLES UP TO 1.6 MILLION CONNECTIONS: Supports 1,600,000 SPI, 600,000 DPI, and 75,000 TLS connections at 26,000 connections per second, 250 site-to-site VPN tunnels, and up to 32 managed SonicWave access points.
    • COMPLETE SECURITY: Deep Packet Inspection, Gateway Anti-Virus, Intrusion Prevention, Capture ATP sandboxing with RTDMI, TLS 1.3 decryption, Content Filtering, and Advanced DNS Filtering, managed via NSM or Zero-Touch Deployment.
    +
    +
    Overview
    Specs
    Reviews
    See all Q & A

    Any questions? Ask CelesteSM will help you find out quickly.

    SonicWall TZ680 Firewall (Gen 8)

    TZ680 Series

    Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ680 delivers industry-validated security effectiveness with best-in-class price-performance.

    SonicWall TZ680 Firewall (Gen 8)

    Highlights

    • SD-Branch ready
    • Secure SD-WAN capability
    • SonicExpress App onboarding
    • Zero-Touch Deployment
    • SonicWall Unified Management ready
    • Centralized, simplified management via Network Security Manager (NSM)
    • SonicWall Switch, SonicWave Access Point and Capture Client integration
    • Redundant power
    • DNS security
    • Reputation-based Content Filtering Service (CFS 5.0)
    • Wi-Fi 6 firewall management
    • Network access control integration

    Gen 8 TZ Series

    SonicWall Gen 8 Firewalls offer multiple key benefits including higher throughput and IPS performance, persistent performance, and AI-powered insights and automation.

    TZ 680

    Firewall/VPN Performance

    Firewall Inspection Throughput

    5.00 Gbps


    Application Inspection Throughput

    3 Gbps


    IPS Throughput

    3 Gbps


    Threat Prevention Throughput

    2.5 Gbps


    VPN Throughput

    2.5 Gbps


    Maximum Connections

    1,600,000


    New Connections/Sec

    26,000


    Interfaces

    Ethernet Ports

    8x-1GbE Cu


    USB Ports

    1 console (Micro-USB), 1 USB (type-C)


    SFP/SFP+ Ports

    2*10G/5G/2.5/1G SFP


    Expansion Slot

    Storage - Up to 512 GB


    Connectivity

    Site-to-Site VPN Tunnels

    250


    IPSec VPN Clients (Maximum)

    10 (500)


    SSL VPN NetExtender Clients (Maximum)

    2 (250)


    VLAN Interfaces

    256


    TZ 670

    Firewall/VPN Performance

    Firewall Inspection Throughput

    5.00 Gbps


    Application Inspection Throughput

    3.0 Gbps


    IPS Throughput

    3.0 Gbps


    Threat Prevention Throughput

    2.50 Gbps


    VPN Throughput

    2.1 Gbps


    Maximum Connections

    1500000


    New Connections/Sec

    25000


    Interfaces

    Ethernet Ports

    8x1-GbE


    USB Ports

    2 USB 3.0


    SFP/SFP+ Ports

    2x 10G


    Expansion Slot

    Storage - up to 256 GB with 32GB included


    Connectivity

    Wireless WAN Support

    WWAN USB module support (5G/LTE/4G/3G)


    Simplified licensing for ease of license management

    Features Hardware Only APSS MPSS
    24x7 Support Add-On* ✓ ✓
    - Centralized Management & Orchestration Included with 24x7 Support ✓ ✓
    Stateful firewall and Stateful HA ✓ ✓ ✓
    SD-WAN & Advanced Routing** ✓ ✓ ✓
    Application Control Add-On ✓ ✓
    Intrusion detection and prevention Add-On ✓ ✓
    Content & Reputation Based filtering Add-On ✓ ✓
    Capture ATP Sandboxing Add-On ✓ ✓
    DNS Filtering-Advanced Add-On ✓ ✓
    Advanced Reporting and Analytics*** Add-On 7-Day, Extendable 30-Day, Extendable
    Embedded Firewall Warranty by SonicWall TZ680 Firewall (Gen 8) Up to USD$100,000 Up to USD$200,000
    Firewall Configuration Management ✓
    After hours Critical Support ✓
    Managed Firewall & Enhanced Support ✓

    * Add-On denotes services that are available via add-on SKUS

    ** Advanced Application Routing requires Application signatures and GAV/IPS service

    **** Add-On or extendable NSM SKUs available for 7, 30, 90, and 365 Days

    APSS

    Advanced Protection Service Suite

    Includes Capture Advanced Threat Protection with RTDMI Technology, Gateway Anti-Virus, Intrusion Prevention and Application Control, Content Filtering Service, Comprehensive Anti-Spam Service, Deep packet inspection of TLS/SSL-encrypted traffic (DPI-SSL), 24x7 Support, Cloud Management, Cloud-based Reporting for 7 Days and optional Premier Support.

    MPSS

    Managed Protection Service Suite

    Includes all services in Advanced Protection plus extended 30-Day Reporting and Analytics, firewall configuration management, and after hours critical support. The services are delivered by SonicWall Managed Service team.

    The SonicWall TZ680 is the highest-performance model in SonicWall's Gen 8 TZ Series, a desktop next-generation firewall (NGFW) built for mid-sized organizations and distributed enterprises with SD-Branch locations. It runs SonicOS 8 and delivers 5 Gbps of firewall inspection throughput, 2.5 Gbps of threat prevention throughput, and 2.5 Gbps of IPSec VPN throughput.


    Who is the TZ680 best for?

    It suits mid-sized businesses, large branch offices, and multi-site networks that need the most throughput and connection capacity available in a desktop TZ firewall. Compared with the TZ580 (4.5 Gbps firewall inspection, 2.2 Gbps threat prevention), the TZ680 adds higher throughput and larger connection limits; compared with the TZ480 (4 Gbps, SFP+ up to 5G), it adds 10G-capable SFP+ ports, 250 VPN tunnels, and 256 VLAN and tunnel interfaces.


    What ports and connectivity does it have?

    Eight 1GbE copper RJ45 ports and two multi-gig 10G/5G/2.5G/1G SFP+ ports for fiber or high-speed uplinks, one USB Type-C port that supports an optional 5G/LTE USB cellular card for WAN failover and business continuity, and one Micro-USB console port for out-of-band management.


    How much traffic can it handle?

    Performance is rated at 3 Gbps of application inspection and IPS throughput, 2.5 Gbps of anti-malware inspection, 800 Mbps of TLS/SSL (DPI-SSL) decryption throughput, and 26,000 new connections per second, with up to 1,600,000 SPI connections, 600,000 DPI connections, and 75,000 TLS connections. It supports 250 site-to-site VPN tunnels, 10 IPSec VPN clients (expandable to 500), 2 SSL-VPN licenses (expandable to 250), up to 256 logical VLAN and tunnel interfaces, 2,500 SAML single sign-on users, and 32 managed SonicWave access points.


    What security features are included?

    Reassembly-Free Deep Packet Inspection, Gateway Anti-Virus and Anti-Spyware, Intrusion Prevention System, Application Control, Capture Advanced Threat Protection with cloud sandboxing and patented Real-Time Deep Memory Inspection (RTDMI), TLS 1.3 decryption, reputation-based Content Filtering Service (CFS 5.0), and Advanced DNS Filtering stop ransomware, malware, and zero-day threats at the gateway. Secure SD-WAN is built in, and management is available through Network Security Manager (NSM) 3.0+, Web UI, CLI, SSH, REST APIs, or the SonicExpress mobile app with Zero-Touch Deployment.


    Warranty & Returns

    Warranty, Returns, And Additional Information

    Warranty

    • Limited Warranty period (parts): 1 year
    • Limited Warranty period (labor): 1 year
    • Read full details

    Return Policies

      We want to ensure your holiday shopping this year is hassle-free. That’s why we’re automatically extending our return policies on almost every product! For purchases placed between November 1st, 2026 and December 31, 2026 you will have until January 31, 2027 to return your product.

    • Return for refund until: January 31, 2027
    • Return for replacement until: January 31, 2027
    • This item is covered by Newegg.com's Extended Holiday Return Policy.
    • Read full return policy for details.
    LOADING...