Skip to main content
  • $3,556.00
  • $4,445.00
  • Save: $889.00 (20%)
  • Free 15-day Returns
  • Login to Make an Offer
    Sold by Newegg

    Shipped by Newegg

    Price alert
    Shop it at NeweggBusiness.

    SonicWall TZ680 Firewall (Gen 8) w/ Total Secure (1-Year Advanced Protection Security Suite) | 03-SSC-6998

    • TZ 280
    • TZ 280W
    • TZ 280P
    • TZ380
    • TZ380W
    • TZ480
    • TZ 580
    • TZ680
    • Hardware Only
    • High Availability
    • Total Secure (Appliance + 1Y EPSS)
    • Total Secure (Appliance + 1Y APSS)
    • Secure Upgrade Plus (Appliance + 2Y APSS)
    • Secure Upgrade Plus (Appliance + 3Y APSS) +1Y CSE
    • BEST FOR MID-SIZED BUSINESS & SD-BRANCH: The SonicWall TZ680 is the top Gen 8 desktop next-generation firewall (NGFW) running SonicOS 8, delivering 5 Gbps firewall inspection, 2.5 Gbps threat prevention, and 2.5 Gbps IPSec VPN throughput.
    • 1-YEAR ADVANCED PROTECTION SECURITY SUITE (APSS): Includes Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, DNS Filtering, 24x7 Support with firmware updates And Cloud Management with 7-Day Alerting, Advanced Reporting & Analytics.
    • 8x GbE + 2x 10G MULTI-GIG SFP+ PORTS: Eight 1GbE copper ports plus two 10G/5G/2.5G/1G SFP+ uplinks, USB Type-C for optional 5G/LTE cellular failover, and a Micro-USB console port.
    • HANDLES UP TO 1.6 MILLION CONNECTIONS: Supports 1,600,000 SPI, 600,000 DPI, and 75,000 TLS connections at 26,000 connections per second, 250 site-to-site VPN tunnels, and up to 32 managed SonicWave access points.
    • COMPLETE SECURITY: Deep Packet Inspection, Gateway Anti-Virus, Intrusion Prevention, Capture ATP sandboxing with RTDMI, TLS 1.3 decryption, Content Filtering, and Advanced DNS Filtering, managed via NSM or Zero-Touch Deployment.
    +
    +
    Overview
    Specs
    Reviews
    See all Q & A

    Any questions? Ask CelesteSM will help you find out quickly.

    SonicWall TZ680 Firewall (Gen 8)

    TZ680 Series

    Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ680 delivers industry-validated security effectiveness with best-in-class price-performance.

    SonicWall TZ680 Firewall (Gen 8)

    Highlights

    • SD-Branch ready
    • Secure SD-WAN capability
    • SonicExpress App onboarding
    • Zero-Touch Deployment
    • SonicWall Unified Management ready
    • Centralized, simplified management via Network Security Manager (NSM)
    • SonicWall Switch, SonicWave Access Point and Capture Client integration
    • Redundant power
    • DNS security
    • Reputation-based Content Filtering Service (CFS 5.0)
    • Wi-Fi 6 firewall management
    • Network access control integration

    Gen 8 TZ Series

    SonicWall Gen 8 Firewalls offer multiple key benefits including higher throughput and IPS performance, persistent performance, and AI-powered insights and automation.

    TZ 680

    Firewall/VPN Performance

    Firewall Inspection Throughput

    5.00 Gbps


    Application Inspection Throughput

    3 Gbps


    IPS Throughput

    3 Gbps


    Threat Prevention Throughput

    2.5 Gbps


    VPN Throughput

    2.5 Gbps


    Maximum Connections

    1,600,000


    New Connections/Sec

    26,000


    Interfaces

    Ethernet Ports

    8x-1GbE Cu


    USB Ports

    1 console (Micro-USB), 1 USB (type-C)


    SFP/SFP+ Ports

    2*10G/5G/2.5/1G SFP


    Expansion Slot

    Storage - Up to 512 GB


    Connectivity

    Site-to-Site VPN Tunnels

    250


    IPSec VPN Clients (Maximum)

    10 (500)


    SSL VPN NetExtender Clients (Maximum)

    2 (250)


    VLAN Interfaces

    256


    TZ 670

    Firewall/VPN Performance

    Firewall Inspection Throughput

    5.00 Gbps


    Application Inspection Throughput

    3.0 Gbps


    IPS Throughput

    3.0 Gbps


    Threat Prevention Throughput

    2.50 Gbps


    VPN Throughput

    2.1 Gbps


    Maximum Connections

    1500000


    New Connections/Sec

    25000


    Interfaces

    Ethernet Ports

    8x1-GbE


    USB Ports

    2 USB 3.0


    SFP/SFP+ Ports

    2x 10G


    Expansion Slot

    Storage - up to 256 GB with 32GB included


    Connectivity

    Wireless WAN Support

    WWAN USB module support (5G/LTE/4G/3G)


    Simplified licensing for ease of license management

    Features Hardware Only APSS MPSS
    24x7 Support Add-On* ✓ ✓
    - Centralized Management & Orchestration Included with 24x7 Support ✓ ✓
    Stateful firewall and Stateful HA ✓ ✓ ✓
    SD-WAN & Advanced Routing** ✓ ✓ ✓
    Application Control Add-On ✓ ✓
    Intrusion detection and prevention Add-On ✓ ✓
    Content & Reputation Based filtering Add-On ✓ ✓
    Capture ATP Sandboxing Add-On ✓ ✓
    DNS Filtering-Advanced Add-On ✓ ✓
    Advanced Reporting and Analytics*** Add-On 7-Day, Extendable 30-Day, Extendable
    Embedded Firewall Warranty by SonicWall TZ680 Firewall (Gen 8) Up to USD$100,000 Up to USD$200,000
    Firewall Configuration Management ✓
    After hours Critical Support ✓
    Managed Firewall & Enhanced Support ✓

    * Add-On denotes services that are available via add-on SKUS

    ** Advanced Application Routing requires Application signatures and GAV/IPS service

    **** Add-On or extendable NSM SKUs available for 7, 30, 90, and 365 Days

    APSS

    Advanced Protection Service Suite

    Includes Capture Advanced Threat Protection with RTDMI Technology, Gateway Anti-Virus, Intrusion Prevention and Application Control, Content Filtering Service, Comprehensive Anti-Spam Service, Deep packet inspection of TLS/SSL-encrypted traffic (DPI-SSL), 24x7 Support, Cloud Management, Cloud-based Reporting for 7 Days and optional Premier Support.

    MPSS

    Managed Protection Service Suite

    Includes all services in Advanced Protection plus extended 30-Day Reporting and Analytics, firewall configuration management, and after hours critical support. The services are delivered by SonicWall Managed Service team.

    The SonicWall TZ680 is the highest-performance model in SonicWall's Gen 8 TZ Series, a desktop next-generation firewall (NGFW) built for mid-sized organizations and distributed enterprises with SD-Branch locations. It runs SonicOS 8 and delivers 5 Gbps of firewall inspection throughput, 2.5 Gbps of threat prevention throughput, and 2.5 Gbps of IPSec VPN throughput.


    Who is the TZ680 best for?

    It suits mid-sized businesses, large branch offices, and multi-site networks that need the most throughput and connection capacity available in a desktop TZ firewall. Compared with the TZ580 (4.5 Gbps firewall inspection, 2.2 Gbps threat prevention), the TZ680 adds higher throughput and larger connection limits; compared with the TZ480 (4 Gbps, SFP+ up to 5G), it adds 10G-capable SFP+ ports, 250 VPN tunnels, and 256 VLAN and tunnel interfaces.


    What ports and connectivity does it have?

    Eight 1GbE copper RJ45 ports and two multi-gig 10G/5G/2.5G/1G SFP+ ports for fiber or high-speed uplinks, one USB Type-C port that supports an optional 5G/LTE USB cellular card for WAN failover and business continuity, and one Micro-USB console port for out-of-band management.


    How much traffic can it handle?

    Performance is rated at 3 Gbps of application inspection and IPS throughput, 2.5 Gbps of anti-malware inspection, 800 Mbps of TLS/SSL (DPI-SSL) decryption throughput, and 26,000 new connections per second, with up to 1,600,000 SPI connections, 600,000 DPI connections, and 75,000 TLS connections. It supports 250 site-to-site VPN tunnels, 10 IPSec VPN clients (expandable to 500), 2 SSL-VPN licenses (expandable to 250), up to 256 logical VLAN and tunnel interfaces, 2,500 SAML single sign-on users, and 32 managed SonicWave access points.


    What security features are included?

    Reassembly-Free Deep Packet Inspection, Gateway Anti-Virus and Anti-Spyware, Intrusion Prevention System, Application Control, Capture Advanced Threat Protection with cloud sandboxing and patented Real-Time Deep Memory Inspection (RTDMI), TLS 1.3 decryption, reputation-based Content Filtering Service (CFS 5.0), and Advanced DNS Filtering stop ransomware, malware, and zero-day threats at the gateway. Secure SD-WAN is built in, and management is available through Network Security Manager (NSM) 3.0+, Web UI, CLI, SSH, REST APIs, or the SonicExpress mobile app with Zero-Touch Deployment.


    Warranty & Returns

    Warranty, Returns, And Additional Information

    Warranty

    • Limited Warranty period (parts): 1 year
    • Limited Warranty period (labor): 1 year
    • Read full details

    Return Policies

    LOADING...