Skip to main content
Shop with CelesteCeleste

Celestehere!

I’m your shopping assistant for PC builds, upgrades, and everything tech.

Got questions? Ask away!

Start a conversation

Get to know me

Hey!

How can we help you today?

Track a packageStart a returnCancel an orderResolve a payment issueBilling, declined cards, and payment method updateMy Account & SecurityUpdate passwords and security settings

Need more help?

Visit Help Center
All Categories
Build Tools & Resources New & Trending Offers for You
For your BusinessNew
Your Browsing History
  1. Home
  2. Networking
  3. Wired Networking
  4. Firewall & Network Security Devices
  5. SonicWall

  6. Item#: N82E16833947123

  • $1,069.20
  • Free 15-day Returns
  • Limit 99999 per customer.
    Login to Make an Offer
    Sold by Newegg

    Shipped by Newegg

    Price alert
    Add to Wish List
    Shop it at NeweggBusiness.
    Shop All SonicWall Products

    SonicWall TZ280 Firewall (Gen 8), w/ Secure Upgrade Plus (2-Year Advanced Protection Security Suite) | 03-SSC-6925

    Be the first to review this product...
    • TZ 280
    • TZ 280W
    • TZ 280P
    • TZ380
    • TZ380W
    • TZ480
    • TZ 580
    • TZ680
    • Hardware Only
    • High Availability
    • Total Secure (Appliance + 1Y EPSS)
    • Total Secure (Appliance + 1Y APSS)
    • Secure Upgrade Plus (Appliance + 2Y APSS)
    • Secure Upgrade Plus (Appliance + 3Y APSS) +1Y CSE
    • 2.5 GBPS FIREWALL INSPECTION THROUGHPUT: Built on the Gen 8 SonicOS 8 architecture, the SonicWall TZ280 appliance delivers 2.5 Gbps firewall inspection, 1.5 Gbps application inspection and IPS throughput, 1 Gbps threat prevention throughput, and 1.2 Gbps IPSec VPN throughput for home offices, small offices, and lean branches.
    • 2-YEAR ADVANCED PROTECTION SERVICE SUITE (APSS): Includes Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, DNS Filtering, 24x7 Support with firmware updates And Cloud Management with 7-Day Alerting, Advanced Reporting & Analytics.
    • 8x 1GBE + 2x 1G SFP PORTS WITH USB-C FOR 5G/LTE FAILOVER: 8 copper 1GbE ports, 2 SFP ports, a Micro-USB console port, and a USB Type-C port (with dedicated WWAN status LEDs) support an optional 5G/LTE USB WWAN card for cellular failover, helping maintain business continuity if the primary WAN link goes down.
    • UP TO 1 MILLION SPI CONNECTIONS, 200 SITE-TO-SITE VPN TUNNELS: Handles up to 1,000,000 SPI connections, 200,000 DPI connections, and 200 site-to-site VPN tunnels, with 5 included IPSec VPN clients (expandable to 200) and 1 SSL-VPN license (expandable to 50).
    View Data Sheet Details
    +
    +
    Overview
    Specs
    Reviews
    See all Q & A

    Any questions? Ask CelesteSM will help you find out quickly.

    Try me now
    SonicWall TZ280 Firewall (Gen 8)

    TZ280 Series

    Designed for home offices, small offices and lean branches, the TZ280 series deliver industry-validated security effectiveness with best-in-class price-performance.

    SonicWall TZ280 Firewall (Gen 8)

    Highlights

    • SD-Branch ready
    • Secure SD-WAN capability
    • SonicExpress App onboarding
    • Zero-Touch Deployment
    • SonicWall Unified Management ready
    • Centralized, simplified management via Network Security Manager (NSM)
    • SonicWall Switch, SonicWave Access Point and Capture Client integration
    • Redundant power
    • DNS security
    • Reputation-based Content Filtering Service (CFS 5.0)
    • Wi-Fi 6 firewall management
    • Network access control integration

    Gen 8 TZ Series

    SonicWall Gen 8 Firewalls offer multiple key benefits including higher throughput and IPS performance, persistent performance, and AI-powered insights and automation.

    TZ 280

    Firewall Performance

    Firewall Inspection Throughput

    2.5 Gbps


    Application Inspection Throughput

    1.5 Gbps


    IPS Throughput

    1.5 Gbps


    Threat Prevention Throughput

    1 Gbps


    VPN Throughput

    1.2 Gbps


    Maximum Connections

    1,000,000


    New Connections/Sec

    12,000


    Interfaces

    Ethernet Ports

    8x1GbE Cu


    USB Ports

    1 console (Micro-USB), 1 USB (type-C)


    SFP/SFP+ Ports

    2*1G SFP


    Expansion Slot

    Storage - Up to 512 GB


    Connectivity

    Site-to-Site VPN Tunnels

    200


    IPSec VPN Clients (Maximum)

    5 (200)


    SSL VPN NetExtender Clients (Maximum)

    1 (50)


    VLAN Interfaces

    64


    TZ 270

    Firewall Performance

    Firewall Inspection Throughput

    2.00 Gbps


    Application Inspection Throughput

    1.00 Gbps


    IPS Throughput

    1.00 Gbps


    Threat Prevention Throughput

    750 Mbps


    VPN Throughput

    750 Mbps


    Maximum Connections

    750000


    New Connections/Sec

    6000


    Interfaces

    Ethernet Ports

    8x1GbE


    USB Ports

    2 USB 3.0


    Expansion Slot

    Storage - up to 256 GB


    Connectivity

    Wi-Fi Option

    802.11a/b/g/n/ac Wave 2 applies to TZ70W only


    Wireless WAN Support

    WWAN USB module support (5G/LTE/4G/3G)


    Simplified licensing for ease of license management

    Features Hardware Only APSS MPSS
    24x7 Support Add-On* ✓ ✓
    - Centralized Management & Orchestration Included with 24x7 Support ✓ ✓
    Stateful firewall and Stateful HA ✓ ✓ ✓
    SD-WAN & Advanced Routing** ✓ ✓ ✓
    Application Control Add-On ✓ ✓
    Intrusion detection and prevention Add-On ✓ ✓
    Content & Reputation Based filtering Add-On ✓ ✓
    Capture ATP Sandboxing Add-On ✓ ✓
    DNS Filtering-Advanced Add-On ✓ ✓
    Advanced Reporting and Analytics*** Add-On 7-Day, Extendable 30-Day, Extendable
    Embedded Firewall Warranty by SonicWall TZ280 Firewall (Gen 8) Up to USD$100,000 Up to USD$200,000
    Firewall Configuration Management ✓
    After hours Critical Support ✓
    Managed Firewall & Enhanced Support ✓

    * Add-On denotes services that are available via add-on SKUS

    ** Advanced Application Routing requires Application signatures and GAV/IPS service

    **** Add-On or extendable NSM SKUs available for 7, 30, 90, and 365 Days

    APSS

    Advanced Protection Service Suite

    Includes Capture Advanced Threat Protection with RTDMI Technology, Gateway Anti-Virus, Intrusion Prevention and Application Control, Content Filtering Service, Comprehensive Anti-Spam Service, Deep packet inspection of TLS/SSL-encrypted traffic (DPI-SSL), 24x7 Support, Cloud Management, Cloud-based Reporting for 7 Days and optional Premier Support.

    MPSS

    Managed Protection Service Suite

    Includes all services in Advanced Protection plus extended 30-Day Reporting and Analytics, firewall configuration management, and after hours critical support. The services are delivered by SonicWall Managed Service team.


    Warranty & Returns

    Warranty, Returns, And Additional Information

    Warranty

    • Limited Warranty period (parts): 1 year
    • Limited Warranty period (labor): 1 year
    • Read full details

    Return Policies

    Manufacturer Contact Info

    LOADING...

    The SonicWall TZ280 Gen 8 is a desktop firewall for home offices, small businesses, and lean branches that need business-grade network protection, with up to 2.5 Gbps firewall inspection and a two-year Advanced Protection Service Suite.

    Recommended For

    • Small businesses with an IT administrator or service provider that want a centrally managed firewall with intrusion prevention, malware protection, filtering, and cloud reporting in one appliance.
    • Businesses connecting a small branch or remote office to a main site that need site-to-site VPN and remote security management, rather than a consumer-style Wi-Fi router.
    • Organizations with several lean locations that want to deploy and manage multiple firewalls centrally, including through MSP-oriented management tools.
    • Small offices that want a wired security gateway with optional cellular WAN failover, so a compatible USB WWAN device can provide a backup connection if the primary internet link fails.

    Real-World Use Scenarios

    • A small office wants to protect everyday internet use—email, web browsing, and cloud applications—without managing separate appliances for each security function. With the included APSS services enabled, the TZ280 can apply gateway malware and intrusion protection, content and DNS filtering, and threat analysis to help block or flag risky traffic.
    • A business with a main office and several small branches wants staff at each location to reach shared business resources securely. Site-to-site VPN tunnels can connect the locations, so users can work across the company network without treating each branch as an isolated site.
    • An employee working from home needs access to files or other resources inside the office network. A configured VPN connection can provide a secure path back to the office; access depends on the company’s VPN setup and available client licenses.
    • A small office relies on its internet connection for daily work and wants a backup if its wired WAN service goes down. With a compatible optional USB cellular modem and failover configured, the TZ280 can use a 5G/LTE connection as a backup; the experience will depend on cellular coverage and service.
    • An IT provider manages firewalls at multiple small-business sites and wants to check their status and security activity without logging into each appliance separately. With cloud management enabled, the TZ280 can be monitored and managed centrally, with alerts and reporting available under the included APSS package.

    Spec Summary

    AttributeValue
    Best ForDesktop network security for home offices, small offices, and lean branches that need wired connectivity and VPN support
    Firewall And Inspection Performance2.5 Gbps firewall inspection, 1.5 Gbps application inspection and IPS, 1 Gbps threat prevention and anti-malware inspection, 430 Mbps TLS/SSL inspection and decryption, and 1.2 Gbps IPsec VPN throughput
    Connection CapacityUp to 1,000,000 SPI connections, 200,000 DPI connections, 35,000 TLS connections, and 12,000 connections per second; supports up to 1,000 users
    Network Ports And Connectivity8 × 1GbE RJ45 ports and 2 × SFP ports; 1Gbps LAN port bandwidth
    Security ServicesGateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS decryption, Capture Advanced Threat Protection, DNS filtering, content filtering, anti-spam, application control, and application visualization
    VPN And Remote AccessSupports 200 site-to-site VPN tunnels, up to 200 IPsec VPN clients, and up to 50 SSL-VPN licenses; includes 5 IPsec VPN clients and 1 SSL-VPN license. Supports AES 128/192/256-bit encryption, MD5, SHA-256, SHA-384, Suite B Cryptography, Diffie-Hellman Groups 1, 2, 5, and 14v, and route-based VPN with RIP, OSPF, or BGP
    VPN Features And Client SupportDead Peer Detection, DHCP over VPN, IPSec NAT Traversal, redundant VPN gateway, certificate support, and VPN clients for Windows 10 and 11, Linux, iOS, Mac OS X, and Android
    Network Protocols And StandardsSupports TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3, BGP, OSPF, RIPv1/v2, static routes, and policy-based routing
    Software And Network FeaturesRuns SonicOS and includes QoS
    Subscription And SupportSecure Upgrade Plus configuration with a 2-year Advanced Protection Suite
    Physical DesignDesktop form factor; 3.5 × 13 × 19 cm and 0.82 kg
    Compliance And CertificationsIPv6 certification; listed compliance includes FCC Class B, ICES Class B, CE, UL, cUL, ANATEL, WEEE, REACH, SCIP, RCM, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, and CB
    Model IdentifiersSonicWall TZ280, series TZ280; part number 03-SSC-6925