SonicWall TZ280W Firewall (Gen 8) w/ Total Secure (1-Year Advanced Protection Security Suite) | 03-SSC-7985

The SonicWall TZ280W is the integrated-wireless variant of the entry model in SonicWall's Gen 8 TZ Series of next-generation firewalls, an SD-Branch platform designed for home offices, small offices, and lean branch locations that need industry-validated security effectiveness at a low total cost of ownership. It shares its core hardware and security architecture with the base TZ280 and PoE+ TZ280P, but adds a built-in wireless access point so a single appliance can deliver firewalling, switching, and Wi-Fi coverage without a separate AP.

The integrated radio supports 2x2 802.11ax (Wi-Fi 6) across both 2.4GHz and 5GHz bands, with WPA, WPA2, and WPA3 security, 802.11i, and EAP-PEAP/EAP-TTLS authentication. Wireless-specific features include wireless intrusion detection, wireless guest services, lightweight hotspot messaging, virtual access point segmentation, and captive portal support, letting the TZ280W serve as both gateway security and a managed guest or employee Wi-Fi access point for a small office or retail location.

Beyond wireless, the TZ280W includes 8x 1GbE copper ports, 2x 1G SFP ports, a Micro-USB console port for out-of-band management, and a USB Type-C port with dedicated WWAN status LEDs that supports an optional 5G/LTE USB WWAN card for cellular failover, helping maintain business continuity if the primary internet circuit goes down.

Firewall performance matches the rest of the TZ280 Series: 2.5 Gbps of firewall inspection throughput, 1.5 Gbps of application inspection and IPS throughput, 1 Gbps of threat prevention and anti-malware inspection throughput, 430 Mbps of TLS/SSL inspection and decryption (DPI-SSL) throughput, and 1.2 Gbps of IPSec VPN throughput, with 12,000 connections per second and up to 1,000,000 maximum SPI connections, 200,000 DPI connections, and 35,000 TLS connections.

VPN and remote access capabilities include up to 200 site-to-site VPN tunnels, 5 included IPSec VPN clients (expandable to 200), and 1 included SSL-VPN license (expandable to 50).

Security services include Reassembly-Free Deep Packet Inspection, Gateway Anti-Virus and Anti-Spyware, Intrusion Prevention System, Application Control, Capture Advanced Threat Protection powered by cloud-based multi-engine sandboxing and patented Real-Time Deep Memory Inspection (RTDMI) technology, TLS 1.3 decryption, reputation-based Content Filtering Service 5.0, and Advanced DNS Filtering, all centrally managed via Network Security Manager (NSM) 3.0+, CLI, SSH, Web UI, or REST APIs, with support for up to 64 logical VLAN and tunnel interfaces and 16 managed SonicWave access points.