| Model |
TZ680 |
| Operating system |
SonicOS 8 |
| Interfaces |
8x1GbE, 2x 10/5/2.5/1G SFP+, 1 USB (type-C), 1 console (Micro-USB) |
| Storage/(Expansion) |
(Optional: Up to 512 GB) |
| Centralized Management |
Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs |
| Logical VLAN and tunnel interfaces (maximum) |
256 |
| SAML Single Sign-On Users |
2500 |
| Access points supported (maximum) |
32 |
| Firewall/VPN Performance |
| Firewall inspection throughput |
5 Gbps |
| Threat Prevention throughput |
2.5 Gbps |
| Application inspection throughput |
3 Gbps |
| IPS throughput |
3 Gbps |
| Anti-malware inspection throughput |
2.5 Gbps |
| TLS/SSL inspection and decryption throughput |
800 Mbps |
| IPSec VPN throughput |
2.5 Gbps |
| Connections per second |
26,000 |
| Maximum Connections (SPI) |
1,600,000 |
| Maximum connections (DPI) |
600,000 |
| Maximum connections (TLS) |
75,000 |
| VPN and ZTNA |
| Site-to-site VPN tunnels |
250 |
| IPSec VPN clients (max) |
10 (500) |
| SSL-VPN licenses (max) |
2 (250) |
| Encryption/Authentication |
AES (128, 192, 256-bit)/MD5, SHA-256, SHA-384, Suite B Cryptography |
| Key exchange |
Diffie Hellman Groups 1, 2, 5, 14v |
| Route-based VPN |
RIP, OSPF, BGP |
| Certificate support |
Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEP |
| VPN features |
Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN |
| Global VPN client platforms supported |
Microsoft® Windows 7, Windows 8, Windows 8.1 and Windows 10 |
| NetExtender |
Microsoft® Windows 10, Windows 10/11 and Linux |
| Mobile Connect |
Apple® iOS, Mac OS X, Google® Android™, Chrome OS, Windows |
| SonicWall Private Access powered by Cloud Secure Edge |
Included in 3&Free Loyalty Program |
| Security services |
| Deep Packet Inspection services |
Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption |
| Content Filtering Service (CFS) |
Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists |
| Comprehensive Anti-Spam Service |
Yes |
| Application Visualization |
Yes |
| Application Control |
Yes |
| Capture Advanced Threat Protection |
Yes |
| DNS Filtering |
Yes |
| Networking |
| IP address assignment |
Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay |
| NAT modes |
1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode |
| Routing protocols |
BGP, OSPF, RIPv1/v2, static routes, policy-based routing |
| QoS |
Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM) |
| Authentication |
LDAP (multiple domains), XAUTH/RADIUS, TACACS+, SAML SSO1, Radius accounting NTLM, internal user database, 2FA, Terminal Services, Citrix, Common Access Card (CAC) |
| Local user database |
250 |
| VoIP |
Full H323-v1-5, SIP |
| Standards |
TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3 |
| Certifications |
IPv6/USGv6 |
| High availability |
Active/Passive with stateful synchronization |
| Hardware |
| Form factor |
Desktop |
| Power supply (W) |
60 |
| Maximum power consumption (W) |
16.99 |
| Input power (AC) |
100-240 VAC, 50-60 Hz |
| Redundant power supply |
1 (Optional) |
| Total heat dissipation (BTU) |
57.93 |
| Dimensions (Unit: cm) |
3.5 x 13 x 19 Shipping: 7.2 x 22.8 x 23 |
| Weight (kg) |
0.97 |
| WEEE weight (kg) |
1.42 |
| Shipping weight (kg) |
1.93 |
| Environment (Operating/Storage) |
0°C to +40°C / -40°C to +70°C |
| Humidity |
5-95% non-condensing |