SonicWall TZ570

/570W/570P

The SonicWall TZ570 series, available integration with Capture Client for
in three models (TZ570, TZ570W, seamless endpoint security.
TZ570P) is the first desktop-form-
factor next-generation firewall SonicOS and Security Services
(NGFW) with 5 Gigabit The SonicOS architecture is at the Highlights:
Ethernet interfaces. core of TZ NGFWs. TZ570 is powered
• 5 GbE interfaces in a desktop
by the feature rich SonicOS 7.0 form factor
Designed for mid-sized organizations
operating system with new modern
and distributed enterprise with SD- • SD-Branch ready
looking UX/UI, advanced security,
Branch locations, the TZ570 series • Secure SD-WAN capability
networking and management
delivers industry-validated security • SonicExpress App onboarding
capabilities. TZ570 features integrated
effectiveness with best-in-class price-
SD-WAN, TLS 1.3 support, real- • Zero-Touch Deployment
performance. TZ570 NGFWs address
time visualization, high-speed virtual • Single-pane-of-glass-management
the growing trends in web encryption,
private networking (VPN) and other through cloud or firewall
connected devices and high-speed
robust security features. • SonicWall Switch, SonicWave Access
mobility by delivering a solution that
Point and Capture Client integration
meets the need for automated, real- Unknown threats are sent to SonicWall’s
time breach detection and prevention. • Built-in and expandable storage
cloud-based Capture Advanced Threat
Protection (ATP) multiengine sandbox for • Redundant power
The TZ570 is highly scalable, with
analysis. Enhancing Capture ATP is our • High port density
high port density of 10 ports.
patent-pending Real-Time Deep Memory • Cellular failover
It features both in-built and an
Inspection (RTDMI™) technology. As one
expandable storage of up to 256GB, • SonicOS 7.0
of Capture ATP’s engine, RTDMI detects
that enables various features including • TLS 1.3 support
and blocks malware and zero-day threats
logging, reporting, caching, firmware • Groundbreaking performance
by inspecting directly in memory.
backup and more. An optional
• High connection count
second power supply provides added By leveraging Capture ATP with
• Fast DPI performance
redundancy in case of failure. RTDMI technology, in addition to
security services such as Reassembly- • Low TCO
Deployment of TZ570 is further
Free Deep Packet Inspection (RFDPI),
simplified by Zero-Touch Deployment,
Anti-virus and Anti-spyware
with the ability to simultaneously
Protection, intrusion prevention
roll out these devices across multiple
system, Application Intelligence and
locations with minimal IT support.
Control, Content Filtering Services,
Built on next-gen hardware, it
DPI-SSL, TZ series firewalls stop
integrates firewalling, switching and
malware, ransomware and other
wireless capabilities, plus provides
advanced threats at the gateway. For
single-pane-of-glass management for
more information, refer the SonicOS
SonicWall Switches and SonicWave
and Security Services Datasheet.
Access Points. It allows tight
Deployments
Small to Medium size Business

• Save space and money with an integrated gateway

security solution with firewalling, switching and TZ570P
wireless capabilities
• Reduce complexity and get the business running Internet
without relying on IT personnel with easy onboarding
using SonicExpress App and Zero-Touch Deployment,
and easy management through a single pane of glass
• Attain business continuity by providing failover
to cellular connectivity
• Protect network from attacks with a comprehensive
security solution that incorporates VPN, IPS, CFS, AV PoE devices
and much more
Retail store / small office LAN
• Leverage high port density to power on multiple
PoE devices such as IP phones and IP cameras
with TZ570P
• Boost employee productivity by blocking
unauthorized access with traffic segmentation
and access policies

Distributed Enterprise with SD-Branches

Capture Security Center
• Enhance customer experience and adapt to the
changing business needs by enabling next-gen
branch connectivity with SD-Branch
Cloud Security
and Management
• Drive business growth by investing in next-gen
appliances with multi-gigabit and advanced security Cloud App
features, to future-proof against the changing Security

network and security landscape

• Secure networks from the most advanced attacks
with advanced security features and automatically SD-WAN enabled transport

block threats on decrypted traffic using protocols

such as TLS 1.3 SonicWall Firewall
Zero-Touch Deployment Capable
Edge Security

• Leverage end-to-end network security with

seamless integration of SonicWave access points,
SonicWall Switches and Capture Client
SonicWall Switch
• Ensure seamless communication as stores talk Zero-Touch Deployment Capable

to HQ via easy VPN connectivity which allows

IT administrators to create a hub and spoke SonicWave Access Point
Zero-Touch Deployment Capable
configuration for the safe transport of data Access Security

between all locations Camera

• Improve business efficiency, performance and
reduce costs by leveraging TZ570’s hardware and IP Phone
software enhancements, plus features such SD-WAN
technology
• Scale quickly and effortlessly with SonicExpress
App and Zero-Touch Deployment Capture Client Endpoint Security

• Ensure business continuity by providing failover Laptop Smartphone

to cellular connectivity
• Maintain compliance with security features, and
leverage built-in and expandable storage to store
logs for audit purposes

2
 WWAN LEDs for USB 5G/LTE X4/X5/X6/X7 RJ45 Ports X2 WAN RJ45 Port X0 LAN RJ45 Port

SafeMode
Button
Grounding
Screw

RJ45 X8/X9 X3 RJ45 X1 WAN Primary Power Input

USB 3.0 Power -Test LED - LAN/MGMT X0 Port LED
SuperSpeed LEDs -Security LED - WAN X1 and X2 Port LEDs Console SFP/SFP+ Port RJ45 Redundant
Ports -Storage LED - X0–X7 RJ45 Port LEDs Port Ports Port Power Input
- X8 / X9 SFP/SFP+ Port LEDs Micro-USB
Console Port

SonicWall TZ570/570W/570P specifications

FIREWALL GENERAL TZ570 TZ570W TZ570P

Operating system SonicOS 7.0
8x1GbE, 2x5GbE, 8x1GbE, 2x5GbE, 8x1GbE, 2x5GbE,
Interfaces
2 USB 3.0, 1 Console 2 USB 3.0, 1 Console 2 USB 3.0, 1 Console
Power over Ethernet (PoE) support N/A N/A 5 PoE or 3 PoE+
Expansion Storage Expansion Slot (Up to 256GB, Rear)
Management Network Security Manager, CLI, SSH, Web UI, GMS, REST APIs
Single Sign-On (SSO) Users 2,500
VLAN interfaces 256
Access points supported (maximum) 32
FIREWALL/VPN PERFORMANCE TZ570 TZ570W TZ570P
Firewall inspection throughput1 4.00 Gbps
Threat prevention throughput2 2.00 Gbps
Application inspection throughput2 2.5 Gbps
IPS throughput2 2.5 Gbps
Anti-malware inspection throughput 2
2.00 Gbps
TLS/SSL inspection and decryption throughput (DPI SSL)2 750 Mbps
IPSec VPN throughput 3
1.80 Gbps
Connections per second 16,000
Maximum connections (SPI) 1,250,000
Maximum connections (DPI) 400,000
Maximum connections (DPI SSL) 30,000
VPN TZ570 TZ570W TZ570P
Site-to-site VPN tunnels 200
IPSec VPN clients (maximum) 10 (500)
SSL VPN licenses (maximum) 2 (200)
Encryption/authentication DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchange Diffie Hellman Groups 1, 2, 5, 14v
Route-based VPN RIP, OSPF, BGP
Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-
Route-based VPN
SonicWall VPN, SCEP
Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway,
VPN features
Route-based VPN
Global VPN client platforms supported Microsoft® Windows 10
NetExtender Microsoft® Windows 10, Linux
Mobile Connect Apple iOS, Mac OS X, Google® Android™, Kindle Fire, Chrome OS, Windows 10
®

3
SonicWall TZ570/570W/570P specifications, continued

SECURITY SERVICES TZ570 TZ570W TZ570P

Deep Packet Inspection services Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based
Content Filtering Service (CFS)
on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service Yes
Application Visualization Yes
Application Control Yes
Capture Advanced Threat Protection Yes
DNS Security Yes

NETWORKING TZ570 TZ570W TZ570P

­
IP address assignment
Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols BGP, OSPF, RIPv1/v2, static routes, policy-based routing
Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking,
QoS
802.1e (WMM)
LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database,
Authentication
Terminal Services, Citrix, Common Access Card (CAC)
Local user database 250
VoIP Full H.323v1-5, SIP
TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP,
Standards
PPTP, RADIUS, IEEE 802.3
FIPS 140-2 (with Suite B) Level 2, IPv6 (Phase 2), ICSA Network Firewall,
Certifications (pending)
ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS)
HARDWARE TZ570 TZ570W TZ570P
Form factor Desktop4
Power supply 60W 60W 180W
Maximum power consumption (W) 13.1 15.3 108.75
Input power 100-240 VAC, 50-60 Hz 100-240 VAC, 50-60 Hz 100-240 VAC, 50-60 Hz
Total heat dissipation 44.7 52.17 370.84
3.5 x 15 x 22.5 (cm)
Dimensions
1.38 x 5.91 x 8.85 in
Weight 0.97 kg / 2.14 lbs 0.99 kg / 2.18 lbs 0.99 kg / 2.18 lbs
WEEE weight 1.42 kg / 3.13 lbs 1.47 kg / 3.24 lbs 1.57 kg / 3.46 lbs
Shipping weight 1.93 kg / 4.25 lbs 1.98 kg / 4.36 lbs 2.08 kg / 4.58 lbs
MTBF @25ºC in years 26.1 23.3 31.7
Environment (Operating/Storage) 32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity 5-95% non-condensing
REGULATORY TZ570 TZ570W TZ570P
FCC Class B, FCC P15C,
FCC Class B, FCC , ICES FCC P15E, ICES Class B, FCC Class A, ICES Class
Class B, CE (EMC, LVD, ISED/IC, CE (RED, RoHS), A, CE (EMC, LVD, RoHS),
RoHS), C-Tick, VCCI Class C-Tick, VCCI Class B, Japan C-Tick, VCCI Class A, UL/
Major regulatory compliance B, UL/cUL, TUV/GS, CB, Wireless, UL/cUL, TUV/GS, cUL, TUV/ GS, CB, Mexico
Mexico DGN notice by CB, Mexico DGN notice by DGN notice by UL, WEEE,
UL, WEEE, REACH, BSMI, UL, WEEE, REACH, BSMI, REACH, BSMI, KCC/MSIP,
KCC/MSIP, ANATEL NCC (TW) KCC/MSIP, ANATEL
SRRC, ANATEL

4
SonicWall TZ570W specifications, continued

INTEGRATED WIRELESS5 (TZ570W ONLY)

Standards 802.11a/b/g/n/ac, WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz,
Frequency bands
5.180-5.825 GHz; 802.11ac: 5.180-5.825 GHz
802.11a: US and Canada 12, Europe 11, Japan 4, Singapore4, Taiwan 4; 802.11b/g: US
and Canada 1-11, Europe 1-13, Japan (14-802.11b only); 802.11n (2.4 GHz): US and
Operating channels Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-
165, Europe 36-48, Japan 36-48, Spain 36-48/52-64; 802.11ac: US and Canada 36-
48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64
Transmit output power Based on the regulatory domain specified by the system administrator
Transmit power control Yes
802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per
channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4,
21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel;
Data rates supported
802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120,
135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130,
195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channel
802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct
Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division
Modulation technology spectrum Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal
Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency Division
Multiplexing (OFDM)

1. Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools.
Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4. For rack mount, separate rack mount kit available.
5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products.

5
SonicOS 7.0 Feature Summary
Firewall • Application reporting over NetFlow/IPFIX • Dashboard
• Stateful packet inspection • Comprehensive application signature database • Device information, application, threats
• Reassembly-Free Deep Packet Inspection • Topology view
Traffic visualization and analytics
• DDoS attack protection (UDP/ICMP/SYN flood) • Simplified policy creation and management
• User activity
• IPv4/IPv6 support • Policy/Objects usage statistics1
• Application/bandwidth/threat usage
• Biometric authentication for remote access • Used vs Un-used
• Cloud-based analytics
• DNS proxy • Active vs Inactive
• Full API support HTTP/HTTPS Web content filtering2 • Global search for static data
• SonicWall Switch integration • URL filtering • Storage support1
• SD-WAN scalability • Proxy avoidance • Internal and external storage management1
• SD-WAN Usability Wizard1 • Keyword blocking • WWAN USB card support (5G/LTE/4G/3G)
• SonicCoreX and SonicOS containerization1 • Policy-based filtering (exclusion/inclusion) • Network Security Manager (NSM) support
• Connections scalability (SPI, DPI, DPI SSL) • HTTP header insertion • Web GUI
• Bandwidth manage CFS rating categories • Command line interface (CLI)
Enhanced dashboard1
• Unified policy model with app control • Zero-Touch registration & provisioning
• Enhanced device view
• Content Filtering Client • CSC Simple Reporting1
• Top traffic and user summary
VPN • SonicExpress mobile app support
• Insights to threats
• Secure SD-WAN • SNMPv2/v3
• Notification center
• Auto-provision VPN • Centralized management and reporting with
TLS/SSL/SSH decryption and inspection SonicWall Global Management System (GMS)2
• IPSec VPN for site-to-site connectivity
• TLS 1.3 with enhanced security1 • Logging
• SSL VPN and IPSec client remote access
• Deep packet inspection for TLS/SSL/SSH • Netflow/IPFix exporting
• Redundant VPN gateway
• Inclusion/exclusion of objects, groups • Cloud-based configuration backup
• Mobile Connect for iOS, Mac OS X, Windows,
or hostnames • BlueCoat security analytics platform
Chrome, Android and Kindle Fire
• SSL control • Application and bandwidth visualization
• Route-based VPN (OSPF, RIP, BGP)
• Enhancements for DPI-SSL with CFS • IPv4 and IPv6 management
• Granular DPI SSL controls per zone or rule Networking
• CD management screen
• PortShield
Capture advanced threat protection2 • Dell N-Series and X-Series switch
• Jumbo frames management including cascaded switches
• Real-Time Deep Memory Inspection
• Path MTU discovery
• Cloud-based multi-engine analysis Debugging and diagnostics
• Enhanced logging
• Virtualized sandboxing • Enhanced packet monitoring
• VLAN trunking
• Hypervisor level analysis • SSH terminal on UI
• Port mirroring (NSa 2650 and above)
• Full system emulation Wireless
• Layer-2 QoS
• Broad file type examination • SonicWave AP cloud management
• Port security
• Automated and manual submission • WIDS/WIPS
• Dynamic routing (RIP/OSPF/BGP)
• Real-time threat intelligence updates • Rogue AP prevention
• SonicWall wireless controller
• Block until verdict • Fast roaming (802.11k/r/v)
• Policy-based routing (ToS/metric and ECMP)
• Capture Client • 802.11s mesh networking
• NAT
Intrusion prevention2 • DHCP server • Auto-channel selection
• Signature-based scanning • Bandwidth management • RF spectrum analysis
• Automatic signature updates • A/P high availability with state sync • Floor plan view
• Bi-directional inspection • Inbound/outbound load balancing • Topology view
• Granular IPS rule capability • High availability - Active/Standby with • Band steering
• GeoIP enforcement state sync • Beamforming
• Botnet filtering with dynamic list • L2 bridge, wire/virtual wire mode, tap mode, • AirTime fairness
NAT mode
• Regular expression matching • Bluetooth Low Energy
• Asymmetric routing
• MiFi extender
Anti-malware2 • Common Access Card (CAC) support
• RF enhancements and improvements
• Stream-based malware scanning
VoIP • Guest cyclic quota
• Gateway anti-virus
• Granular QoS control
• Gateway anti-spyware Integrated Wireless (TZ570W only)
• Bandwidth management
• Bi-directional inspection • 802.11ac Wave 2 wireless
• DPI for VoIP traffic
• No file size limitation • Dual-band (2.4 GHz and 5.0 GHz)
• H.323 gatekeeper and SIP proxy support
• Cloud malware database • 802.11 a/b/g/n/ac wireless standards
Management, monitoring and support • Wireless intrusion detection and prevention
Application identification2
• Capture Security Appliance (CSa) support • Wireless guest services
• Application control
• Capture Threat Assessment (CTA) v2.0 • Lightweight hotspot messaging
• Application bandwidth management
• New design or template • Virtual access point segmentation
• Custom application signature creation
• Industry and global average comparison • Captive portal
• Data leakage prevention
• New UI/UX, Intuitive feature layout1 • Cloud ACL

1
New feature, available on SonicOS 7.0
2
Requires added subscription

6
 Product SKU
TZ570 with 1-year TotalSecure Essential Edition 02-SSC-5651
TZ570W with 1-year TotalSecure Essential Edition 02-SSC-5649
TZ570P with 1-year TotalSecure Essential Edition 02-SSC-5653
TZ570 High Availability 02-SSC-5694
TZ570P High Availability 02-SSC-5655
TZ570 with 3-year Secure Upgrade Plus Essential Edition 02-SSC-5661
TZ570W with 3-year Secure Upgrade Plus Essential Edition 02-SSC-5663
TZ570P with 3-year Secure Upgrade Plus Essential Edition 02-SSC-5667

Services for SonicWall TZ570 SKU

Essential Protection Service Suite - Capture ATP, Threat Prevention, Content Filtering, Anti-Spam and 24x7 Support (1-year) 02-SSC-5137
Capture Advanced Threat Protection for TZ570 (1-year) 02-SSC-5083
Gateway Anti-Virus, Intrusion Prevention and Application Control (1-year) 02-SSC-5155
Content Filtering Service (1-year) 02-SSC-5119
Comprehensive Anti-Spam Service (1-year) 02-SSC-5101
24x7 Support (1-year) 02-SSC-5065

Services for SonicWall TZ570W SKU

Essential Protection Service Suite - Capture ATP, Threat Prevention, Content Filtering, Anti-Spam and 24x7 Support (1-year) 02-SSC-5149
Capture Advanced Threat Protection for TZ570W (1-year) 02-SSC-5095
Gateway Anti-Virus, Intrusion Prevention and Application Control (1-year) 02-SSC-5167
Content Filtering Service (1-year) 02-SSC-5131
Comprehensive Anti-Spam Service (1-year) 02-SSC-5113
24x7 Support (1-year) 02-SSC-5077

Services for SonicWall TZ570P SKU

Essential Protection Service Suite - Capture ATP, Threat Prevention, Content Filtering, Anti-Spam and 24x7 Support (1-year) 02-SSC-5143
Capture Advanced Threat Protection for TZ570P (1-year) 02-SSC-5089
Gateway Anti-Virus, Intrusion Prevention and Application Control (1-year) 02-SSC-5161
Content Filtering Service (1-year) 02-SSC-5125
Comprehensive Anti-Spam Service (1-year) 02-SSC-5107
24x7 Support (1-year) 02-SSC-5071

7
 Accessories SKU
SonicWall TZ670/570 Series FRU Power Supply 02-SSC-3078
SonicWall TZ670/570 Series Rack Mount Kit 02-SSC-3112
SonicWall 32GB Storage Module for TZ670/570 Series 02-SSC-3114
SonicWall 64GB Storage Module for TZ670/570 Series 02-SSC-3115
SonicWall 128GB Storage Module for TZ670/570 Series 02-SSC-3116
SonicWall 256GB Storage Module for TZ670/570 Series 02-SSC-3117
SonicWall Micro USB Console Cable for TZ670/570 Series 02-SSC-5173
10GB-SR SFP+ Short Reach Fiber Module Multi-Mode No Cable 01-SSC-9785
10GB-LR SFP+ Long Reach Fiber Module Single-Mode No Cable 01-SSC-9786
10GB SFP+ Copper with 1M Twinax Cable 01-SSC-9787
10GB SFP+ Copper with 3M Twinax Cable 01-SSC-9788
1GB-SX SFP Short Haul Fiber Module Multi-Mode No Cable 01-SSC-9789
1GB-LX SFP Long Haul Fiber Module Single-Mode No Cable 01-SSC-9790
1GB-RJ45 SFP Copper Module No Cable 01-SSC-9791
SonicWall SFP+ 10GBASE-T Transceiver Copper RJ45 Module 02-SSC-1874

Regulatory model numbers

TZ570 APL62-0F7
TZ570W APL62-0F8
TZ570P APL63-0F9

Partner Enabled Services

Need help to plan, deploy or optimize your SonicWall solution? SonicWall Advanced Services Partners are trained to provide
you with world class professional services. Learn more at www.sonicwall.com/PES.

About SonicWall
SonicWall delivers Boundless Cybersecurity for the hyper-distributed era and a work reality where everyone is remote, mobile
and unsecure. By knowing the unknown, providing real-time visibility and enabling breakthrough economics, SonicWall closes the
cybersecurity business gap for enterprises, governments and SMBs worldwide. For more information, visit www.sonicwall.com.

SonicWall, Inc. © 2020 SonicWall Inc. ALL RIGHTS RESERVED. SonicWall is a

1033 McCarthy Boulevard | Milpitas, CA 95035 trademark or registered trademark of SonicWall Inc. and/or its affiliates
Refer to our website for additional information. in the U.S.A. and/or other countries. All other trademarks and registered
www.sonicwall.com trademarks are property of their respective owners.
Datasheet-TZ570-US-KJ-2819