SonicWall TZ and NSa Firewalls

TZ desktop appliances for branches and small offices, NSa rack appliances when the site outgrows them. Both run the same SonicOS.

Shop All SonicWall
SonicWall hardware
  • Backed by our 1-year warranty
  • US-based network engineers
  • Project and volume pricing
  • POs, Net 30 and financing
  • 100% new and factory sealed

SHOP BY CATEGORY

SonicWall TZ and NSa firewall appliances

A TZ270 and a TZ570 differ in throughput, not capability

Every TZ runs the same SonicOS as the larger NSa appliances. Deep packet inspection of TLS traffic, intrusion prevention, content filtering and application control are present across the line, so the gap between a TZ270 and a TZ570 is throughput, port count and uplink options rather than what the appliance is capable of. Sizing down for a branch site does not mean giving up features.

Two things shape the sizing. TLS inspection is the setting that changes the answer, because inspecting encrypted traffic costs far more than passing it and most traffic is now encrypted, so a model sized on raw throughput will disappoint once inspection is switched on. And the security services are bundled with the appliance in editions that cover both together, which makes budgeting predictable and also ties the renewal date to the hardware.

That is the part we help with: sizing against TLS inspection rather than headline throughput, and telling you when a TZ370 will do the job a TZ570 was quoted for.

BUYING WITH NDI

Volume pricing, net terms, and engineers on the phone

Volume and project pricing

Send us the product list or bill of materials, and we price the project as one order.

  • Quantity breaks on multi-unit orders
  • POs, Net 30 terms and financing
  • Quotes returned the same business day

Pre-sales and technical support

Our US-based network specialists help before you buy and stay with you after delivery.

  • Sizing and compatibility review before you buy
  • Bill of materials built with you, at no cost
  • Warranty, RMA and end-of-life handling
Talk to a Specialist

PRODUCT FAMILIES

Which SonicWall appliance fits the site

TZ covers desktop deployments and the rack lines pick up where TZ throughput ends. Every model runs the same SonicOS, so choose on capacity and ports rather than on features.

  • TZ Series TZ Series TZ270 through TZ570 desktop firewalls for small offices and branch sites
  • NSa Series NSa Series NSa 2700 to 5700 rack appliances for campus and higher-throughput sites
  • Security Bundles Security Bundles Appliance plus security-service bundles that cover the hardware and its subscriptions together
  • HA & Accessories HA & Accessories High-availability units, rack mount kits and replacement hardware

BY DEPLOYMENT

SonicWall builds by site type

Not sure where to start? Pick the kind of site you are protecting.

  • Small Office Small Office A TZ270 with a security bundle: firewall, IPS and content filtering in one.
  • Growing Branch Growing Branch TZ370 or TZ470 when throughput and TLS inspection start to bite.
  • Multi-Site Business Multi-Site Business TZ570 at each site with SFP+ uplinks and central cloud management.
  • Campus & Higher Load Campus & Higher Load NSa 2700 through 5700 when the branch appliance runs out of headroom.