SonicWall TZ670 02-SSC-5654 Desktop Firewall, High Availability Unit
Overview
The SonicWall TZ Series (Gen 7) is an integrated SD-Branch platform for small and midsize businesses and branch offices in a desktop form factor. It runs SonicOS 7 with Secure SD-WAN, zero-touch deployment and management through the cloud or the firewall itself, and it integrates SonicWall Switch, SonicWave access points and Capture Client. The 02-SSC-5654 is the TZ670 High Availability unit. It is the secondary unit of a TZ670 high availability pair, supplied as an appliance with no security subscription attached; support and security subscriptions are sold separately and licensed on the primary appliance.
Technical Details
The SonicWall TZ670 02-SSC-5654 is a desktop next-generation firewall running SonicOS 7, with 8×1GbE RJ45, 2×10GbE SFP+. Threat Prevention throughput is 2.5 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled (5 Gbps firewall inspection), and it holds up to 1,500,000 concurrent SPI connections. This part number is the High Availability unit of a TZ670 pair and must be paired with a regular TZ670. It is used at a small office, branch or retail site for internet-edge protection, SD-WAN and site-to-site VPN.
Best For
The TZ670 suits a small office, branch or retail site that needs 2.5 Gbps of Threat Prevention throughput and up to 1,500,000 concurrent SPI connections. It is bought to pair with an existing TZ670 for high availability. Size against the Threat Prevention figure, not the firewall inspection throughput.
Not suitable if:
- your inspected traffic exceeds 2.5 Gbps, the published Threat Prevention throughput
- you need a standalone firewall rather than the second unit of an HA pair
- you need Power over Ethernet from the firewall, since this model has none
- you require rack mounting without an additional kit, since this is a desktop appliance and requires a separate rackmount kit for rack installation
02-SSC-5654 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 8×1GbE RJ45, 2×10GbE SFP+ |
| Max Port Speed | 10 GbE |
| Management & Console Ports | 1×Console, 2×USB 3.0 |
| Performance & Scale | |
| Firewall Throughput | 5 Gbps (RFC 2544) |
| Threat Prevention Throughput | 2.5 Gbps (Gateway AV, Anti-Spyware, IPS and Application Control enabled) |
| TLS/SSL Inspection Throughput | 0.8 Gbps (DPI SSL) |
| IPsec VPN Throughput | 2.1 Gbps (1418-byte UDP, AESGMAC16-256) |
| Maximum Concurrent Sessions | 1,500,000 (SPI) |
| New Sessions per Second | 25,000 |
| Maximum DPI Connections | 500,000 (DPI) |
| Maximum IPsec VPN Tunnels | 250 (site-to-site) |
| Hardware & Memory | |
| Onboard Storage | 32 GB included (storage expansion slot, up to 256 GB) |
| Power & Thermal | |
| Power Supply | 60 W external; 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 13.1 W |
| Physical & Environmental | |
| Form Factor | Desktop |
| Dimensions (H x W x D) | 1.38 × 5.91 × 8.85 in (3.5 × 15 × 22.5 cm) |
| Weight | 2.14 lb (0.97 kg) |
| Operating Temperature | 32 to 105 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 7 |
| High Availability | Active/Standby; stateful synchronization requires the optional Stateful HA Upgrade license |
| Central Management Platform | Network Security Manager, GMS |
| Routing Protocols & IPv6 | BGP, OSPF, RIPv1/v2, static routes, policy-based routing; IPv6/USGv6 certified |
FAQ
Does the SonicWall TZ670 02-SSC-5654 include a security subscription?
No. The 02-SSC-5654 is a dedicated High Availability appliance with no security-service bundle of its own. It runs SonicOS 7; once it is associated with the primary TZ670 on MySonicWall, it synchronizes its licensing with the primary appliance.
How much traffic can the SonicWall TZ670 02-SSC-5654 handle?
SonicWall publishes no user count, so size the TZ670 on its figures. Firewall inspection throughput is 5 Gbps, but Threat Prevention throughput is 2.5 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled; size against that. It holds 1,500,000 concurrent SPI connections and 500,000 DPI connections, and opens 25,000 new connections per second.
What interfaces does the SonicWall TZ670 02-SSC-5654 have?
The TZ670 provides 8×1GbE RJ45, 2×10GbE SFP+. Management and console connectivity is 1×Console, 2×USB 3.0. Transceivers for any SFP-type ports are sold separately.
Does the SonicWall TZ670 02-SSC-5654 support high availability?
This part number is the High Availability unit: the second appliance of a TZ670 HA pair. The TZ670 supports Active/Standby high availability; stateful synchronization requires SonicWall's optional Stateful HA Upgrade license for the TZ670 series.
What is the difference between the TZ670 and the TZ570?
Both run the same SonicOS 7. The TZ670 is rated at 5 Gbps firewall inspection throughput, 2.5 Gbps Threat Prevention throughput and 1,500,000 concurrent SPI connections; the TZ570 is rated at 4 Gbps, 2 Gbps and 1,250,000. Check both interface sets in the specification tables.
Does the 02-SSC-5654 include SonicWall support?
The 02-SSC-5654 is a dedicated High Availability appliance. It is supplied as the second unit of an HA pair with a regular TZ670. Once the two are associated on MySonicWall, the HA unit synchronizes its licensing with the primary appliance. Network Devices Inc. confirms the pairing and licensing before the order is placed.
How is the SonicWall TZ670 02-SSC-5654 managed?
The TZ670 is managed through Network Security Manager (NSM), and locally through the SonicOS web interface and CLI. Firewall policy, SD-WAN, VPN and high availability are configured on the appliance; the HA unit's licensing synchronizes with the primary appliance in the pair. SonicWall includes centralized management and alerting as part of support, so NSM management needs an active support contract or security bundle.
What condition is the 02-SSC-5654 sold in, and what warranty applies?
Network Devices Inc. supplies the 02-SSC-5654 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
