SonicWall TZ570 02-SSC-5694 Desktop Firewall, High Availability Unit
- The firewall features a throughput of 4.0 Gbps, a threat prevention throughput of 2.0 Gbps, and a VPN throughput of 1.8 Gbps, equipped with 8x1GbE interfaces, 2x5GbE interfaces, 2 USB 3.0 ports, and 1 console port
Overview
The SonicWall TZ Series (Gen 7) is an integrated SD-Branch platform for small and midsize businesses and branch offices in a desktop form factor. It runs SonicOS 7 with Secure SD-WAN, zero-touch deployment and management through the cloud or the firewall itself, and it integrates SonicWall Switch, SonicWave access points and Capture Client. The 02-SSC-5694 is the TZ570 High Availability unit. It is the secondary unit of a TZ570 high availability pair, supplied as an appliance with no security subscription attached; support and security subscriptions are sold separately and licensed on the primary appliance.
Technical Details
The SonicWall TZ570 02-SSC-5694 is a desktop next-generation firewall running SonicOS 7, with 8×1GbE RJ45, 2×5GbE SFP+. Threat Prevention throughput is 2 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled (4 Gbps firewall inspection), and it holds up to 1,250,000 concurrent SPI connections. This part number is the High Availability unit of a TZ570 pair and must be paired with a regular TZ570. It is used at a small office, branch or retail site for internet-edge protection, SD-WAN and site-to-site VPN.
Best For
The TZ570 suits a small office, branch or retail site that needs 2 Gbps of Threat Prevention throughput and up to 1,250,000 concurrent SPI connections. It is bought to pair with an existing TZ570 for high availability. Size against the Threat Prevention figure, not the firewall inspection throughput.
Not suitable if:
- your inspected traffic exceeds 2 Gbps, the published Threat Prevention throughput
- you need a standalone firewall rather than the second unit of an HA pair
- you need Power over Ethernet from the firewall, since this model has none
- you require rack mounting without an additional kit, since this is a desktop appliance and requires a separate rackmount kit for rack installation
02-SSC-5694 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 8×1GbE RJ45, 2×5GbE SFP+ |
| Max Port Speed | 5 GbE |
| Management & Console Ports | 1×Console, 2×USB 3.0 |
| Performance & Scale | |
| Firewall Throughput | 4 Gbps (RFC 2544) |
| Threat Prevention Throughput | 2 Gbps (Gateway AV, Anti-Spyware, IPS and Application Control enabled) |
| TLS/SSL Inspection Throughput | 0.75 Gbps (DPI SSL) |
| IPsec VPN Throughput | 1.8 Gbps (1418-byte UDP, AESGMAC16-256) |
| Maximum Concurrent Sessions | 1,250,000 (SPI) |
| New Sessions per Second | 16,000 |
| Maximum DPI Connections | 400,000 (DPI) |
| Maximum IPsec VPN Tunnels | 200 (site-to-site) |
| Power & Thermal | |
| Power Supply | 60 W external; 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 13.4 W |
| Physical & Environmental | |
| Form Factor | Desktop |
| Dimensions (H x W x D) | 1.38 × 5.91 × 8.85 in (3.5 × 15 × 22.5 cm) |
| Weight | 2.14 lb (0.97 kg) |
| Operating Temperature | 32 to 105 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 7 |
| High Availability | Active/Standby; stateful synchronization requires the optional Stateful HA Upgrade license |
| Central Management Platform | Network Security Manager, GMS |
| Routing Protocols & IPv6 | BGP, OSPF, RIPv1/v2, static routes, policy-based routing; IPv6/USGv6 certified |
FAQ
Does the SonicWall TZ570 02-SSC-5694 include a security subscription?
No. The 02-SSC-5694 is a dedicated High Availability appliance with no security-service bundle of its own. It runs SonicOS 7; once it is associated with the primary TZ570 on MySonicWall, it synchronizes its licensing with the primary appliance.
How much traffic can the SonicWall TZ570 02-SSC-5694 handle?
SonicWall publishes no user count, so size the TZ570 on its figures. Firewall inspection throughput is 4 Gbps, but Threat Prevention throughput is 2 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled; size against that. It holds 1,250,000 concurrent SPI connections and 400,000 DPI connections, and opens 16,000 new connections per second.
What interfaces does the SonicWall TZ570 02-SSC-5694 have?
The TZ570 provides 8×1GbE RJ45, 2×5GbE SFP+. Management and console connectivity is 1×Console, 2×USB 3.0. Transceivers for any SFP-type ports are sold separately.
Does the SonicWall TZ570 02-SSC-5694 support high availability?
This part number is the High Availability unit: the second appliance of a TZ570 HA pair. The TZ570 supports Active/Standby high availability; stateful synchronization requires SonicWall's optional Stateful HA Upgrade license for the TZ570 series.
What is the difference between the TZ570 and the TZ670?
Both run the same SonicOS 7. The TZ570 is rated at 4 Gbps firewall inspection throughput, 2 Gbps Threat Prevention throughput and 1,250,000 concurrent SPI connections; the TZ670 is rated at 5 Gbps, 2.5 Gbps and 1,500,000. Check both interface sets in the specification tables.
Does the 02-SSC-5694 include SonicWall support?
The 02-SSC-5694 is a dedicated High Availability appliance. It is supplied as the second unit of an HA pair with a regular TZ570. Once the two are associated on MySonicWall, the HA unit synchronizes its licensing with the primary appliance. Network Devices Inc. confirms the pairing and licensing before the order is placed.
How is the SonicWall TZ570 02-SSC-5694 managed?
The TZ570 is managed through Network Security Manager (NSM), and locally through the SonicOS web interface and CLI. Firewall policy, SD-WAN, VPN and high availability are configured on the appliance; the HA unit's licensing synchronizes with the primary appliance in the pair. SonicWall includes centralized management and alerting as part of support, so NSM management needs an active support contract or security bundle.
What condition is the 02-SSC-5694 sold in, and what warranty applies?
Network Devices Inc. supplies the 02-SSC-5694 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
