SonicWall TZ400 Wired Network Security Firewall w/ 1-Year Comprehensive Gateway Security Suite Licence

MX67435 TZ400 Wired Network Security Firewall w/ 1-Year Comprehensive Gateway Security Suite Licence
MX67435 TZ400 Wired Network Security Firewall w/ 1-Year Comprehensive Gateway Security Suite Licence MX67435 TZ400 Wired Network Security Firewall w/ 1-Year Comprehensive Gateway Security Suite Licence

Product Info

feature TZ400 Series Network Security Firewall w/
1-Year Comprehensive Gateway Security Suite


Exceptional Security & Stellar Performance w/ Disruptively Low TCO

The SonicWALL TZ series of next generation firewalls (NGFW) is ideally suited for any org that requires enterprise-grade network protection.

SonicWALL TZ series firewalls provide broad protection with advanced security services consisting of onbox and cloud-based anti-malware, anti-spyware, application control, intrusion prevention system (IPS), and URL filtering. To counter the trend of encrypted attacks, the SonicWALL TZ series has the processing power to inspect encrypted SSL connections against the latest threats.

Backed by the SonicWALL Global Response Intelligent Defense (GRID) network, the SonicWALL TZ series delivers continuous updates to maintain a strong network defense against cybercriminals. The SonicWALL TZ series is able to scan every byte of every packet on all ports and protocols with almost zero latency and no file size limitations.

The SonicWALL TZ series features Gigabit Ethernet ports, optional integrated 802.11ac wireless*, IPSec and SSL VPN, failover through integrated 3G/4G support, load balancing and network segmentation. The SonicWALL TZ series UTM firewalls also provide fast, secure mobile access over Apple iOS, Google Android, Amazon Kindle, Windows, MacOS and Linux platforms.

The SonicWALL Global Management System (GMS) enables centralized deployment and management of SonicWALL TZ series firewalls from a single system.

Managed security for distributed environments

Schools, retail shops, remote sites, branch offices and distributed enterprises need a solution that integrates with their corporate firewall.

SonicWALL TZ series firewalls share the same code base; and same protection, as our flagship SuperMassive next-generation firewalls. This simplifies remote site management, as every administrator sees the same user interface (UI).

GMS enables network administrators to configure, monitor and manage remote SonicWALL firewalls through a single pane of glass. By adding highspeed, secure wireless, the SonicWALL TZ series extends the protection perimeter to include customers and guests frequenting the retail site or remote office.


1 Year of SonicWALL Comprehensive Gateway Security Suite

Complete network security in a single integrated package
featureRegardless of their size, today's organizations are concerned with enhancing network security and increasing employee productivity. Small business networks have to protect themselves against the same types of attacks as those faced by larger networks, and enterprises have to deal with the costs and complexities of their own internal processes. The SonicWALL™ Comprehensive Gateway Security Suite (CGSS) is the solution for businesses of all sizes, with SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, plus Application Intelligence and Control Service, Content Filtering Service and 24x7 tech support.

A single solution with low TCO
SonicWALL CGSS combines security, productivity and support in a single solution with a low cost of ownership that provides an increased ROI compared to buying each of the services individually. Available on SonicWALL TZ , Network Security Appliance (NSA), E-Class NSA and SuperMassive firewalls, CGSS provides organizations with a complete security and productivity platform.

Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence and Control
CGSS includes the Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention and Application Intelligence and Control services to deliver intelligent, real-time network security protection against the latest blended threats, including viruses, spyware, worms, Trojans, software vulnerabilities and other malicious code. Application Intelligence and Control provides granular control and real-time visualization of applications to guarantee bandwidth prioritization and ensure maximum network security and productivity.

Content Filtering Service
The SonicWALL Content Filtering Service (CFS) addresses safety, security and productivity concerns by providing the controls to enforce internet use policies and block access to harmful and unproductive web content.

Ideal for schools, businesses, libraries and government agencies, CFS combines application-based policy enforcement with comprehensive content filtering in a cost-effective, easy-to-manage solution. CFS utilizes a dynamic rating and caching architecture that rates URLs, IP addresses and domains and then stores them locally on the firewall, reducing the response time to frequently visited sites to a fraction of a second.

Administrators can manage bandwidth based upon Content Filtering Service rating, as well as by specific IP address, site — or even application — by using SonicWALL Application Intelligence and Control.


24x7 Support
Designed for customers who need advanced technical support and the additional benefits of ongoing software and firmware updates, SonicWALL support is an around-the clock service that includes:

  • Telephone, email, chat and web-based technical support 24x7
  • Direct access to a team of highly trained senior support engineers
  • Advance Exchange hardware replacement in the event of a failure
  • Access to SonicWALL electronic support tools

Download the SonicWALL Comprehensive Gateway Security Suite Datasheet

TZ400 Network Security Firewall Benefits:

  • Enterprise grade network protection
  • Deep packet inspection of all traffic without restrictions on file size or protocol
  • SSL VPN mobile access for Apple iOS, Google Android, Amazon Kindle, Windows, Mac OS and Linux devices


  • Reassembly-Free Deep Packet Inspection
  • Deep packet inspection for SSL
  • Stateful packet inspection
  • Stealth mode
  • Common Access Card (CAC) support
  • DOS attack protection
  • UDP/ICMP/SYN flood protection
  • SSL decryption
  • IPv6 Security

Intrusion Prevention

  • Signature-based scanning
  • Automatic signature updates
  • Bidirectional inspection engine
  • Granular IPS rule capability
  • GeoIP and reputation-based filtering
  • Regular expression matching


  • Stream-based malware scanning
  • Gateway anti-virus
  • Gateway anti-spyware
  • Bi-directional inspection
  • No file size limitation
  • Cloud malware database

Application Control

  • Application control
  • Application component blocking
  • Application bandwidth management
  • Custom application signature creation
  • Data leakage prevention
  • Application reporting over NetFlow/IPFIX
  • Useractivity tracking (SSO)
  • Comprehensive application signature database

Web content filtering

  • URL filtering
  • Anti-proxy technology
  • Keyword blocking
  • Bandwidth manage CFS rating categories
  • Unified policy model with app control
  • 55 content filtering categories
  • Content Filtering Service Client


  • IPSec VPN for site-to-site connectivity
  • SSL VPN and IPSec client remote access
  • Redundant VPN gateway
  • Mobile Connect for iOS and Android™
  • Route-based VPN (OSPF, RIP)


  • PortShield
  • Layer-2 network discovery
  • IPv6
  • Enhanced logging
  • Port mirroring
  • Layer-2 QoS
  • Port Security
  • Dynamic routing
  • SonicPoint Support (ACe, ACi, N2, NDR, Ne, Ni)
  • Policy-based routing
  • DHCP server
  • Bandwidth management
  • A/P high availability with state sync*
  • Inbound/outbound load balancing
  • L2 bridge, NAT mode DDNS
  • 3G/4G WAN Fail-over


  • Granular QoS control
  • Bandwidth management
  • DPI for VoIP traffic
  • H.323 gatekeeper and SIP proxy support

Management and monitoring

  • Web GUI
  • Command line interface (CLI)
  • SNMPv2/v3
  • Off-box reporting (Scrutinizer)
  • Centralized management and reporting
  • Logging
  • Netflow/IPFix exporting
  • App traffic visualization
  • Centralized policy management
  • Single Sign-On (SSO)
  • Terminal service/Citrix support
  • Application and bandwidth visualization
  • IPv4 and IPv6 management


  • IPv6 filtering
  • 6rd (rapid deployment)
  • DHCP prefix delegation
  • BGP

Additional Information:

Visit the Manufacturer Web Page for Full Details

Download the Manufacturer Specification Sheet


General Info  
Make and Model SonicWall TZ400 Wired Network Security Firewall
Part Number 01-SSC-0514
Firewall Up to 1,300Mbps
Full DPI Up to 300Mbps
IPS Up to 130Mbps
AIT Application Inspection Throughput: Up to 900Mbps
Anti-Malware Up to 300Mbps
IMIX Up to 500Mbps
IPSec VPN Up to 900Mbps
DPI SSL SSL Inspection & Decryption: Up to 100Mbps
Connections Up to 6,000 per second
SPI Connections Up to 100,000
DPI Connections Up to 90,000
Single Sign On Up to 500 Users
VLAN Interfaces 50
SonicPoints 16
VPN Tunnels Site to Site: 20 Tunnels
IPSec VPN Clients 2 (25 Maximum)
SSL VPN Licenses 1 (100 Maximum)
Encryption DES, 3DES, AES (128, 192, 256-bit), MD5, SHA-1, Suite B Cryptography
Key Exchange Diffie Hellman Groups 1, 2, 5, 14
Route Based VPN RIP, OSPF
Certificates Supports Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-to-SonicWALL VPN, SCEP
VPN Features Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway, Route-based VPN
Global VPN Client Platforms Microsoft® Windows 10, 8.x, 7 and Vista, all 32/64-bit versions
NetExtender Microsoft® Windows 10, 8.x, 7 and Vista, all 32/64-bit versions
Mac OS X 10.4+
Linux FC3+
Ubuntu 7+
Mobile Connect Apple® iOS
Mac OS X
Google® Android™
Kindle Fire
Windows® 8.1 (Embedded)
Wired Compliance FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, KCC/MSIP
Power External AC Power Adapter
Output: 24W
Power Consumption 9.2W
Dimensions & Weight  
Dimensions 134 x 35 x 19mm
Weight 725g