Introduction

Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ570 series delivers industry-validated security effectiveness with best-in-class price-performance. TZ570 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, real-time breach detection and prevention.

The TZ570 is highly scalable, with high port density of 10 ports. It features both in-built and an expandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optional second power supply provides added redundancy in case of failure.

Deployment of TZ570 is further simplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, it integrates firewalling, switching and wireless capabilities, plus provides single-pane-of-glass management for SonicWall Switches and SonicWave Access Points. It allows tight integration with Capture Client for seamless endpoint security.

Highlights

• 5 GbE interfaces in a desktop form factor
• SD-Branch ready
• Secure SD-WAN capability
• SonicExpress App onboarding 
• Zero-Touch Deployment
• Single-pane-of-glass-management through cloud or firewall
• SonicWall Switch, SonicWave Access Point and Capture Client integration
• Built-in and expandable storage
• Redundant power
• High port density
• Cellular failover
• SonicOS 7.0
• TLS 1.3 support
• Groundbreaking performance
• High connection count
• Fast DPI performance
• Low TCO

Deployments

Deployments

• Small to Medium size Business
• Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities
• Reduce complexity and get the business running without relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass
• Attain business continuity by providing failover to cellular connectivity
• Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more
• Leverage high port density to power on multiple PoE devices such as IP phones and IP cameras with TZ570P
• Boost employee productivity by blocking unauthorized access with traffic segmentation and access policies
  

Distributed Enterprise with SD-Branches

• Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch
• Drive business growth by investing in next-gen appliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape
• Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3
• Leverage end-to-end network security with seamless integration of SonicWave access points, SonicWall Switches and Capture Client
• Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations
• Improve business efficiency, performance and reduce costs by leveraging TZ570's hardware and software enhancements, plus features such SD-WAN technology
• Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment
• Ensure business continuity by providing failover to cellular connectivity
• Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposes

Specifications

SECURITY SERVICES	TZ570
Deep Packet Inspection services	Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, DPI SSL
Content Filtering Service (CFS)	HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service	Yes
Application Visualization	Yes
Application Control	Yes
Capture Advanced Threat Protection	Yes
DNS Security	Yes
NETWORKING
IP address assignment	Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes	1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
Routing protocols	BGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoS	Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1e (WMM)
Authentication	LDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
Local user database	250
VoIP	Full H.323v1-5, SIP
Standards	TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications (pending)	FIPS 140-2 (with Suite B) Level 2, IPv6 (Phase 2), ICSA Network Firewall, ICSA Anti-virus, Common Criteria NDPP (Firewall and IPS)
HARDWARE
Form factor	Desktop
Power supply	60W
Maximum power consumption (W)	13.1
Input power	100-240 VAC, 50-60 Hz
Total heat dissipation	44.7
Dimensions	3.5 x 15 x 22.5 (cm) 1.38 x 5.91 x 8.85 in
Weight	0.97 kg / 2.14 lbs
WEEE weight	1.42 kg / 3.13 lbs
Shipping weight	1.93 kg / 4.25 lbs
MTBF @25ºC in years	26.1
Environment (Operating/Storage)	32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity	5-95% non-condensing
REGULATORY
Major regulatory compliance	FCC Class B, FCC , ICES Class B, CE (EMC, LVD, RoHS), C-Tick, VCCI Class B, UL/cUL, TUV/GS, CB, Mexico DGN notice by UL, WEEE, REACH, BSMI, KCC/MSIP, ANATEL