SonicWall TZ270 – Gen 7 NGFW with 1-Year TotalSecure Essential

Product Overview

The SonicWall TZ270 is an entry-level Gen 7 next-generation firewall (NGFW) built for small businesses, branch offices, and distributed enterprise environments. It delivers 2 Gbps of firewall inspection throughput and 1 Gbps of application inspection throughput across 8 × Gigabit Ethernet ports. This bundle includes a 1-Year TotalSecure Essential Edition subscription, providing Gateway Anti-Virus, Intrusion Prevention, Application Control, Content Filtering, 24×7 support, and Network Security Manager (NSM) SaaS out of the box. Zero-Touch Deployment simplifies rollout across multi-site environments without requiring on-site technical staff.

Product Description

The SonicWall TZ270 (part number 02-SSC-6841) runs SonicOS 7.0, the latest operating system generation from SonicWall, which introduces a redesigned interface, policy-based routing, SD-WAN orchestration, and improved TLS 1.3 inspection capabilities. The appliance supports up to 750,000 concurrent SPI connections and 750 Mbps of VPN throughput, making it capable of supporting remote workforces and site-to-site tunnels simultaneously. Deep Packet Inspection (DPI) and DPI-SSL allow the TZ270 to inspect encrypted HTTPS traffic for hidden threats without sacrificing throughput at branch-office scale.

The TotalSecure Essential Edition subscription included with this unit activates Gateway Anti-Virus, IPS, Application Control, Content Filtering, and 24×7 technical support from SonicWall. Network Security Manager (NSM) SaaS is also included, enabling centralized cloud-based management and reporting for multi-site deployments. Note that Capture Advanced Threat Protection (Capture ATP) with RTDMI™ zero-day detection is available via upgrade to TotalSecure Advanced Edition and is not included in the Essential bundle.

The TZ270 ships in a desktop form factor that is also rack-mountable with the optional SonicWall Rack Mount Kit (02-SSC-3113), available separately from Creation Networks. Internal storage is built-in with support for expansion up to 256 GB, useful for local log retention. For organizations requiring higher throughput, the TZ370 provides 3 Gbps firewall inspection and 900,000 SPI connections on the same Gen 7 platform.

Key Features

• 2 Gbps Firewall Inspection Throughput — Handles high-bandwidth branch office traffic without becoming a bottleneck.
• 8 × Gigabit Ethernet Ports — Provides flexible LAN/WAN segmentation for SMB and distributed office deployments.
• SonicOS 7.0 — Redesigned operating system with policy-based routing, improved SD-WAN, and TLS 1.3 inspection support.
• 1-Year TotalSecure Essential Edition — Includes Gateway Anti-Virus, IPS, Application Control, Content Filtering, NSM SaaS, and 24×7 support.
• Zero-Touch Deployment — Enables remote provisioning of firewall policies without requiring on-site IT staff.
• SD-WAN Built-In — Intelligent path selection and WAN optimization across multiple ISP connections.
• DPI and DPI-SSL — Single-pass deep packet inspection including encrypted HTTPS traffic at branch-appropriate throughput.
• VPN Throughput: 750 Mbps — Supports both site-to-site IPsec and SSL-VPN remote access tunnels.
• Expandable Storage up to 256 GB — Supports local log storage and reporting retention at the device level.
• Rack-Mountable (Optional Kit) — Compatible with the SonicWall 02-SSC-3113 rack mount kit for structured wiring closet installations.

Typical Applications

• Small business primary internet gateway with unified threat management
• Branch office firewall in a distributed enterprise SD-WAN deployment
• Retail or hospitality location requiring content filtering and application control
• Multi-site rollout using Zero-Touch Deployment and NSM SaaS centralized management
• Remote workforce VPN concentrator for SSL-VPN and IPsec site-to-site tunnels
• Compliance-driven environments requiring IPS, logging, and encrypted traffic inspection

Technical Specifications

Frequently Asked Questions

What security services are included with the TotalSecure Essential Edition?
The Essential Edition includes Gateway Anti-Virus, Intrusion Prevention System (IPS), Application Control, Content Filtering Service, Network Security Manager (NSM) SaaS for cloud-based management, and 24×7 technical support from SonicWall. Capture ATP with RTDMI™ zero-day sandboxing is not included and requires an upgrade to TotalSecure Advanced Edition.

Is the TZ270 rack-mountable?
The TZ270 ships as a desktop appliance. Rack mounting requires the optional SonicWall Rack Mount Kit (02-SSC-3113), which is available separately from Creation Networks at creationnetworks.net.

How does the TZ270 compare to the TZ370?
Both are Gen 7 appliances running SonicOS 7.0. The TZ370 offers 3 Gbps firewall inspection throughput versus 2 Gbps on the TZ270, and supports 900,000 SPI connections versus 750,000. The TZ370 is appropriate when traffic volumes exceed the TZ270's throughput capacity or when a higher connection ceiling is required.

Does the TZ270 support SD-WAN?
Yes. SonicOS 7.0 includes built-in SD-WAN with policy-based routing, dynamic path selection, and WAN aggregation. No additional license is required to activate SD-WAN functionality on the TZ270.

What is Zero-Touch Deployment and how does it work?
Zero-Touch Deployment allows the TZ270 to be shipped directly to a remote site and provisioned automatically when connected to the internet. Configuration is pushed from NSM SaaS (included with TotalSecure Essential), eliminating the need for on-site technical staff during initial setup.

Can the TZ270 inspect encrypted HTTPS traffic?
Yes. The TZ270 supports DPI-SSL, which decrypts, inspects, and re-encrypts SSL/TLS traffic in real time. This allows IPS, Application Control, and Gateway Anti-Virus to scan content that would otherwise be hidden inside encrypted sessions.

Complete Gen 7 Performance and Hardware Specifications

The figures below are the full published SonicWall Gen 7 TZ datasheet values for the TZ270, including the inspection and connection metrics most product pages leave out — anti-malware inspection, TLS/SSL decryption throughput, DPI and DPI-SSL connection ceilings, connections per second, tunnel counts, and power and reliability data.

SonicWall TZ270 Part Number Decoder

SonicWall's TZ270 catalogue is genuinely confusing: the same appliance appears under a dozen different 02-SSC part numbers depending on which subscription bundle and term is attached, and several of those part numbers are for subscriptions only with no hardware at all. The table below decodes the TZ270 numbers so you can confirm you are buying the right thing.

This listing is 02-SSC-6841 — the TZ270 appliance bundled with a 1-year TotalSecure Essential Edition subscription.

Two patterns are worth remembering. First, 02-SSC- numbers cover the standard appliances and subscriptions, while 03-SSC- numbers are typically managed-service, TradeUp, or promotional bundles. Second, an appliance bundle SKU (TotalSecure or Secure Upgrade Plus) includes the hardware; a Protection Service Suite SKU is a licence key only and will not ship you a firewall. If you already own a TZ270 and just need to re-license it, you want a Protection Service Suite part number, not this one.

TZ270 vs TZ270W vs TZ370 vs Gen 8 TZ280

The TZ270 sits at the bottom of the Gen 7 TZ range. The TZ270W is the same appliance with integrated wireless; the TZ370 is the next step up in throughput; and the Gen 8 TZ280 is the newer-generation appliance in the same slot. All figures are the published SonicWall datasheet values.

Two honest observations. The TZ370 beats the Gen 8 TZ280 on raw firewall inspection throughput (3 Gbps vs 2.5 Gbps) and on TLS/SSL inspection (500 Mbps vs 430 Mbps), so "newer generation" does not automatically mean faster in this part of the range. And the TZ270 remains listed by SonicWall in its entry-level firewall model comparison alongside the Gen 8 TZ280 through TZ680; SonicWall publishes no end-of-sale or end-of-life statement for the Gen 7 TZ models on that page, and describes Gen 7 as a still-current platform option.

Licensing, Renewal, and What Happens After Year One

This bundle includes a 1-year TotalSecure Essential Edition subscription. Essential covers Gateway Anti-Virus and Anti-Spyware, Intrusion Prevention, Application Control, Content Filtering Service, and 24×7 support. It does not include Capture Advanced Threat Protection (Capture ATP) with RTDMI zero-day sandboxing — that is what separates the Advanced Protection Service Suite from Essential.

When the bundled year ends, you re-license with a subscription-only part number — you do not rebuy the appliance:

• Stay on Essential: Essential Protection Service Suite for TZ270 — 02-SSC-6745 (1 year), 02-SSC-6746 (2 years), 02-SSC-6747 (3 years), 02-SSC-6749 (5 years).
• Step up to Advanced and add Capture ATP: Advanced Protection Service Suite for TZ270 — 02-SSC-6649 (1 year), 02-SSC-6650 (2 years), 02-SSC-6651 (3 years), 02-SSC-6653 (5 years).
• Renew a la carte: Gateway Anti-Malware, IPS and Application Control — 02-SSC-6709 / 6710 / 6711 / 6713 (1 / 2 / 3 / 5 years). Content Filtering Service — 02-SSC-6685 / 6686 / 6687 / 6689 (1 / 2 / 3 / 5 years).
• Support only: 8×5 support — 02-SSC-6733 (1 year) or 02-SSC-6735 (3 years). 24×7 support — 02-SSC-6641 (5 years).
• Move to a managed model: Managed Protection Security Service (MPSS) for TZ270 — 03-SSC-5874 / 5876 / 5878 (1 / 2 / 3 years).

Multi-year terms are almost always cheaper per year than annual renewals, so if the TZ270 is going into a site with a three-to-five-year refresh cycle it is worth pricing 02-SSC-6747 or 02-SSC-6749 up front. If you need a quote on any of these renewal part numbers, contact Creation Networks and we will price them against your existing serial number.

Documentation and Resources

• SonicWall TZ Series Gen 7 datasheet (official, PDF) — full TZ270 through TZ670 specification tables
• SonicWall entry-level firewall range and model comparison
• SonicWall TZ Series Gen 8 datasheet (official, PDF) — for TZ280 comparison
• SonicWall technical documentation portal — TZ270 quick start guide and SonicOS 7 administration guides

More Frequently Asked Questions

Which TZ270 part number should I actually buy?
If you need the firewall itself plus security services, buy an appliance bundle: 02-SSC-6841 for a 1-year Essential term (this listing), or a Secure Upgrade Plus number such as 02-SSC-6846 / 02-SSC-6847 for 2- and 3-year Essential terms. If you want the hardware with no security subscription at all, that is 02-SSC-2821. If you already own the appliance and only need to re-license it, buy a Protection Service Suite number instead — those ship a licence key, not a box.

What is the difference between "TotalSecure" and "Secure Upgrade Plus"?
Both are appliance-plus-subscription bundles — in each case you receive the TZ270 hardware and an activated service term. In SonicWall's TZ270 price list the TotalSecure numbering is used for the 1-year Essential bundle (02-SSC-6841), while Secure Upgrade Plus numbering covers the longer 2- and 3-year Essential and Advanced terms (02-SSC-6846, 02-SSC-6847, 02-SSC-6844, 02-SSC-6845). Practically, the decision comes down to term length and whether you want Essential or Advanced services.

How does the TZ270 differ from the TZ270W?
Performance and connection limits are identical — 2 Gbps firewall inspection, 750 Mbps threat prevention, 750,000 SPI connections, 8 × 1GbE ports on both. The TZ270W adds an integrated 2×2 802.11ac Wave 2 radio supporting 802.11a/b/g/n/ac. The wireless model is slightly heavier (1.87 lb vs 1.81 lb), draws more power (18.91 W vs 16.84 W maximum), and has a lower published MTBF (27.1 years vs 51.1 years). Choose the TZ270W only if you want the firewall to double as an access point; if you already have separate APs, the non-wireless TZ270 is the better value.

Is the TZ270 obsolete now that Gen 8 exists?
No. SonicWall still lists the TZ270 and TZ270W in its entry-level firewall model comparison alongside the Gen 8 TZ280 through TZ680, and publishes no end-of-sale or end-of-life notice for Gen 7 TZ models on that page. It is also worth noting that the Gen 7 TZ370 still exceeds the Gen 8 TZ280 on firewall inspection throughput (3 Gbps vs 2.5 Gbps) and TLS/SSL inspection (500 Mbps vs 430 Mbps), so Gen 7 remains a valid choice — particularly where you are standardising on SonicOS 7 across an existing estate.

What is the TZ270's TLS/SSL inspection throughput, and why is it so much lower than the firewall number?
The TZ270 is rated at 300 Mbps for TLS/SSL inspection and decryption (DPI-SSL), versus 2 Gbps for plain firewall inspection. Decrypting, scanning, and re-encrypting TLS sessions is by far the most expensive operation a firewall performs, so this is normal across the whole category. The TZ270 also caps DPI-SSL at 25,000 concurrent connections. If you plan to inspect all encrypted traffic on a busy site, size against the 300 Mbps figure rather than the 2 Gbps headline.

How many VPN tunnels and remote users does the TZ270 support?
The TZ270 supports 50 site-to-site VPN tunnels and ships with 1 SSL VPN licence, expandable to a maximum of 50. IPSec VPN throughput is 750 Mbps. If you need more than 50 site-to-site tunnels or more than 50 concurrent SSL VPN users, step up to the TZ370, which supports 100 tunnels and 2 included SSL VPN licences with a 100 maximum.

How many VLANs and network segments can I create?
The TZ270 supports 64 VLAN interfaces across its 8 Gigabit Ethernet ports — enough to separate corporate, guest, VoIP, AV-over-IP, IoT, and payment traffic at a typical branch or retail site. The TZ370 doubles this to 128 VLAN interfaces if you need finer segmentation.

What are the power and mounting requirements?
The TZ270 uses a 36 W external power supply and draws a maximum of 16.84 W, so it can sit behind a small UPS without issue. The chassis measures 1.8 × 5.3 × 7.5 in (3.5 × 13.5 × 19 cm) and weighs 1.81 lb (0.82 kg). Rack mounting requires the optional 02-SSC-3113 TAA-compliant rack mount kit, which also fits the TZ370 and TZ470.

Related Products

• SonicWall 02-SSC-3113 Rack Mount Kit for TZ270 / TZ370 / TZ470, TAA Compliant
• SonicWall TZ370 Gen 7 Firewall (02-SSC-6819) — 3 Gbps firewall inspection, 900,000 SPI connections
• SonicWall TZ370 Gen 7 Appliance, 8-Port, No Subscription
• SonicWall TZ470 Gen 7 Firewall (02-SSC-2829)
• Full SonicWall firewall and licensing collection