SonicWall TZ270 – Gen 7 NGFW with 1-Year TotalSecure Essential

Product Overview

The SonicWall TZ270 is an entry-level Gen 7 next-generation firewall (NGFW) built for small businesses, branch offices, and distributed enterprise environments. It delivers 2 Gbps of firewall inspection throughput and 1 Gbps of application inspection throughput across 8 × Gigabit Ethernet ports. This bundle includes a 1-Year TotalSecure Essential Edition subscription, providing Gateway Anti-Virus, Intrusion Prevention, Application Control, Content Filtering, 24×7 support, and Network Security Manager (NSM) SaaS out of the box. Zero-Touch Deployment simplifies rollout across multi-site environments without requiring on-site technical staff.

Product Description

The SonicWall TZ270 (part number 02-SSC-6841) runs SonicOS 7.0, the latest operating system generation from SonicWall, which introduces a redesigned interface, policy-based routing, SD-WAN orchestration, and improved TLS 1.3 inspection capabilities. The appliance supports up to 750,000 concurrent SPI connections and 750 Mbps of VPN throughput, making it capable of supporting remote workforces and site-to-site tunnels simultaneously. Deep Packet Inspection (DPI) and DPI-SSL allow the TZ270 to inspect encrypted HTTPS traffic for hidden threats without sacrificing throughput at branch-office scale.

The TotalSecure Essential Edition subscription included with this unit activates Gateway Anti-Virus, IPS, Application Control, Content Filtering, and 24×7 technical support from SonicWall. Network Security Manager (NSM) SaaS is also included, enabling centralized cloud-based management and reporting for multi-site deployments. Note that Capture Advanced Threat Protection (Capture ATP) with RTDMI™ zero-day detection is available via upgrade to TotalSecure Advanced Edition and is not included in the Essential bundle.

The TZ270 ships in a desktop form factor that is also rack-mountable with the optional SonicWall Rack Mount Kit (02-SSC-3113), available separately from Creation Networks. Internal storage is built-in with support for expansion up to 256 GB, useful for local log retention. For organizations requiring higher throughput, the TZ370 provides 3 Gbps firewall inspection and 900,000 SPI connections on the same Gen 7 platform.

Key Features

• 2 Gbps Firewall Inspection Throughput — Handles high-bandwidth branch office traffic without becoming a bottleneck.
• 8 × Gigabit Ethernet Ports — Provides flexible LAN/WAN segmentation for SMB and distributed office deployments.
• SonicOS 7.0 — Redesigned operating system with policy-based routing, improved SD-WAN, and TLS 1.3 inspection support.
• 1-Year TotalSecure Essential Edition — Includes Gateway Anti-Virus, IPS, Application Control, Content Filtering, NSM SaaS, and 24×7 support.
• Zero-Touch Deployment — Enables remote provisioning of firewall policies without requiring on-site IT staff.
• SD-WAN Built-In — Intelligent path selection and WAN optimization across multiple ISP connections.
• DPI and DPI-SSL — Single-pass deep packet inspection including encrypted HTTPS traffic at branch-appropriate throughput.
• VPN Throughput: 750 Mbps — Supports both site-to-site IPsec and SSL-VPN remote access tunnels.
• Expandable Storage up to 256 GB — Supports local log storage and reporting retention at the device level.
• Rack-Mountable (Optional Kit) — Compatible with the SonicWall 02-SSC-3113 rack mount kit for structured wiring closet installations.

Typical Applications

• Small business primary internet gateway with unified threat management
• Branch office firewall in a distributed enterprise SD-WAN deployment
• Retail or hospitality location requiring content filtering and application control
• Multi-site rollout using Zero-Touch Deployment and NSM SaaS centralized management
• Remote workforce VPN concentrator for SSL-VPN and IPsec site-to-site tunnels
• Compliance-driven environments requiring IPS, logging, and encrypted traffic inspection

Technical Specifications

Frequently Asked Questions

What security services are included with the TotalSecure Essential Edition?
The Essential Edition includes Gateway Anti-Virus, Intrusion Prevention System (IPS), Application Control, Content Filtering Service, Network Security Manager (NSM) SaaS for cloud-based management, and 24×7 technical support from SonicWall. Capture ATP with RTDMI™ zero-day sandboxing is not included and requires an upgrade to TotalSecure Advanced Edition.

Is the TZ270 rack-mountable?
The TZ270 ships as a desktop appliance. Rack mounting requires the optional SonicWall Rack Mount Kit (02-SSC-3113), which is available separately from Creation Networks at creationnetworks.net.

How does the TZ270 compare to the TZ370?
Both are Gen 7 appliances running SonicOS 7.0. The TZ370 offers 3 Gbps firewall inspection throughput versus 2 Gbps on the TZ270, and supports 900,000 SPI connections versus 750,000. The TZ370 is appropriate when traffic volumes exceed the TZ270's throughput capacity or when a higher connection ceiling is required.

Does the TZ270 support SD-WAN?
Yes. SonicOS 7.0 includes built-in SD-WAN with policy-based routing, dynamic path selection, and WAN aggregation. No additional license is required to activate SD-WAN functionality on the TZ270.

What is Zero-Touch Deployment and how does it work?
Zero-Touch Deployment allows the TZ270 to be shipped directly to a remote site and provisioned automatically when connected to the internet. Configuration is pushed from NSM SaaS (included with TotalSecure Essential), eliminating the need for on-site technical staff during initial setup.

Can the TZ270 inspect encrypted HTTPS traffic?
Yes. The TZ270 supports DPI-SSL, which decrypts, inspects, and re-encrypts SSL/TLS traffic in real time. This allows IPS, Application Control, and Gateway Anti-Virus to scan content that would otherwise be hidden inside encrypted sessions.