SonicWall TZ300P – UTM Firewall with PoE/PoE+ Support

Product Overview

The SonicWall TZ300P is a Gen 6 unified threat management (UTM) firewall designed for small businesses and branch offices that need to power IP cameras, wireless access points, or VoIP phones directly from the firewall using PoE/PoE+. It delivers 750 Mbps of firewall inspection throughput across 5 × Gigabit Ethernet ports, with built-in Secure SD-WAN, DPI-SSL encrypted traffic inspection, and Zero-Touch Deployment for simplified remote provisioning. The TZ300P is a purpose-built appliance for environments where consolidating firewall and PoE power distribution reduces rack space and cabling complexity.

Product Description

The SonicWall TZ300P (part number 02-SSC-0602) is a Gen 6 desktop firewall appliance running SonicOS with PoE/PoE+ capability on select LAN ports, allowing it to power SonicWave wireless access points, IP surveillance cameras, and VoIP phones without requiring a separate PoE switch. This consolidation is particularly valuable in small branch offices or retail environments where minimizing infrastructure footprint is a priority.

The TZ300P uses SonicWall’s Reassembly-Free Deep Packet Inspection (RFDPI) engine, a single-pass architecture that inspects all traffic—including encrypted SSL/TLS sessions via DPI-SSL—without buffering packets or reassembling streams. This approach maintains inspection accuracy while reducing latency on 235 Mbps threat prevention and 300 Mbps IPS workloads. The appliance supports up to 100,000 concurrent SPI connections and 300 Mbps VPN throughput for site-to-site and remote-access tunnel termination.

Capture Advanced Threat Protection (Capture ATP) with RTDMI™ is available on the TZ300P via subscription, providing cloud-based multi-engine sandboxing for zero-day malware detection. The built-in wireless controller supports 802.11ac and manages up to several SonicWave access points, enabling a controller-less wireless deployment without additional hardware. VLAN support allows logical network segmentation for isolating guest, corporate, and IoT traffic across the same physical infrastructure.

Secure SD-WAN is included at no additional license cost, providing dynamic path selection, WAN load balancing, and failover across dual ISP connections. Zero-Touch Deployment integrates with SonicWall’s cloud management platform to allow remote provisioning without on-site IT involvement. Buyers requiring higher throughput or newer SonicOS 7.0 capabilities should consider the Gen 7 TZ270 or TZ370, also available from Creation Networks.

Key Features

• PoE/PoE+ on LAN Ports — Powers IP cameras, SonicWave APs, and VoIP phones directly from the firewall, eliminating the need for a separate PoE switch.
• RFDPI Engine — Single-pass Reassembly-Free Deep Packet Inspection processes all traffic in a single scan without packet reassembly overhead.
• DPI-SSL — Decrypts and inspects encrypted HTTPS/TLS traffic to detect threats hidden inside SSL sessions.
• Capture ATP with RTDMI™ (subscription) — Multi-engine cloud sandbox detects zero-day malware and malicious files before they reach endpoints.
• Built-In Wireless Controller (802.11ac) — Manages SonicWave access points without a separate controller appliance.
• Secure SD-WAN Built-In — Dynamic WAN path selection, load balancing, and failover across multiple ISP connections at no extra license cost.
• VLAN Support — Logical network segmentation for separating guest, corporate, IoT, and camera traffic on shared physical infrastructure.
• Zero-Touch Deployment — Remote provisioning via SonicWall’s cloud management platform without requiring on-site IT staff.
• 5 × Gigabit Ethernet Ports — Flexible LAN/WAN port assignment for small office and branch deployments.
• VPN Throughput: 300 Mbps — Supports IPsec site-to-site tunnels and SSL-VPN remote access connections.

Typical Applications

• Small branch office or retail location with IP cameras powered via PoE directly from the firewall
• Hospitality or education deployment pairing the TZ300P with SonicWave APs for controller-less wireless
• VoIP over PoE deployment where phones are powered and protected by the same appliance
• Small business requiring UTM security services with SD-WAN WAN redundancy
• Segmented network environments using VLANs to isolate IoT, guest, and corporate traffic
• Remote site in a Zero-Touch Deployment rollout managed centrally via SonicWall cloud management

Technical Specifications

Frequently Asked Questions

Which devices can the TZ300P power via PoE/PoE+?
The TZ300P can deliver power over Ethernet to any 802.3af (PoE) or 802.3at (PoE+) compliant device connected to its LAN ports, including SonicWave 802.11ac access points, IP surveillance cameras, and VoIP phones. This eliminates the need for a separate PoE-capable switch in small deployments.

Is the TZ300P a current-generation product?
The TZ300P is a Gen 6 appliance. SonicWall’s current generation is Gen 7, which includes the TZ270 and TZ370 with SonicOS 7.0 and higher throughput ceilings. The TZ300P remains a viable option for PoE-specific deployments where its power delivery capability is the primary requirement, but organizations planning for multi-year lifecycle should evaluate Gen 7 options.

Does the TZ300P include Capture ATP?
Capture ATP with RTDMI™ is available on the TZ300P as an add-on subscription and is not included with the base appliance. It provides cloud-based multi-engine sandboxing to detect and block zero-day malware before it reaches the network.

Does the TZ300P support VLANs for network segmentation?
Yes. The TZ300P supports 802.1Q VLAN tagging, allowing administrators to create logical network segments for separating IoT devices, guest wireless, cameras, and corporate workstations on shared physical port infrastructure.

Can the TZ300P manage SonicWave access points without a separate controller?
Yes. The TZ300P includes a built-in wireless controller that manages SonicWave 802.11ac access points directly. This eliminates the need for a dedicated wireless controller appliance in small deployments.

What is the difference between the TZ300P and the Gen 7 TZ270?
The TZ300P is a Gen 6 appliance with PoE/PoE+ capability and 750 Mbps firewall throughput. The TZ270 is Gen 7 with SonicOS 7.0, 2 Gbps firewall throughput, 750,000 SPI connections, and a more modern management platform, but does not include PoE. Choose the TZ300P when integrated PoE power delivery is required; choose the TZ270 for higher throughput and access to Gen 7 features.