SonicWall TZ370 – Gen 7 NGFW Appliance, 8-Port, No Subscription

Product Overview

The SonicWall TZ370 (02-SSC-2825) is an 8-port Gen 7 next-generation firewall appliance sold without a bundled security subscription. It runs SonicOS 7.0, delivers 3 Gbps firewall inspection throughput, and supports integrated Secure SD-WAN, Zero-Touch Deployment, and TLS 1.3 inspection out of the box. This appliance-only SKU is the correct choice for organizations performing a hardware refresh under existing TotalSecure licensing, for MSPs managing subscription terms independently, or for any deployment where the subscription is procured through a separate channel. It is rack-mountable and supports stateful HA when paired with a second TZ370 unit.

Product Description

The TZ370 sits in the midpoint of the Gen 7 TZ series, positioned between the TZ270 and TZ470. It replaces the Gen 6 TZ400 in SonicWall's line and offers significant throughput improvements: firewall inspection throughput triples to 3 Gbps, and maximum SPI connections increase to 900,000 — a 6× improvement over the Gen 6 TZ400's 150,000 connection ceiling. Application inspection throughput is 1.5 Gbps, IPS throughput is 1.5 Gbps, and VPN throughput is 1.38 Gbps.

SonicOS 7.0 introduces a redesigned policy engine with a unified security policy model, simplifying rule management for multi-site deployments. Integrated SD-WAN functionality enables dynamic path selection across multiple WAN links without requiring a separate SD-WAN license on this platform. Zero-Touch Deployment allows IT teams to pre-stage and remotely provision appliances without on-site technical staff, which reduces deployment costs for distributed environments.

The appliance supports TLS 1.3 deep packet inspection (DPI-SSL), enabling inspection of encrypted traffic flows that older Gen 6 platforms cannot decrypt. This is increasingly important as a higher proportion of both legitimate and malicious traffic moves to TLS 1.3. The TZ370 handles DPI-SSL at wire speed for typical SMB traffic volumes without requiring a dedicated DPI offload appliance.

This is an appliance-only listing (02-SSC-2825) and ships without any security subscription. Buyers who want hardware and a bundled first year of services should consider SKU 02-SSC-6819, which includes a 1-Year TotalSecure Advanced subscription. Buyers who need the hardware alone — because existing licenses will be re-homed, or because subscription management is handled separately — should order this unit.

The TZ370 ships in a desktop form factor and is rack-mountable using the SonicWall TZ Series Rack Mount Kit (02-SSC-3113), available separately on Creation Networks. Storage is built-in with expansion support up to 256 GB for local logging and capture ATP forensics. The unit provides 8 × 10/100/1000Base-T RJ-45 ports with full encryption support including AES-256, 3DES, and SHA-1.

Key Features

• 3 Gbps Firewall Throughput — Handles high-bandwidth SMB and branch-office traffic without throughput bottlenecks at the perimeter.
• Appliance-Only SKU — Correct for hardware refresh under existing TotalSecure licensing or MSP-managed subscription environments.
• SonicOS 7.0 — Unified policy engine, simplified rule management, and native SD-WAN without additional licensing.
• Integrated Secure SD-WAN — Dynamic WAN path selection across multiple uplinks; reduces MPLS dependency for branch offices.
• Zero-Touch Deployment — Remote provisioning from the SonicWall Cloud Management console; eliminates on-site technical visits for initial setup.
• TLS 1.3 DPI-SSL Inspection — Decrypts and inspects encrypted traffic including TLS 1.3 flows that bypass older inspection engines.
• 900,000 SPI Connections — Supports high-connection-count environments such as IP surveillance, VDI, and dense remote-access deployments.
• Stateful HA Support — Pairs with a second TZ370 for active/passive high availability with sub-second failover.
• 256 GB Expandable Storage — Supports local log retention and Capture ATP file-based threat analysis without an external storage appliance.
• Rack-Mountable — Compatible with the 02-SSC-3113 Rack Mount Kit for data center and equipment room installations.

Typical Applications

• Hardware refresh for existing Gen 6 TZ300/TZ400 deployments where subscription licenses are being re-used or re-homed
• MSP-managed branch-office firewall deployments where subscriptions are managed centrally under a separate agreement
• SD-WAN branch office consolidation replacing dedicated routers and separate firewall appliances
• Remote-access VPN concentrator for distributed SMB workforce with site-to-site tunnel requirements
• Data center edge or DMZ firewall for small-to-midsize server environments requiring DPI-SSL at the perimeter

Technical Specifications

Frequently Asked Questions

What is the difference between 02-SSC-2825 and 02-SSC-6819?
02-SSC-2825 is the appliance only with no subscription. 02-SSC-6819 includes the same hardware plus a 1-Year TotalSecure Advanced subscription bundled at the time of purchase. If you already hold an active subscription from a previous appliance or are purchasing licenses separately, 02-SSC-2825 is the correct SKU.

Can I add a subscription to the appliance-only unit after purchase?
Yes. SonicWall security subscriptions can be purchased and applied to the TZ370 appliance through a SonicWall reseller at any time after the hardware is activated.

Does the TZ370 support high availability?
Yes. The TZ370 supports stateful active/passive HA when paired with a second TZ370 unit. Session state, VPN tunnels, ARP tables, and NAT mappings are synchronized continuously between nodes.

Is a rack mount kit included?
No. The TZ370 ships in a desktop form factor. The compatible rack mount kit is the SonicWall 02-SSC-3113, available separately on Creation Networks.

Does the TZ370 support SD-WAN without an additional license?
Yes. SonicOS 7.0 includes integrated Secure SD-WAN as a native feature. No separate SD-WAN license is required on the TZ370.

What Gen 6 models does the TZ370 replace?
The TZ370 is the Gen 7 successor to the Gen 6 TZ400. Organizations migrating from a TZ400 will see significant throughput and connection-capacity improvements, plus access to SonicOS 7.0 features including Zero-Touch Deployment and TLS 1.3 DPI-SSL.