SonicWall TZ470 Network Security/Firewall Appliance - 8 Port - 02-SSC-2829

Product Overview

The SonicWall TZ470 Gen 7 next-generation firewall is the highest-performing model in SonicWall's Gen 7 desktop TZ series, delivering 3.5 Gbps firewall inspection throughput and 2 Gbps application inspection throughput for SMB and distributed enterprise deployments where performance headroom matters. As an appliance-only SKU (02-SSC-2829), the TZ470 firewall ships without security service subscriptions, giving IT teams and procurement teams full flexibility to select and add individual services — or a TotalSecure bundle — aligned to their licensing cycle. The TZ470 SD-WAN VPN firewall supports Zero-Touch Deployment for remote site provisioning and stateful high availability (HA) when paired with a second TZ470 unit. Eight 10/100/1000Base-T ports provide WAN, LAN, and DMZ segmentation in a compact desktop chassis that is rack-mountable via the optional SonicWall rack mount kit.

Product Description

The SonicWall TZ470 (02-SSC-2829) runs SonicOS 7.0, the Gen 7 redesigned operating system that introduces a REST API-enabled management plane, modernized dashboards, and enhanced policy architecture compared to prior SonicOS releases. With 3.5 Gbps firewall inspection throughput, 2 Gbps application inspection, and 2 Gbps IPS throughput, the TZ470 delivers measurably higher capacity than the TZ370 — making it the preferred choice where higher concurrent connection counts or aggregate bandwidth justify the step up.

Maximum SPI connections reach 1,000,000, compared to 900,000 on the TZ370, supporting environments with high connection-table demand such as VoIP-heavy offices, video surveillance networks, or hosted application environments. Threat Prevention throughput of 1.5 Gbps keeps all security engines active without creating a bottleneck on gig-class WAN links, and VPN throughput of 1.38 Gbps accommodates dense site-to-site mesh deployments or large-scale remote access (SSL/IPsec).

DPI-SSL (full TLS/SSL decryption and inspection) is supported, allowing the TZ470 to inspect encrypted traffic that would otherwise bypass IPS, App Control, and anti-malware engines — a critical capability given that the majority of internet traffic is now TLS-encrypted. Eight GbE interfaces allow flexible multi-zone network architectures, and built-in storage is expandable up to 256 GB for local logs, packet captures, and reporting archives.

The TZ470 supports stateful high availability with a second TZ470 unit in active/standby or active/active mode, providing sub-second failover for environments where firewall uptime is operationally critical. Zero-Touch Deployment via SonicWall NSM SaaS enables hands-free provisioning at remote sites. For rack installation in data closets or equipment rooms, the optional SonicWall TAA-compliant rack mount kit (02-SSC-3113) is available from Creation Networks.

Key Features

• 3.5 Gbps Firewall Throughput — Highest throughput in the Gen 7 desktop TZ lineup, suitable for high-bandwidth SMB and branch deployments.
• 2 Gbps Application Inspection & IPS Throughput — Full deep packet inspection at line rate without degrading application performance.
• DPI-SSL Support — Full TLS/SSL traffic decryption and inspection to close the encrypted-traffic inspection gap.
• 1,000,000 SPI Connections — Sustains high connection-table loads from VoIP, video, or hosted application environments.
• Stateful High Availability — Supports active/standby or active/active HA with a second TZ470 for sub-second firewall failover.
• Zero-Touch Deployment — Cloud-staged configuration delivery via NSM SaaS eliminates the need for on-site IT staff at remote locations.
• SD-WAN Built-In — Policy-based WAN path selection, failover, and bandwidth aggregation across dual-ISP or LTE uplinks.
• SonicOS 7.0 — REST API support, modern management interface, and improved policy control plane for enterprise-style operations at SMB scale.
• Appliance-Only Flexibility — No pre-bundled subscription; add individual security services or a TotalSecure bundle to fit existing licensing cycles.
• Rack-Mountable Form Factor — Desktop chassis compatible with optional TAA-compliant rack mount kit for 1U structured cabling environments.

Typical Applications

• SMB main offices requiring the highest-performing Gen 7 desktop firewall without moving to a rack-unit appliance
• Distributed enterprise branches where throughput headroom and HA failover are operationally required
• Environments with high TLS/SSL inspection requirements (financial services, legal, healthcare)
• VoIP and unified communications networks generating high session-table demand
• Multi-site networks managed centrally via SonicWall NSM SaaS with Zero-Touch provisioning
• Organizations standardizing on an appliance-only procurement model and purchasing security services through separate contracts

Technical Specifications

Frequently Asked Questions

What is the difference between the TZ470 and TZ370?
The TZ470 provides higher throughput across every category: 3.5 Gbps firewall inspection (vs. 3 Gbps), 2 Gbps application inspection and IPS (vs. 1.5 Gbps), 1.5 Gbps threat prevention (vs. 1 Gbps), and 1,000,000 maximum SPI connections (vs. 900,000). The TZ470 also adds DPI-SSL and stateful HA support. The TZ370 is available as a bundle with a 1-Year TotalSecure Advanced subscription included (02-SSC-6819).

Does the TZ470 include any security subscriptions?
No. The 02-SSC-2829 is an appliance-only SKU. Security services such as Gateway Anti-Virus, IPS, Application Control, Content Filtering, and Capture ATP must be purchased separately. This allows organizations to align subscription start dates with their fiscal calendar or existing licensing agreements.

Can the TZ470 be rack-mounted?
Yes. The TZ470 desktop chassis is compatible with the optional SonicWall TAA-compliant rack mount kit (02-SSC-3113), available from Creation Networks, enabling 1U installation in standard equipment racks.

What is DPI-SSL and why does it matter?
DPI-SSL (Deep Packet Inspection of SSL/TLS traffic) decrypts and inspects HTTPS and other TLS-encrypted sessions inline before re-encrypting and forwarding the traffic. Without DPI-SSL, encrypted traffic bypasses IPS, App Control, and anti-malware inspection entirely. Enabling DPI-SSL closes this visibility gap and is particularly important in compliance-sensitive environments.

Does the TZ470 support high availability?
Yes. The TZ470 supports stateful HA in both active/standby and active/active modes when paired with a second TZ470 unit. Session state is synchronized between appliances, enabling sub-second failover with minimal disruption to active network sessions.

How does Zero-Touch Deployment work on the TZ470?
When a TZ470 boots for the first time without a local configuration, it contacts SonicWall's cloud provisioning service. Pre-staged policies from NSM SaaS are automatically downloaded and applied, allowing the device to become operational without requiring an on-site technician. This is particularly useful for distributed organizations deploying to branch offices at scale.