We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact white desktop firewall appliance with front LED panel and multiple RJ45 ports

SonicWall

SonicWall TZ280 03-SSC-1824 firewall appliance

SKU CH-YNPG-P03ZP MPN 03-SSC-1824

Desktop firewall appliance with 8 Gigabit Ethernet ports, 2 SFP ports and 1 Gbps threat-prevention throughput

  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • SecurityDeep Packet inspection services: Gateway Anti-Virus, Anti-Sp
  • Ports8 x 1GbE RJ45, 2 x SFP
  • Simultaneous Sessions1,000,000

Hardware TZ 280

Option Hardware Only

  • Enterprise-grade threat prevention at 1 Gbps throughput
  • High-capacity 1,000,000 simultaneous sessions for busy networks
  • Secure SD-WAN capability simplifies branch connectivity
  • Zero-Touch Deployment enables rapid, automated setup
  • Compact 3.5 x 13 x 19 cm desktop form factor

Desktop firewall for small sites

The SonicWall TZ280 is a desktop security appliance built for home offices, small offices and lean branches. It provides eight 1 GbE copper ports and two 1 Gb SFP uplinks alongside a Micro-USB console and a USB-C port. Gen 8 architecture delivers higher throughput and AI-powered automation.

Suits teams needing integrated SD-WAN

Organisations that want Secure SD-WAN, Zero-Touch Deployment and centralised management through Network Security Manager will fit this model. Buyers who require multi-gigabit WAN interfaces, 10 GbE SFP+ slots or redundant power supplies should look at larger appliances.

Handles up to one million sessions

Firewall inspection runs at 2.5 Gbps while threat prevention, application inspection and IPS each sustain 1.5 Gbps or 1 Gbps. VPN throughput reaches 1.2 Gbps and the unit supports 1,000 users with 12,000 new connections per second. An expansion slot accepts up to 512 GB of storage for logging.

Highlights

  • Enterprise-grade threat prevention at 1 Gbps throughput
  • High-capacity 1,000,000 simultaneous sessions for busy networks
  • Secure SD-WAN capability simplifies branch connectivity
  • Zero-Touch Deployment enables rapid, automated setup
  • Compact 3.5 x 13 x 19 cm desktop form factor

Specifications

BrandSONICWALL
SeriesTZ280
ModelTZ280
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
SecurityDeep Packet inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering Service (CFS): Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Advanced DNS Filtering
Ports8 x 1GbE RJ45, 2 x SFP
Simultaneous Sessions1,000,000
Maximum Users1000
VPNFirewall/VPN Performance
Firewall inspection throughput: 2.5 Gbps
Threat prevention throughput: 1 Gbps
Application inspection throughput: 1.5Gbps
IPS throughput: 1.5 Gbps
Anti-malware inspection throughput: 1 Gbps
TLS/SSL inspection and decryption throughput: 430 Mbps
IPSEC VPN throughput: 1.2 Gbps
Connections per second: 12,000
Maximum connections (SPI): 1,000,000
Maximum connections (DPI): 200,000
Maximum connections (TLS): 35,000
VPN and ZTNA
Site-to-site VPN tunnels: 200
IPSec VPN clients (maximum): 5 (200)
SSL VPN licenses (maximum): 1 (50)
Encryption/authentication: AES (128, 1
CertificationsIPv6
ComplianceMajor regulatory compliance
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB
Dimensions3.5x13x19 (cm)
Weight0.82 Kg
Shipping weight1.81 kg
Package size363 × 218 × 69 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What WAN connection do I need to use the 2.5 Gbps firewall inspection throughput on the TZ280?

You need an ISP link that can deliver at least 2.5 Gbps and a modem or ONT with a 1GbE or SFP port that connects to one of the appliance's eight RJ45 or two SFP interfaces.

Can I keep my existing 100 Mbps switches and still use the 1.5 Gbps IPS throughput on the TZ280?

Yes, the 1GbE RJ45 ports auto-negotiate down to 100 Mbps, but IPS throughput will be limited to the speed of the connected switch ports.

How do I verify the TZ280 is inspecting traffic at the rated 1 Gbps threat prevention throughput after setup?

Enable threat prevention policies, generate sustained traffic through the appliance, and check the real-time throughput graphs in Network Security Manager or the local dashboard.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.