We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small white desktop firewall appliance with front RJ45 ports

SonicWall

SonicWall TZ280 firewall appliance 03-SSC-6919 Total Secure 1Y APSS

SKU CH-0W4Q-E1XC0 MPN 03-SSC-6919

Desktop firewall with 8×1 GbE and 2 SFP ports, 2.5 Gbps inspection throughput, 1 Gbps threat prevention, 1 million sessions, and a 1-year Advanced Protection Security Suite licence

  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • SecurityDeep Packet inspection services: Gateway Anti-Virus, Anti-Sp
  • Ports8 x 1GbE RJ45, 2 x SFP
  • Simultaneous Sessions1,000,000

Hardware TZ 280

Option Total Secure (Appliance + 1Y APSS)

  • Enterprise-grade threat prevention at 1 Gbps throughput backed by Deep Packet Inspection services
  • Secure SD-WAN connectivity with Zero-Touch Deployment for rapid branch rollout
  • Centralised cloud management via Network Security Manager simplifies multi-site administration
  • 8 × 1 GbE copper plus 2 SFP ports deliver flexible WAN and LAN connectivity
  • Compact 3.5 × 13 × 19 cm desktop form factor fits space-constrained offices

Designed for small-office security

The SonicWall TZ280 is a desktop firewall appliance built for home offices, small offices and lean branches. It delivers industry-validated threat prevention with a one-year Advanced Protection Security Suite licence included. The unit provides centralized, cloud-based management through Network Security Manager and supports Zero-Touch Deployment for rapid rollout.

Eight copper ports and two SFP uplinks

Network connectivity is limited to eight 1GbE RJ45 interfaces and two 1G SFP slots, so aggregate throughput cannot exceed the physical line rate of those ports. Firewall inspection throughput reaches 2.5 Gbps, while threat prevention, anti-malware and TLS decryption are each capped at 1 Gbps. Application and IPS inspection peak at 1.5 Gbps, and VPN throughput tops out at 1.2 Gbps.

Replaces basic routers lacking integrated security

The appliance upgrades environments that rely on simple routers or older firewalls without deep-packet inspection, sandboxing or reputation-based content filtering. The jump is worthwhile when simultaneous sessions must scale toward 1,000,000 and up to 1000 users need secure SD-WAN, DNS security and Wi-Fi 6 access-point management. It does not suit buyers who need multi-gigabit copper interfaces or higher VPN throughput.

Highlights

  • Enterprise-grade threat prevention at 1 Gbps throughput backed by Deep Packet Inspection services
  • Secure SD-WAN connectivity with Zero-Touch Deployment for rapid branch rollout
  • Centralised cloud management via Network Security Manager simplifies multi-site administration
  • 8 × 1 GbE copper plus 2 SFP ports deliver flexible WAN and LAN connectivity
  • Compact 3.5 × 13 × 19 cm desktop form factor fits space-constrained offices

Specifications

BrandSONICWALL
SeriesTZ280
ModelTZ280 - Total Secure (1Y APSS)
Part Number03-SSC-6919
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
SecurityDeep Packet inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering Service (CFS): Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Advanced DNS Filtering
Ports8 x 1GbE RJ45, 2 x SFP
Simultaneous Sessions1,000,000
Maximum Users1000
VPNFirewall/VPN Performance
Firewall inspection throughput: 2.5 Gbps
Threat prevention throughput: 1 Gbps
Application inspection throughput: 1.5Gbps
IPS throughput: 1.5 Gbps
Anti-malware inspection throughput: 1 Gbps
TLS/SSL inspection and decryption throughput: 430 Mbps
IPSEC VPN throughput: 1.2 Gbps
Connections per second: 12,000
Maximum connections (SPI): 1,000,000
Maximum connections (DPI): 200,000
Maximum connections (TLS): 35,000
VPN and ZTNA
Site-to-site VPN tunnels: 200
IPSec VPN clients (maximum): 5 (200)
SSL VPN licenses (maximum): 1 (50)
Encryption/authentication: AES (128, 1
CertificationsIPv6
ComplianceMajor regulatory compliance
FCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB
Dimensions3.5x13x19 (cm)
Weight0.82 Kg
Shipping weight1.81 kg
Package size363 × 218 × 69 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What is the difference between the Total Secure 1Y APSS bundle and a plain TZ280 appliance?

The Total Secure bundle adds a one-year Advanced Protection Security Suite licence that includes gateway anti-virus, anti-spyware, intrusion prevention, TLS decryption and reputation-based content filtering, while the plain appliance ships without those subscription services.

How much real-world threat-prevention throughput will I see on the 1 Gbps rated port?

The appliance is rated for 1 Gbps threat-prevention throughput, so with all security engines enabled you can expect up to 1 Gbps of inspected traffic on the 1 GbE copper or SFP interfaces.

Which management interface does the USB Type-C port provide?

The USB Type-C port is a local console connection for initial setup and CLI access; day-to-day management is handled through the web UI or the cloud-based Network Security Manager.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.