We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in

SonicWall

SonicWall TZ680 03-SSC-6998 firewall appliance

SKU CH-WKG1-C947J MPN 03-SSC-6998

Desktop firewall appliance with 8 Gigabit Ethernet ports, two multi-rate SFP ports, 5 Gbps inspection throughput and a one-year Advanced Protection Security Suite

  • TypeWired
  • Form FactorDesktop
  • StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHC
  • ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
  • SecurityDeep Packet inspection services: Gateway Anti-Virus, Anti-Sp
  • System MemoryOptional: Up to 512 Gb

Hardware TZ680

Option Total Secure (Appliance + 1Y APSS)

  • Industry-validated security effectiveness protects mid-sized organisations
  • 00 Gbps firewall inspection throughput enables high-speed traffic analysis
  • 8 x 1GbE and 2 x 10G/5G/2.5G/1G SFP ports provide flexible connectivity
  • Zero-Touch Deployment and NSM simplify branch rollout and management
  • Advanced Protection Security Suite bundles threat services with cloud management

Mid-sized organisation security

The SonicWall TZ680 is a desktop firewall appliance built for mid-sized organisations and distributed enterprises with SD-Branch locations. It runs SonicOS 8 and includes a one-year Advanced Protection Security Suite covering gateway anti-virus, anti-spyware, intrusion prevention and TLS decryption. Eight 1 GbE copper ports and two multi-rate SFP ports provide flexible wired connectivity. Centralised management is handled through Network Security Manager.

Sustained throughput profile

Under continuous load the appliance delivers 5.00 Gbps firewall inspection throughput and 3 Gbps application inspection throughput. IPS throughput holds at 3 Gbps while threat prevention and anti-malware inspection run at 2.5 Gbps. VPN throughput is rated at 2.5 Gbps. The platform supports up to 1,600,000 concurrent connections and 26,000 new connections per second. Maximum power draw is 16.99 W from a 100-240 VAC supply.

Upgrade context and limits

This unit replaces older desktop firewalls that lack multi-gigabit SFP interfaces and the Gen 8 persistent-performance architecture. The jump is worthwhile when sites need 10G/5G/2.5G/1G uplink flexibility and integrated SD-WAN with zero-touch deployment. It does not suit buyers who require redundant power supplies, higher port density or rackmount form factors. Optional storage expansion up to 512 Gb is available separately.

Highlights

  • Industry-validated security effectiveness protects mid-sized organisations
  • 00 Gbps firewall inspection throughput enables high-speed traffic analysis
  • 8 x 1GbE and 2 x 10G/5G/2.5G/1G SFP ports provide flexible connectivity
  • Zero-Touch Deployment and NSM simplify branch rollout and management
  • Advanced Protection Security Suite bundles threat services with cloud management

Specifications

BrandSONICWALL
SeriesTZ680
ModelTZ680 - 1Y APSS
Part Number03-SSC-6998
TypeWired
Form FactorDesktop
StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
ProtocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
SecurityDeep Packet inspection services: Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, TLS Decryption
Content Filtering Service (CFS): Reputation-based URL filtering, HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering based on file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists
Comprehensive Anti-Spam Service
Application Visualization
Application Control
Capture Advanced Threat Protection
Advanced DNS Filtering
System MemoryOptional: Up to 512 Gb
Ports8 x 1GbE RJ45, 2 x 10G/5G/2.5G/1G SFP
VPNFirewall/VPN Performance
Firewall inspection throughput: 5 Gbps
Threat prevention throughput: 2.5 Gbps
Application inspection throughput: 3 Gbps
IPS throughput: 3 Gbps
Anti-malware inspection throughput: 2.5 Gbps
TLS/SSL inspection and decryption throughput: 800 Gbps
IPSEC VPN throughput: 2.5 Gbps
Connections per second: 26,000
Maximum connections (SPI): 1,600,000
Maximum connections (DPI): 600,000
Maximum connections (TLS): 75,000
VPN and ZTNA
Site-to-site VPN tunnels: 250
IPSec VPN clients: 10(500)
SSL VPN licenses (maximum): 2(250)
Encryption/authentication: AES (128, 192, 256-bit
CertificationsIPv6
ComplianceFCC Class B, ICES Class B, CE (EMC, LVD, RoHS), UL, cUL, Mexico DGN Notice by UL, ANATEL, WEEE, REACH, SCIP, RCM, MIC Terminal, VCCI Class B, KCC/MSIP, BSMI, MTCTE/TEC, CB
Power Input100-240 VAC, 50-60Hz
Max Power Consumption16.99 W
FeaturesGeneral
Operating system: SonicOS 8
Interfaces: 8 * 1GbE Cu, 2*10G/5G/2.5G/1G SFP, 1 console (Micro-USB), 1 USB (type-C)
Storage /(expansion): (Optional: Up to 512 Gb)
Centralized Management: Network Security Manager (NSM) 3.0 and above, CLI, SSH, Web UI, REST APIs
Logical VLAN and tunnel interfaces (maximum): 256
SAML Single Sign-On (SSO) Users: 2500
Access points supported (maximum): 32
Networking
IP address assignment: Static (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT modes: 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transpa
Shipping weight1.81 kg
Package size356 × 203 × 51 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

How much heat does the 16.99 W maximum power draw produce when the TZ680 runs continuously?

The appliance draws up to 16.99 W from a 100-240 VAC supply, so sustained operation adds roughly that many watts of heat to the rack or desk space.

Which SFP transceivers must I already own to use the two 10G/5G/2.5G/1G SFP ports?

The ports accept standard SFP+ modules at 10 Gbps, 5 Gbps, 2.5 Gbps or 1 Gbps; you supply the transceivers and matching fibre or copper cables.

Can the 8 x 1GbE copper ports link directly to legacy 100 Mb switches without extra configuration?

Yes, each RJ45 port auto-negotiates down to 100 Mbps full-duplex, so older Fast Ethernet gear connects immediately.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.