SonicWall TZ670 Network Security/Firewall Appliance

The SonicWall TZ670 Network Security/Firewall Appliance is a purpose-built NGFW designed for mid-sized organizations and distributed enterprises that demand robust, enterprise-grade protection without sacrificing office-friendly form and performance. Engineered to deliver uncompromising security with a compact desktop footprint, the TZ670 blends advanced threat prevention with high-speed networking to keep evolving networks safe from modern threats. This appliance is built to scale with your business, providing layered defenses, seamless remote access, and centralized management that simplifies security operations across multiple sites. Whether you’re protecting a regional office, a branch, or a satellite location, the TZ670 is engineered to deliver consistent, content-aware protection while maintaining excellent user experience for daily tasks and critical business applications.

• Comprehensive NGFW security: The TZ670 unites a powerful set of security technologies—Deep Packet Inspection, Intrusion Prevention System (IPS), advanced application control, URL filtering, and integrated malware protection—into a single, easy-to-manage platform. These features work together to stop known and unknown threats, reduce attack surface, and enforce granular policies tailored to users, devices, and applications. Regular security updates ensure you stay ahead of emerging threats without manual intervention.
• High-performance 10 Gigabit networking: Built for fast, scalable connectivity, the TZ670 features 10 Gigabit Ethernet interfaces to support high-throughput interconnects, fast WAN links, and low-latency internal traffic. This enables large file transfers, smooth video conferencing, and robust site-to-site VPNs, even in busy networks. The 10G capability positions mid-sized organizations for growth as bandwidth demands increase, while preserving secure separation between trusted and untrusted networks.
• Flexible deployment for distributed enterprises: The desktop form factor blends into tight IT spaces while delivering enterprise-grade security. It’s an ideal solution for branch offices, regional hubs, or distributed campuses where a compact, reliable security gateway is essential. The TZ670 supports scalable policy enforcement across multiple locations and can be deployed in a hybrid environment, protecting both on-premises resources and remote users with consistent security posture.
• Effortless management and centralized visibility: Manage security policies, threat intelligence, VPN access, and device configurations from a single pane of glass. With SonicWall Capture Security Center integration, you gain centralized visibility, reporting, and policy synchronization across SonicWall devices. This consolidation reduces administrative overhead, accelerates incident response, and helps ensure uniform security controls across all sites and endpoints.
• Reliable performance with embedded reliability and support: The TZ670 combines hardware robustness with a rich feature set and reliable support options. The appliance is designed for continuous operation, with firmware updates that deliver new protections and performance improvements. Enterprise-grade warranty options and access to SonicWall support resources help keep your security posture strong, minimizing downtime and optimizing long-term total cost of ownership.

Technical Details of SonicWall TZ670 Network Security/Firewall Appliance

• Form factor: Desktop/network security appliance designed for mid-sized offices and distributed networks, offering a compact footprint without compromising security capabilities.
• Security architecture: Next-generation firewall (NGFW) with Deep Packet Inspection, Intrusion Prevention System (IPS), application control, URL filtering, and integrated malware protection for layered defense against evolving threats.
• Networking capabilities: 10 Gigabit Ethernet interfaces to support high-bandwidth WAN/LAN interconnects and scalable internal traffic flow, enabling rapid data movement and efficient site-to-site connectivity.
• VPN and remote access: Supports IPSec VPN and SSL VPN for secure remote access and site-to-site connectivity, enabling flexible deployment models for remote workers and distributed teams.
• Management and visibility: Centralized management through SonicWall Capture Security Center, with policy templates and centralized reporting to streamline administration across multiple devices and locations.
• Licensing and updates: Comes with security services and perpetual update capability; access to ongoing threat intelligence updates and firmware improvements to maintain a strong security posture.
• Deployment suitability: Optimized for mid-sized organizations, regional offices, and distributed enterprises seeking a scalable, secure gateway with a compact footprint.

How to Install SonicWall TZ670

Installing the TZ670 is designed to be straightforward for IT professionals and security teams. Begin by unboxing and verifying the device contents, then place the appliance in a secure, ventilated area with easy access to power and network cabling. Connect the TZ670 to your network by attaching the appropriate WAN and LAN cables to the 10 Gigabit Ethernet interfaces and any supporting ports required for your topology. Power on the device and access the admin interface through your browser, using the device’s default management IP address. Follow the Setup Wizard to activate licenses, configure WAN interfaces, set up LAN networks, and define initial security policies. Apply firmware updates to ensure you have the latest threat definitions and protective features. Once basic connectivity and policies are in place, import or create security rules, enable VPN services for remote users, and verify that traffic flows through the TZ670 for inspection. Finally, integrate the appliance with SonicWall Capture Security Center for centralized management, ongoing monitoring, and reporting across your environment. Regularly review threat intelligence updates, license terms, and policy templates to keep the security posture aligned with your evolving needs.

Tips for a smooth installation include validating the physical cabling before powering the unit, planning a simple initial policy set to cover critical devices and users, and scheduling a maintenance window for updating firmware and policy synchronization. If you are migrating from an older firewall, consider enabling a staged rollout where you gradually shift traffic and policy enforcement to the TZ670 to minimize disruption. After successful deployment, run a security baseline assessment and configure alerts so your IT team can promptly detect and respond to anomalous activity.

Frequently asked questions

• What is the SonicWall TZ670 best suited for? It is designed for mid-sized organizations and distributed enterprises that require robust, enterprise-grade security in a compact form factor. It supports high-speed networking, remote access, and centralized management, making it ideal for branch offices, regional hubs, and satellite locations that need consistent security policies across sites.
• Does the TZ670 support VPN and remote workers? Yes. The TZ670 includes IPSec and SSL VPN capabilities, enabling secure site-to-site connectivity and remote access for employees working from home or on the go, while preserving strong encryption and policy enforcement.
• What kind of management is available for this appliance? Management is centralized through SonicWall Capture Security Center, providing visibility, reporting, and policy synchronization across multiple SonicWall devices. This helps teams enforce uniform security controls and streamline administration.
• What security features are included? The TZ670 combines a robust set of controls: Deep Packet Inspection, IPS, application control, URL filtering, and integrated malware protection. These features work together with automatic updates to defend against evolving threats without manual reconfiguration.
• How scalable is the TZ670 for growing networks? The 10 Gigabit Ethernet interfaces and desktop form factor support scalable connectivity for growing mid-sized networks and distributed sites. It can be part of a broader SonicWall security architecture that expands with additional TZ series appliances or other SonicWall gateways as needs evolve.
• What about installation and upgrade planning? Plan firmware updates and security policy rollout to minimize disruption. Use the Setup Wizard for initial configuration and integrate with Capture Security Center for streamlined ongoing management. Regularly review threat updates and license terms to maintain maximum protection.