SonicWall TZ670 firewall review

The SonicWall TZ670 is a pretty new release, and runs SonicWall’s new operating system, SonicOS 7.0. This means they can handle all the latest and greatest security and networking features out there. And SonicWall is a vendor known for feature-rich firewalls.

The TZ670 is zero-touch enabled. That makes deployment a snap for anyone. In fact, the SonicWall SonicExpress app allows admins to easily onboard TZ firewalls within minutes. It’s an easy 1-2-3 process: simply register, connect and manage.

It also comes with SD-Branch capabilities to make securely connecting your offices easy. As a matter of fact, the TZ570 and TZ670 are unique among desktop firewalls as they include multi-gigabit (5/10G) ports.


The TZ670 has Reassembly Free Deep Packet Inspection.This offers security analysis of all traffic in real-time. It also offers anti-malware, web content filter, anti-spyware, and intrusion prevention. Plus, you get anti-spam and protection against incoming email-based threats if you’re configured for it.

And, if you work remotely, you’re covered too. First, remote users can set up a secure VPN tunnel back into the home network. The TZ670 is 5G and LTE ready.

There’s also TLS 1.3 support to inspect encrypted traffic, 24×7 support, and Secure SD-WAN.

SonicWall also offers Capture Advanced Threat Protection as an add-on for all TZ or NSa firewalls. It’s a powerful cloud-based sandbox with malware-analysis that can detect evasive threats. Capture ATP blocks suspicious files at the gateway until a verdict is rendered.

The TZ670 combines multi-layer sandboxing, Real-Time Deep Memory Inspection, and full system emulation. In addition, it has virtualization techniques to detect more threats than any single-engine sandbox out there currently. And the low false-positive rate means it won’t block the legitimate business files you need.

Once it’s configured, the firewall keeps itself updated with the latest threat signatures. This means that small to medium-sized businesses can have a single device protecting their networks, without having to worry about updating software on every client. If the wireless 802.11ac radio is activated, then that protection can also extend to anyone using the wireless network. SonicWall offers great security for those who don’t always sit at an office desk.

And more features

One of the best things about SonicWall is that you can add modules, or features, as needed. It’s an a la carte approach that’s great for small to medium-sized businesses. In other words, businesses that may not need to pay for full-on enterprise level security. Nevertheless, it’s quite easy to add the modules in when you decide to.

SonicWall’s cloud-management and sandboxing is a cool feature worth mentioning. When any of the myriad SonicWall devices linked together in the cloud discovers an unknown malware, guess what it does? Shares it with every other SonicWall. So that unknown malware becomes famous to every SonicWall appliance everywhere that’s using the SonicWall Capture Advanced Threat Protection module.

And a big benefit of cloud-based sandboxing is that it’s not limited to one engine. SonicWall uses several of them, so it’s nearly impossible to create malware that could trick all of them.

With its modular feature set, the SonicWall TZ670 is hugely scalable. The Basic protection suite includes advanced threat protection and gateway antivirus. It also has spyware protection, application firewall service, advanced content filtering service, anti-spam, and 24/7 support with firmware.But to take full advantage of its security, connectivity, & management features, choose a services bundle. TotalSecure Advanced Edition covers all the bases. The somewhat less comprehensive Essential and Threat Editions is so available. SonicWall security bundles come in one, three, and five year subscription options.

We’d love to tell you more about the SonicWall TZ670. So, why not give us a call at 877-449-0458, or reach out at [email protected]? Thanks for reading!

SonicWall TZ670 highlights

Firewall Inspection Throughput: 5 Gbps
Application Inspection Throughput: 3 Gbps
IPSec VPN Throughput: 2.1 Gbps
IPS Throughput: 3 Gbps
Threat Prevention Throughput: 2.5 Gbps