SonicWall TZ 280 Gen 8 Next-Generation Firewall - Desktop Security Appliance, 8x 1GbE, 2.5 Gbps Firewall Throughput

Small offices and branch locations need enterprise-grade protection without complexity. The SonicWall TZ 280 (Gen 8) delivers next-generation firewall security in a compact desktop form factor, purpose-built for distributed enterprises, retail stores, and remote sites. With 8 Gigabit Ethernet ports, it connects directly to your existing network infrastructure, while multi-core processing ensures smooth performance even under heavy traffic. The TZ 280 inspects encrypted traffic, blocks ransomware and zero-day threats, and provides secure VPN access for remote workers—all managed through an intuitive local interface or cloud-based SonicWall NSM.

Key specifications

• Firewall throughput: 2.5 Gbps
• Threat prevention throughput: 1.2 Gbps
• IPS throughput: 1.2 Gbps
• VPN throughput: 1.1 Gbps
• 8x 1GbE RJ45 ports
• 1x USB 3.0 port
• 1x RJ45 console port
• 200,000 max concurrent connections
• 10,000 new connections per second
• 20 site-to-site VPN tunnels
• 10 default / 20 max SSL VPN users
• Integrated security services: Gateway Anti-Virus, Anti-Spyware, IPS, Application Control, Content Filtering, Capture ATP, Botnet Filter
• External power adapter

Why choose it

The TZ 280 combines high-performance threat prevention with ease of management. Its multi-core architecture and dedicated security processors handle deep packet inspection without slowing down your network. The included Capture ATP sandboxing service analyzes suspicious files in a cloud-based environment, stopping zero-day attacks before they reach your endpoints. With SonicOS, you get unified policy management, application intelligence, and real-time visibility into network activity. The compact desktop chassis fits discreetly on a shelf or desk, and the fanless design ensures silent operation—ideal for noise-sensitive environments.

Ideal use cases

• Small to medium business primary firewall
• Branch office and retail store security
• Remote worker VPN gateway
• Segmentation of IoT and guest networks
• Compliance-driven environments (PCI DSS, HIPAA)

Good to know

The TZ 280 supports SonicWall's Secure SD-WAN technology, allowing you to combine multiple WAN connections for resilience and performance. It is also ready for SonicWall's cloud-based management, enabling zero-touch deployment and centralized policy control across distributed locations. The device includes a limited lifetime hardware warranty with 90 days of support, and optional security subscriptions can be added for continuous protection against evolving threats.