SonicWall
SonicWall is a long-established US firewall brand: TZ for branches, NSa for head offices and NSsp for data centers. Capture Client covers endpoints and Cloud Secure Edge handles remote access.
- Headquarters
- United States
- Positioning
- EntryMid-market
- Official website
- www.sonicwall.com
Who it suits
Branches and shops that need a small firewall with a quick VPN back to head office.
Overview
SonicWall today
SonicWall is a long-established US firewall brand headquartered in Milpitas, California, and currently owned by the investment firm Francisco Partners. Most of its customers are small and mid-sized businesses, and it sells through IT companies that manage systems for them.
Product families and hardware generations
Firewalls come in three ranges: TZ for branches and small offices, NSa for head offices, and NSsp for data centers. In August 2025 SonicWall launched Gen 8 (for example the TZ80 and TZ280 to TZ680) with new cloud-based management and built-in zero-trust features. Gen 7 (TZ270 to TZ670, NSa 2700 to 6700) is still widely installed, but some models entered end of sale in 2026. Gen 6 reached end of support in stages through 2025 and 2026 and should be replaced.
Other products:
- Capture ATP: a cloud sandbox that opens suspicious files before they reach the user.
- Capture Client: endpoint protection.
- Cloud Secure Edge: zero-trust access for remote staff, which came from the purchase of Banyan Security.
- Network Security Manager (NSM): central management for many firewalls.
Licensing
Gen 8 can be bought three ways: Hardware Only, the Advanced Protection Security Suite (APSS) with the full set of security services, or the Managed Protection Security Suite (MPSS), where SonicWall monitors the firewall, schedules firmware updates and sends reports. One catch: the TZ80 is the only model that needs an active subscription and a permanent internet connection to operate at all.
SonicWall fits branches and shops that need a small firewall with a VPN back to head office that can be set up quickly.
Strengths
- Small TZ models set up a VPN back to head office quickly, and the setup wizards can get a new branch online the same day.
- Capture ATP uses RTDMI memory inspection, which helps catch malicious files that are not yet in any signature database.
- The MPSS package has SonicWall handle updates and monitoring, which suits organizations with nobody looking after the firewall day to day.
Things to know before choosing
- In September and October 2025, an unauthorized party accessed the firewall configuration backups of every customer using MySonicWall cloud backup. If you ever enabled it, rotate all passwords, shared secrets and keys as SonicWall advised.
- SonicWall SSL VPN has had vulnerabilities that ransomware groups exploited in real attacks. Keep firmware current, turn on MFA and never expose the admin page to the internet.
- The TZ80 needs a live subscription and constant internet. If the licence lapses the box may stop working, not just stop protecting. For branches with uncertain budgets, choose a TZ280 or above.
- Many Gen 6 units still in service are out of support or about to be, and some Gen 7 models are already end of sale. Check the end-of-life date before renewing.
Using it in Laos
In Laos, SonicWall is mostly found at small and mid-sized companies and at branches of foreign firms. Hardware and licences are ordered through distributors in Thailand. Popular TZ models are usually in stock; NSa and NSsp units generally have to be ordered.
What we see on sites:
- Old hardware: we still find out-of-support Gen 6 TZ units with SSL VPN open to the internet. That is the first risk to fix.
- Power: TZ units run on an external adapter. Use a UPS and surge protection, especially at provincial branches where outages are frequent.
- Internet: if you choose the TZ80 or cloud management, the branch needs a stable connection. Where the link drops often, pick a model that runs without the cloud.
- People: few people in Laos know SonicOS well, so keeping configuration notes and passwords documented somewhere safe matters a lot.
Compared with alternatives
Fortinet offers better SD-WAN and performance for the money and is easier to staff in Laos. WatchGuard is a comparable option with MFA (AuthPoint) tied directly into the VPN. Sophos is the better fit if you want the firewall and endpoints working together with an MDR team. Choose SonicWall when you already run it and the team knows it, or when you want SonicWall to manage the firewall for you under MPSS.
Product lines
- TZ Series
- NSa Series
- NSsp Series
- Capture Client
- Cloud Secure Edge
- Network Security Manager
Solutions that use this brand
Next-Generation Firewall (NGFW)A firewall that knows which app and which user, with IPS, web filtering, HTTPS inspection and VPN, sized on real all-features-on…
Secure Remote Access (VPN/ZTNA)Staff and contractors reach internal systems from anywhere through VPN or ZTNA with MFA, seeing only what they need.
Endpoint Protection & EDREDR that watches behaviour, not just virus lists. It stops ransomware mid-run and cuts an infected PC off the network at once.FAQ
We had MySonicWall cloud backup turned on. What should we do now?
Treat your configuration as exposed. Change admin and local user passwords, VPN pre-shared keys, LDAP/RADIUS secrets and any other keys stored on the firewall, then check the logs for unusual logins. If you can't do it in-house, we can work through the checklist with you.
We still use a Gen 6 TZ. Do we really have to replace it?
Yes, if it exposes VPN or any other service to the internet. Once support ends there are no more security fixes, and old SonicWall units are exactly what ransomware groups scan for. The equivalent Gen 7 or Gen 8 model can usually import part of the old configuration.
How does MPSS differ from APSS?
APSS gives you the full set of security services, but your team or IT provider configures and updates the firewall. MPSS adds 24/7 monitoring, scheduled firmware updates and monthly reports from SonicWall. If nobody looks after the firewall regularly, MPSS is the better buy.
All brand names and trademarks belong to their respective owners. Mention does not imply official partnership unless explicitly stated. Products are sourced through legitimate distribution channels.
Send us a floor plan or a few photos of the site
We’ll come back with a few questions, then a first design. The first consultation is free, in Lao, Thai or English, on WhatsApp or our Facebook page.