Small offices & branches
TZ series
Compact appliances for smaller environments and branch locations. TZ80 addresses SOHO, IoT, and microbusiness needs.
SonicWall solutions · Changing Technologies, Inc.
Protect the network.
Connect your people.
Bring network, 
endpoint, and access security into focus. Explore SonicWall solutions with CTI and plan a deployment around your users, locations, and business needs.
Next-generation firewalls · Capture Client · 
NSM · 
Cloud Secure EdgeFour layers. A coordinated security plan.
FirewallsNetwork protectionCapture ClientEndpoint protectionNSMFirewall managementCloud Secure EdgeSecure user accessChoose the layers that fit your environment.
01 / Next-generation firewalls
Security at every
network edge.
SonicWall firewalls protect physical, virtual, and cloud environments. Select a platform around your traffic, locations, and inspection requirements.
- Inspect traffic with intrusion prevention, anti-malware, and application controls.
- Apply content filtering and encrypted traffic inspection where configured.
- Analyze suspicious files with Capture Advanced Threat Protection (ATP).
SONICWALLNETWORK SECURITY
Branch officesEnterprise networksHybrid cloud
Midsize organizations
NSa series
Network security for growing enterprise environments that need greater capacity and connectivity.
Enterprise & data center
NSsp series
Platforms for large distributed enterprises, data centers, and service providers.
Virtual & cloud
NSv series
Virtual firewalls for workloads across supported virtual infrastructure and cloud platforms.
Security services require applicable subscriptions. Sizing should account for enabled inspection services, concurrent users, connectivity, and growth.
Capture ClientEndpoint defense across the threat lifecycle
01Prevent & detectBehavior-based protection
02InvestigateThreat visibility and hunting
03RespondEndpoint remediation
Endpoint remediation04RecoverSupported Windows rollback
Capability overview; available features vary by edition and operating system.
02 / Capture Client endpoint security
Protect the devices
your people rely on.
Capture Client combines SentinelOne-powered endpoint protection with cloud-based administration. Behavior-based detection helps identify malware, ransomware, and suspicious activity.
- Investigate endpoint activity with attack visualization and threat hunting capabilities.
- Identify vulnerable applications and prioritize remediation.
- Connect with SonicWall firewalls for endpoint enforcement.
- Use remediation and supported Windows rollback capabilities to assist recovery.
CTI deployment examplePilot protection with a small device group, validate business application exclusions, then expand the rollout with clear alert ownership.
Compare endpoint offerings
Capture Client Advanced,
Premier & MDR for Endpoints.
Choose the tools and operational support your team needs: Advanced provides endpoint protection, Premier adds investigation capabilities, and MDR brings a managed detection and response service.
Protect & remediate
Capture Client
Advanced
SentinelOne-powered antivirus and endpoint detection and response (EDR), with cloud management, attack visualization, application vulnerability intelligence, device control, and Capture ATP integration.
Includes remediation and supported Windows rollback. Your designated IT or security team handles alerts and response.
Consider this whenYour team wants endpoint defenses and can manage day-to-day security operations.
Investigate & control
Capture Client
Premier
Includes Advanced capabilities and adds network control, remote shell, Deep Visibility threat hunting, and Rogues discovery.
These tools help analysts search endpoint activity, investigate suspicious behavior, troubleshoot remotely, and identify unmanaged devices. Premier alone does not include a staffed 24/7 monitoring service.
Consider this whenYour security team needs deeper investigation tools and will own threat hunting and response.
Monitor & respond
MDR for
Endpoints
Managed detection and response adds people and processes to endpoint technology. SonicSentry’s security operations center (SOC) provides 24/7 monitoring, alert investigation, proactive threat hunting, and threat mitigation.
SonicWall lists Capture Client among supported endpoint technologies. The appropriate endpoint platform, licensing, onboarding, and response permissions must be confirmed for your deployment.
Consider this whenYou want expert coverage outside business hours or need help investigating and responding to endpoint threats.
| Decision point | Advanced | Premier | MDR for Endpoints |
|---|---|---|---|
| Offering type | Endpoint software package | Expanded software package | Managed security service |
| Deep Visibility, remote shell, network control & Rogues | Not included | Included | Depends on contracted endpoint platform and service |
| Who investigates alerts? | Your designated security team | Your designated security team, with added tools | SonicSentry SOC under the agreed service scope |
| 24/7 staffed SOC monitoring | Separate service required | Separate service required | Included in the MDR service |
| Primary distinction | Protection and remediation | Deeper investigation and control | Managed monitoring and response |
Plan the right fit with CTI. We can review your device counts, operating systems, internal staffing, and escalation requirements, then scope licensing and implementation assistance.
Discussendpoint options →Feature support varies by operating system, agent version, and licensing. Windows rollback relies on supported snapshot settings and available recovery data. MDR is separately provisioned; it is not automatically included with Advanced or Premier. Confirm platform eligibility, response authority, service responsibilities, and fees with CTI before ordering.
03 / Network Security Manager
A clearer view of
your firewall fleet.
Network Security Manager (NSM) centralizes firewall configuration, policy management, monitoring, and reporting. Manage multiple locations with consistent workflows.
- Use zero-touch deployment, device grouping, and reusable policy configurations.
- Review alerts, firewall status, and security activity.
- Coordinate configuration changes and firmware management.
- Choose NSM Cloud through SonicWall Unified Management or an on-premises deployment.
CTI deployment exampleDefine a standard branch policy, onboard a pilot firewall, and validate access permissions and reporting before extending management to other sites.
firewall, and validate access permissions and reporting before extending management to other sites.
Centralized policiesFleet visibilityReporting
04 / Cloud Secure Edge
Secure access.
Wherever work happens.
Cloud Secure Edge (CSE) is SonicWall’s Security Service Edge platform. Its two service areas address access to private resources and protection for internet and SaaS use.
SPA / Private resources
Secure Private Access
Use Zero Trust Network Access (ZTNA) to connect users to approved internal applications. Access decisions consider identity, device trust, and context.
- Support remote employees and third-party access.
- Apply least-privilege access to private resources.
- Plan a staged transition from legacy VPN workflows.
- Connect identity groups and apply device posture requirements.
User→Access policy→Private app
SIA / Internet & SaaS
Secure Internet Access
Apply cloud-delivered controls to internet and SaaS activity through Secure Web Gateway and Cloud Access Security Broker capabilities.
- Filter DNS requests and categorize web destinations.
- Help protect users from malicious sites and internet threats.
- Control access to sanctioned cloud applications.
- Use licensed inspection and application controls to govern web and SaaS usage.
User→Internet policy→Web & SaaS
Identity + device trust + policy
How a private access request works.
- 01
Verify the user
Connect an identity provider, such as Microsoft Entra ID or Okta, and apply your authentication requirements.
- 02
Check the device
CSE evaluates device posture and a Trust Level against the resource’s access policy. Supported integrations can add endpoint security signals. - 03
Authorize the connection
The edge brokers access to the approved resource and continues evaluating policy as the session progresses.
This illustrates private resource access. The CSE app, browser-based access, and available device checks depend on the service, device, and configuration.
Put CSE to work
Practical ways to modernize access.
Remote employees
A finance team could access its internal reporting application through SPA while SIA applies browsing policies when staff work from home or travel.
Contractors & vendors
Grant a vendor access to a specific project application. Use supported clientless access where appropriate, with policies suited to registered or unmanaged devices.
IT & development teams
Publish approved infrastructure services such as SSH, RDP, or databases, with access mapped to the people and devices that need them.
Deployment & licensing
Plan the architecture and service level.
Global Edge or Private Edge: how do we connect?
Global Edge: deploy a dial-out Connector near your private services. It establishes an outbound tunnel to SonicWall’s hosted Global Edge Network, avoiding inbound port exposure for that Connector path.
Private Edge: host an Access Tier in your own data center or cloud environment. This identity-aware gateway requires its own network reachability, capacity, and operational planning. Deployment options and eligibility depend on your license.
What changes between Basic and Advanced?
| Service | Basic | Advanced adds |
|---|---|---|
| Secure Private Access | Tunnel-based ZTNA with device posture and policy enforcement | Proxy-based access, private resource discovery, Private Edge, and expanded integrations |
| Secure Internet Access | DNS-based content and threat filtering | Risk-based URL filtering, Geo-IP filtering, Capture ATP malware protection, SaaS application directory, and expanded integrations |
SPA and SIA address different needs and can be combined. Confirm the current package, user counts, supported platforms, and subscription term in your quote. Advanced features are not included automatically with every CSE license.
How does internet protection follow the user?
SIA policies are configured through Internet Threat Protection (ITP) in the CSE console. Depending on the assigned policy and license, enforcement can evaluate DNS requests, filter URLs, and inspect supported HTTP payloads for malicious content. Administrators can use category-based rules and exceptions to align browsing with acceptable use requirements.
Plan supported operating systems, app deployment, inspection settings, and business application exceptions during the pilot. Internet filtering complements your firewall and endpoint protection.
Plan your CSE rollout with CTI. Start with an application inventory, identity groups, device requirements, and access rules. We can help scope a pilot, review supported firewall and endpoint integrations, test user workflows, and define administrator handoff and ongoing responsibilities.
CSE with CTI →Implementation assistance, ongoing administration, and monitoring are scoped in your proposal. Validate integration compatibility, licensing, and access requirements before rollout.
From product selection to implementation
Build a plan with CTI.
Connect your security priorities to a practical deployment. CTI can help define the products, integrations, and implementation services your organization needs.
Start with your environment.
Review users, locations, endpoints, applications, traffic, and existing security tools. Compare firewall capacity, endpoint requirements, management options, and access policies.
ExampleA growing company could evaluate branch firewalls alongside centralized management as it adds new offices.
firewalls alongside centralized management as it adds new offices.Make the transition manageable.
Discuss configuration, supported identity integrations, endpoint rollout, firewall policy migration, and CSE connectivity. Plan pilot testing, a change window, and administrator handoff.
ExampleA hybrid team could pilot private application access with one user group before moving additional remote workflows.
Define ongoing responsibilities.
Plan alert routing, reporting, update ownership, renewals, and support escalation. Ask about available SonicWall managed security services when additional operational coverage is needed.
ExampleA distributed organization could establish regular firewall policy reviews and a documented process for endpoint alerts.
firewall policy reviews and a documented process for endpoint alerts.CTI service scope, implementation fees, support coverage, and any vendor-managed services are defined in your proposal. Product capabilities depend on model, edition, subscription, and configuration.
Planning your solution
Questions to
start with.
Bring your requirements. We’ll help identify the next step.
Which products do we need?
Start with the problem you want to solve. Firewalls address network protection; Capture Client focuses on endpoints; NSM helps manage firewalls; CSE supports secure user access. CTI can help map these roles to your environment.
Can these solutions work with our existing systems?
Compatibility depends on your firewall generation, endpoint operating systems, identity provider, applications, and product versions. Include those details when contacting CTI so we can assess supported integrations and pilot requirements.
How do we request pricing or renewals?
Tell CTI which products you are considering, your user and device counts, number of locations, and preferred term. For renewals, share the relevant product and renewal date through your agreed support channel. We’ll confirm licensing and service options in a quote.
Are implementation and monitoring included?
Implementation, ongoing support, and managed monitoring are scoped separately in your proposal. Confirm responsibilities, coverage hours, escalation paths, and any associated vendor subscriptions with CTI.
Your next security project
Let’s plan the
right protection.
Tell us about your network, endpoints, locations, and remote access needs. CTI will help you explore SonicWall options and define the next step.