SonicOS Standards, which ships on every SonicWALL TZ 170 SP, provides:

• Failover and Failback Technologies. The TZ 170 SP ensures continuous uptime for IPSec VPN tunnels by failing over to an analog WAN connection in the event that the broadband connection fails. Once the broadband is re-established, the TZ 170 SP fails back, providing the best connection speed possible.
  
  
• Real-Time Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention. The TZ 170 SP extends security from the network core to the perimeter by integrating support for SonicWALL's Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service, delivering real-time protection against the latest blended threats, including viruses, spyware, worms, Trojans, software vulnerabilities and other malicious code.
  
  
• Powerful Content Filtering. The TZ 170 SP supports SonicWALL's Content Filtering Service, providing an enterprise-class, scalable content filtering service that enhances productivity and security with requiring additional server or deployment costs.
  
  
• Deep Packet Inspection Firewall. The TZ 170 SP features a configurable, high performance deep packet inspection firewall for extended protection to key Internet services such as Web, e-mail, file transfer, Windows services, and DNS.
  
  
• Comprehensive Central Management Support. Every SonicWALL security appliance can be managed using SonicWALL's award-winning Global Management System, which provides network administrators with the tools for simplified configuration, enforcement and management of global security policies, VPN, and services, all from a central location.

SonicOS Enhanced, an optional software upgrade for the SonicWALL TZ 170 SP, adds:

• Real-Time Blacklist Spam Filtering. The TZ 170 SP provides the ability to use DNS to query Real-Time Black List (RBL) services that track well-known spam and open-relay SMTP servers, and to deny SMTP connections from servers that appear on the lists.
  
  
• Broadband-to-Broadband-to-Analog WAN Redundancy. The TZ 170 SP is the only appliance that provides the ability to fail over and fail back from a primary broadband WAN connection to a secondary broadband WAN connection to an analog WAN connection, providing unparalleled network uptime via multiple WAN redundancies.
  
  
• WAN ISP Failover and Load Balancing. The TZ 170 SP offers the ability to configure the optional port as a secondary WAN port, delivering highly reliable network connectivity and robust performance. This secondary WAN port can be used in "active-active" load sharing or fail-over configuration providing a highly efficient method for maximizing total network bandwidth.
  
  
• Object-based Management. The TZ 170 SP provides the ability to define an object such as a user group, network, service or interface. When security policies change, the administrator can modify the pre-defined object and propagate the changes instantly without redefining rules. This enables businesses to implement and manage security policies easily and consistently.
  
  
• Policy-based NAT. In addition to standard NAT (many-to-one) functionality, the TZ 170 SP exposes control of NAT policies to administrators for one-to-one NAT, many-to-many NAT, one-to-many NAT, inbound Port Address Translation (PAT), flexible NAT (for overlapping IP addresses), as well as NAT policies on selective source/destination/source translations. The result is greater control and flexibility to support and manage various NAT requirements.