Palo Alto Networks Enterprise Firewall PA-3260
Next-Generation Firewall Appliance in a Ruggedized Form
Factor
Palo Alto Networks Products
PA-3260 Series Hardware
Palo Alto Networks PA-3260 with redundant AC power
supplies
#PAN-PA-3260
Our Price: Request a Quote
Our Price: Request a Quote
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
The Palo Alto Networks® PA-3200 Series next-generation firewalls are designed for data center and internet gateway deployments. This series is comprised of the PA-3260, PA-3260, and PA-3260 firewalls. These models provide flexibility in performance and redundancy to help you meet your deployment requirements. All models in this series provide next-generation security features to help you secure your organization through advanced visibility and control of applications, users, and content.
First Supported Software Release: PAN-OS® 8.1
Features:
-
8.8 Gbps firewall throughput1
(App-ID enabled1) - 4.7 Gbps Threat Prevention throughput2
- 4.8 Gbps IPsec VPN throughput
- 3,000,000 max sessions
- 135,000 new sessions per second3
- 6,000 IPsec VPN tunnels/tunnel interfaces
- 2,048 SSL VPN Users
- 10 virtual routers
- 1/6 virtual systems (base/max4)
- 60 security zones
- 5,000 max number of policies
Front Panel:
|
Item
|
Component
|
Description
|
|---|---|---|
|
1
|
Ethernet ports 1 through 12
|
Twelve RJ-45 10Mbps/100Mpbs/1Gbps ports for network
traffic. The link speed and link duplex are
auto-negotiate only.
|
|
2
|
SFP ports 13 through 20
|
These ports vary depending on your firewall model:
|
|
3
|
QSFP+ ports 21 through 24
|
(PA-3260 only) Four QSFP+
(40Gbps) ports as defined by the IEEE 802.3ba
standard.
|
|
4
|
HSCI port
|
One SFP+ (10Gbps) port (supports only an SFP+
transceiver or passive SFP+ cable).
Use this port to connect two PA-3200 Series firewalls
in a high availability (HA) configuration as follows:
The HSCI ports must be connected directly between
the two firewalls in the HA configuration (without
a switch or router between them). When directly
connecting the HSCI ports between two PA-3200
Series firewalls that are physically located near
each other, Palo Alto Networks recommends that you
use a passive SFP+ cable.
For installations where the two firewalls are not
near each other and you cannot use a passive SFP+
cable, use a standard SFP+ transceiver and the
appropriate cable length.
|
|
5
|
HA1-A and HA1-B ports
|
Two RJ-45 10Mbps/100Mbps/1000Mbps ports for high
availability (HA) control.
If the firewall dataplane restarts due to a
failure or manual restart, the HA1-B link will
also restart. If the dataplane restarts and only
HA1-B is connected, a split brain condition
occurs. The HA1-A link will not restart when the
dataplane restarts. Because of this behavior, we
recommend that you connect both HA1-A and HA1-B to
provide redundancy for the control link and to
avoid split brain issues.
|
|
6
|
MGT port
|
Use this Ethernet 10Mbps/100Mbps/1000Mbps port to
access the management web interface and perform
administrative tasks. The firewall also uses this port
for management services, such as retrieving licenses
and updating threat and application signatures.
|
| 7 |
CONSOLE port (RJ-45)
|
Use this port to connect a management computer to the
firewall using a 9-pin serial-to-RJ-45 cable and
terminal emulation software.
The console connection provides access to firewall
boot messages, the Maintenance Recovery Tool (MRT),
and the command line interface (CLI).
If your management computer does not have a
serial port, use a USB-to-serial converter.
Use the following settings to configure your terminal
emulation software to connect to the console port:
|
| 8 |
USB port
|
A USB port that accepts a USB flash drive with a
bootstrap bundle (PAN-OS configuration).
Bootstrapping speeds up the process of configuring and
licensing the firewall to make it operational on the
network with or without internet access.
|
| 9 |
CONSOLE port (Micro USB)
|
Use this port to connect a management computer to the
firewall using a standard Type-A USB-to-micro USB
cable.
The console connection provides access to firewall
boot messages, the Maintenance Recovery Tool (MRT),
and the command line interface (CLI).
Refer to the
Micro USB Console Port
page for more information and to download the Windows
driver or to learn how to connect from a Mac or Linux
computer.
|
|
10
|
LED status indicators
|
Eight LEDs that indicate the status of the firewall
hardware components (see
Interpret the PA-3200 Series Status LEDs
).
|
Back Panel:
|
Item
|
Component
|
Description
|
|---|---|---|
|
1
|
System drive
|
One 240GB solid-state drive (SSD) used to store the
PAN-OS system files, system logs, and network traffic
logs.
|
|
2
|
Exhaust fan tray
|
Provides ventilation and cooling for the firewall.
|
|
3
|
Ground studs
|
Use the two-post ground stud to connect the firewall
to earth ground. The firewall ships with a 6AWG
two-post ground lug (attached to the ground studs) but
does not include a ground cable.
|
| 4 |
PS1 and PS2
power supplies
|
Use the power supply inputs (either AC or DC depending
on the installed power supply type) to connect power
to the firewall. The second power supply is for
redundancy. When facing the back of the firewall, PS1
is on the left and PS2 is on the right.
|
Documentation:
Download the Palo Alto Networks PA-3260 Specification Datasheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing subject to change without notice.
Palo Alto Networks Products
PA-3260 Series Hardware
Palo Alto Networks PA-3260 with redundant AC power
supplies
#PAN-PA-3260
Our Price: Request a Quote
Our Price: Request a Quote
Zero Touch Provisioning (ZTP) version of the Palo Alto
Networks PA-3260 with redundant AC power supplies
Zero Touch Provisioning (ZTP) version of the Palo Alto
Networks PA-3260 with redundant AC power supplies
#PAN-PA-3260-ZTP
Our Price: Request a Quote
Our Price: Request a Quote
Zero Touch Provisioning (ZTP) version of the PA-3200 Series
ZTP spare hard drive
Zero Touch Provisioning (ZTP) version of the PA-3200 Series
ZTP spare hard drive - 240GB Solid State Drive (SSD)
#PAN-PA-3200-ZTP-SSD-240-IMG
Our Price: Request a Quote
Our Price: Request a Quote
Partner Enabled Premium Support
Partner enabled premium support year 1, PA-3260
#PAN-SVC-BKLN-3260
Our Price: Request a Quote
Our Price: Request a Quote
Partner enabled premium support renewal, PA-3260
#PAN-SVC-BKLN-3260-R
Our Price: Request a Quote
Our Price: Request a Quote
Partner enabled premium support 3-year prepaid,
PA-3260
#PAN-SVC-BKLN-3260-3YR
Our Price: Request a Quote
Our Price: Request a Quote
Partner enabled premium support 3-year prepaid renewal,
PA-3260
#PAN-SVC-BKLN-3260-3YR-R
Our Price: Request a Quote
Our Price: Request a Quote
Partner enabled premium support 5 year prepaid,
PA-3260
#PAN-SVC-BKLN-3260-5YR
Our Price: Request a Quote
Our Price: Request a Quote
Partner enabled premium support 5 year prepaid renewal,
PA-3260
#PAN-SVC-BKLN-3260-5YR-R
Our Price: Request a Quote
Our Price: Request a Quote
Transceiver
SFP form factor, 1Gb copper transceiver, 100m over Cat5
RJ-45, IEEE 802.3ab 1000BASE-T compliant
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-CG
Our Price: Request a Quote
Our Price: Request a Quote
SFP form factor, LX 1Gb optical transceiver, 10Km reach,
SMF, duplex LC, IEEE 802.3ab 1000BASE-LX compliant
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series. PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series. PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-LX
Our Price: Request a Quote
Our Price: Request a Quote
SFP+ form factor, 10Gb direct attach twin-ax passive cable
with 2 transceiver ends and 5m of cable permanently bonded
as an assembly, IEEE 802.3ae 10GBASE-CR compliant
PA-7000 Series, PA-5450, PA-5200 Series, PA-5060, PA-5050,PA-3200 Series PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5200 Series, PA-5060, PA-5050,PA-3200 Series PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-PLUS-CU-5M
Our Price: Request a Quote
Our Price: Request a Quote
SFP+ form factor, ER 10Gb optical transceiver, extended
reach 40Km, SMF, duplex LC, IEEE 802.3ae 10GBASE-ER
compliant
PA-7000 series, PA-5450 (NC only), PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 series, PA-5450 (NC only), PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-PLUS-ER
Our Price: Request a Quote
Our Price: Request a Quote
SFP+ form factor, LR 10Gb optical transceiver, long reach
10Km, SMF, duplex LC, IEEE 802.3ae 10GBASE-LR
compliant
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-PLUS-LR
Our Price: Request a Quote
Our Price: Request a Quote
SFP+ form factor, SR 10Gb optical transceiver, short reach
300m, OM3 MMF, duplex LC, IEEE 802.3ae 10GBASE-SR
compliant
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-PLUS-SR
Our Price: Request a Quote
Our Price: Request a Quote
SFP form factor, SX 1Gb optical transceiver, 550m reach on
OM2 MMF, duplex LC, IEEE 802.3z 1000BASE-SX
compliant
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-SX
Our Price: Request a Quote
Our Price: Request a Quote
SFP form factor, ZX 1Gb optical transceiver, 80Km reach,
SMF, duplex LC
PA-7000 Series, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-SFP-ZX
Our Price: Request a Quote
Our Price: Request a Quote
TAA Compliant SFP form factor, 1Gb copper transceiver, 100m
over Cat5 RJ-45, IEEE 802.3ab 1000BASE-T compliant
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-T-S-CG
Our Price: Request a Quote
Our Price: Request a Quote
TAA Compliant SFP form factor, LX 1Gb optical transceiver,
10Km reach, SMF, duplex LC, IEEE 802.3ab 1000BASE-LX
compliant
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series. PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series. PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-T-S-LX
Our Price: Request a Quote
Our Price: Request a Quote
TAA Compliant SFP+ form factor, LR 10Gb optical
transceiver, long reach 10Km, SMF, duplex LC, IEEE 802.3ae
10GBASE-LR compliant
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-T-S-PLUS-LR
Our Price: Request a Quote
Our Price: Request a Quote
TAA Compliant SFP+ form factor, SR 10Gb optical
transceiver, short reach 300m, OM3 MMF, duplex LC, IEEE
802.3ae 10GBASE-SR compliant
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-T-S-PLUS-SR
Our Price: Request a Quote
Our Price: Request a Quote
TAA Compliant SFP form factor, SX 1Gb optical transceiver,
550m reach on OM2 MMF, duplex LC, IEEE 802.3z 1000BASE-SX
compliant
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5000 Series, PA-5200 Series, PA-3200 Series, PA-3000 Series, PA-800 Series, PA-220R; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-T-S-SX
Our Price: Request a Quote
Our Price: Request a Quote
QSFP+ form factor, 40Gb Bidirectional optical transceiver,
100m reach over OM3 MMF, 150m over OM4 MMF, duplex
LC
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-QSFP-40GBASE-BIDI
Our Price: Request a Quote
Our Price: Request a Quote
QSFP+ form factor, 40Gb ER4 optical transceiver, extended
reach 40Km, SMF, duplex LC, IEEE 802.3ba 40GBASE-ER4
compliant
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-QSFP-40GBASE-ER4
Our Price: Request a Quote
Our Price: Request a Quote
QSFP+ form factor, 40Gb LM4 universal optical transceiver,
140m OM3 MMF, 160m OM4 MMF, 1km SMF, duplex LC, utilizes
IEEE 802.3ba 40GBASE-LR4 4x10G channel plan adaptation
referred to as 40GBASE-LM4
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-QSFP-40GBASE-LM4
Our Price: Request a Quote
Our Price: Request a Quote
QSFP+ form factor, 40Gb LR4 optical transceiver, long reach
10Km, SMF, duplex LC, IEEE 802.3ba 40GBASE-LR4
compliant
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-QSFP-40GBASE-LR4
Our Price: Request a Quote
Our Price: Request a Quote
QSFP+ form factor, 40Gb SR4 optical transceiver, short
reach 100m OM3, 8/12 strand MPO connector, IEEE 802.3ba
40GBASE-SR4 compliant
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-QSFP-40GBASE-SR4
Our Price: Request a Quote
Our Price: Request a Quote
QSFP+ form factor, 40Gb active optical cable with 2
transceivers and 10m of cable permanently bonded as an
assembly
PA-7000 series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-QSFP-AOC-10M
Our Price: Request a Quote
Our Price: Request a Quote
TAA Compliant QSFP+ form factor, 40Gb LR4 optical
transceiver, long reach 10Km, SMF, duplex LC, IEEE 802.3ba
40GBASE-LR4 compliant
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA-5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-T-Q-40GBASE-LR4
Our Price: Request a Quote
Our Price: Request a Quote
TAA Compliant QSFP+ form factor, 40Gb SR4 optical
transceiver, short reach 100m OM3, 8/12 strand MPO
connector, IEEE 802.3ba 40GBASE-SR4 compliant
PA-7000 Series, PA_5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
PA-7000 Series, PA_5450, PA-5200 Series, PA-3260; NOTE: only models or series cited are supported, unlisted models or series are not supported
#PAN-T-Q-40GBASE-SR4
Our Price: Request a Quote
Our Price: Request a Quote
FIPS hardware kit
Palo Alto Networks PA-3220, PA-3250, and PA-3260 4 post rack
mount kit
Palo Alto Networks PA-3220, PA-3250, and PA-3260 4 post
rack mount kit
#PAN-PA-2RU-RACK4
Our Price: Request a Quote
Our Price: Request a Quote
Spare Fan tray
Spare Hard drive - 240GB Solid State Drive (SSD)
PA-3200 Series spare hard drive - 240GB Solid State Drive
(SSD)
#PAN-PA-3200-SSD-240-IMG
Our Price: Request a Quote
Our Price: Request a Quote
Accessory Kit
Power supply
PA-3200 Packaging set
PA-3200 packaging set - 1 each of ESD unit bag, foam set,
insert tray, and shipping box
#PAN-PA-3200-PKG-SET
Our Price: Request a Quote
Our Price: Request a Quote
PA-3200 series shipping boxes - 5 cartons
#PAN-PA-3200-BOX-SET
Our Price: Request a Quote
Our Price: Request a Quote