Palo Alto Networks Enterprise Firewall PA-410
The World's first ML-Powered Next Generation Firewall
Note: This model does not support logging and must be connected to Panorama to receive full logs.
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
The Palo Alto Networks PA-400 Series, comprising the PA-460, PA-410, PA-410, and PA-410, brings ML-Powered NGFW capabilities to distributed enterprise branch offices, retail locations, and midsize businesses.
The world's first ML-Powered Next-Generation Firewall (NGFW) enables you to prevent unknown threats, see and secure everything-including the Internet of Things (IoT)-and reduce errors with automatic policy recommendations.
The controlling element of the PA-400 Series is PAN-OS®, the same software that runs all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, inclusive of applica- tions, threats, and content, and then ties that traffic to the user regardless of location or device type. The application, content, and user-in other words, the elements that run your business-then serve as the basis of your security pol- icies, resulting in improved security posture and reduced incident response times.
Key Security and Connectivity Features:
ML-Powered Next-Generation Firewall
- Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack prevention for file- based attacks while identifying and immediately stopping never-before-seen phishing attempts.
- Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW.
- Uses behavioral analysis to detect IoT devices and make policy recommendations as part of a cloud-delivered and natively integrated service on the NGFW.
- Automates policy recommendations that save time and reduce the chance of human error.
Identifies and categorizes all applications, on all ports, all the time, with full Layer 7 inspection
- Identifies the applications traversing your network irrespective of port, protocol, evasive techniques, or encryption (TLS/SSL).
- Uses the application, not the port, as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect, and apply traffic-shaping.
- Offers the ability to create custom App-ID™ tags for pro- prietary applications or request App-ID development for new applications from Palo Alto Networks.
- Identifies all payload data within an application (e.g., files and data patterns) to block malicious files and thwart exfil- tration attempts.
- Creates standard and customized application usage reports, including software-as-a-service (SaaS) reports that provide insight into all sanctioned and unsanctioned SaaS traffic on your network.
- Enables safe migration of legacy Layer 4 rule sets to App-ID-based rules with built-in Policy Optimizer, giving you a rule set that is more secure and easier to manage.
Enables SD-WAN functionality
- Allows you to easily adopt SD-WAN by simply enabling it on your existing firewalls.
- Enables you to safely implement SD-WAN, which is natively integrated with our industry-leading security.
- Delivers an exceptional end user experience by minimizing latency, jitter, and packet loss.
Prevents malicious activity concealed in encrypted traffic
- Inspects and applies policy to TLS/SSL-encrypted traffic, both inbound and outbound, including for traffic that uses TLS 1.3 and HTTP/2.
- Offers rich visibility into TLS traffic, such as amount of encrypted traffic, TLS/SSL versions, cipher suites, and more, without decrypting.
- Enables control over use of legacy TLS protocols, insecure ciphers, and misconfigured certificates to mitigate risks.
- Facilitates easy deployment of decryption and lets you use built-in logs to troubleshoot issues, such as applications with pinned certificates.
- Lets you enable or disable decryption flexibly based on URL category, source and destination zone, address, user, user group, device, and port, for privacy and compliance purposes.
- Allows you to create a copy of decrypted traffic from the firewall (i.e., decryption mirroring) and send it to traffic collection tools for forensics, historical purposes, or data loss prevention (DLP).
Delivers a unique approach to packet processing with Single-Pass Architecture
- Performs networking, policy lookup, application and de- coding, and signature matching-for all threats and con- tent-in a single pass. This significantly reduces the amount of processing overhead required to perform multi- ple functions in one security device.
- Avoids introducing latency by scanning traffic for all signa- tures in a single pass, using stream-based, uniform signa- ture matching.
- Enables consistent and predictable performance when security subscriptions are enabled. (In Table 1, "Threat Prevention throughput" is measured with multiple sub- scriptions enabled.)
Enforces security for users at any location, on any device, while adapting policy based on user activity
- Enables visibility, security policies, reporting, and forensics based on users and groups-not just IP addresses.
- Easily integrates with a wide range of repositories to lever- age user information: wireless LAN controllers, VPNs, directory servers, SIEMs, proxies, and more.
- Allows you to define Dynamic User Groups (DUGs) on the firewall to take time-bound security actions without wait- ing for changes to be applied to user directories.
- Applies consistent policies irrespective of users' locations (office, home, travel, etc.) and devices (iOS and Android® mobile devices, macOS®, Windows®, Linux desktops, lap- tops; Citrix and Microsoft VDI and Terminal Servers).
- Prevents corporate credentials from leaking to third-party websites and prevents reuse of stolen credentials by enabling multi-factor authentication (MFA) at the network layer for any application without any application changes.
- Provides dynamic security actions based on user behavior to restrict suspicious or malicious users.
Technical Specifications:
Table 1: PA-400 Series Performance and Capacities |
||||
---|---|---|---|---|
|
PA-460 |
PA-450 |
PA-440 |
PA-410 |
Firewall throughput (HTTP/appmix) |
5.2/4.7 Gbps |
3.8/3.2 Gbps |
3.0/2.4 Gbps |
1.7/1.3 Gbps |
Threat Prevention throughput (HTTP/appmix) |
2.4/2.6 Gbps |
1.6/1.7 Gbps |
0.9/1.0 Gbps |
0.6/0.7 Gbps |
IPsec VPN throughput |
3.1 Gbps |
2.2 Gbps |
1.6 Gbps |
0.93 Gbps |
Max sessions |
400,000 |
300,000 |
200,000 |
64,000 |
New sessions per second |
74,000 |
52,000 |
39,000 |
13,000 |
Table 2: PA-400 Series Networking Features |
---|
Interface Modes |
L2, L3, tap, virtual wire (transparent mode) |
Routing |
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing |
Policy-based forwarding |
Point-to-point protocol over Ethernet (PPPoE) |
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
SD-WAN |
Path quality measurement (jitter, packet loss, latency) |
Initial path selection (PBF) |
Dynamic path change |
IPv6 |
L2, L3, tap, virtual wire (transparent mode) |
Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption |
SLAAC |
IPsec VPN |
Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication) |
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) |
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
VLANs |
802.1Q VLAN tags per device/per interface: 4,094/4,094 |
Table 3: PA-400 Series Hardware Specifications |
---|
I/O |
PA-460, PA-450, PA-440: 10/100/1000 (8) RJ45 PA-410: 10/100/1000 (7) RJ45 |
Management I/O |
10/100/1000 out-of-band management port (1), RJ45 console port (1), USB port (1), Micro USB console port (1) |
Storage Capacity |
PA-460, PA-450, PA-440: 128 GB eMMC PA-410: 64 GB eMMC |
Table 3: PA-400 Series Hardware Specifications (cont.) |
---|
Power Supply (Avg/Max Power Consumption) |
PA-460, PA-450: 33/41 W |
Max BTU/hr |
PA-460, PA-450: 141 |
Input Voltage (Input Frequency) |
100–240 VAC (50–60 Hz) |
Max Current Consumption |
PA-460, PA-450: 3.4 A @ 12 VDC |
Max Inrush Current |
PA-460, PA-450: 4.2 A |
Dimensions |
PA-460, PA-450, PA-440: 1.74” H x 8.83” D x 8.07” W |
Weight (Standalone Device/As Shipped) |
PA-460, PA-450, PA-440: 5.0 lbs / 7.8 lbs |
Safety |
cTUVus, CB |
EMI |
FCC Class B, CE Class B, VCCI Class B |
Environment |
Operating temperature: 32° to 104° F, 0° to 40° C Non-operating temperature: -4° to 158° F, -20° to 70° C Passive cooling |
Documentation:
Download the Palo Alto Networks Firewall Overview Datasheet (PDF).
Download the Palo Alto Networks PA-400 Series Specification Datasheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing subject to change without notice.
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote