Palo Alto Networks PA Series Firewall
Next-generation firewall model families include Palo Alto Networks PA-4000 Series and the PA-2000 Series, along with the newly released PA-500 and range from 250Mbps to 10Gbps in throughput capacity. Palo Alto Networks next-generation firewalls are built on a strong networking foundation, offer a familiar policy management interface and offer unprecedented features for your security infrastructure.
Palo Alto Networks Enterprise Firewall - PA-400 Series
The world's first ML-Powered Next-Generation Firewall (NGFW) enables you to prevent unknown threats, see and secure everything-including the Internet of Things (IoT)-and reduce errors with automatic policy recommendations.
The controlling element of the PA-400 Series is PAN-OS®, the same software that runs all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, inclusive of applications, threats, and content, and then ties that traffic to the user regardless of location or device type. The application, content, and user-in other words, the elements that run your business-then serve as the basis of your security policies, resulting in improved security posture and reduced incident response times.
PA-440 Firewall
- 3.0 Gbps firewall throughput (HTTP/appmix)
- 1.6 Gbps Gbps IPsec VPN throughput
- 200,000 Max sessions
- 39,000 New sessions per second
PA-450 Firewall
- 3.8 Gbps firewall throughput (HTTP/appmix)
- 2.2 Gbps Gbps IPsec VPN throughput
- 300,000 Max sessions
- 52,000 New sessions per second
PA-460 Firewall
- 5.2 Gbps firewall throughput (HTTP/appmix)
- 3.1 Gbps Gbps IPsec VPN throughput
- 400,000 Max sessions
- 74,000 New sessions per second
Palo Alto Networks Enterprise Firewall - PA-220 Series
The PA-220 next-generation firewall safely enables applications and prevents modern cyber threats. Suitable for small organizations, branch offices and retail locations, the PA-220 desktop form factor brings you the same PAN-OS features that protect your largest data centers, including high availability with active/active and active/passive modes.
The PA-220 provides you interactive visibility and control of applications, users, and content at throughput speeds of up to 500 Mbps. You get redundant power input for increased reliability, a fanless design for quiet operation, and solid state disks to remove any moving parts. The PA-220 also simplifies the deployments of large numbers of firewalls through the USB port.
PA-220 Firewall
- 500 Mbps firewall throughput (App-ID enabled)
- 150 Mbps threat prevention throughput
- 100 Mbps IPSec VPN throughput
- 64,000 max sessions
- 4,200 new sessions per second
- 250 IPSec VPN tunnels/tunnel interfaces
- 3 virtual routers
- 15 security zones
- 250 max number of policies
PA-220R Firewall
- 500 Mbps firewall throughput1
- 150 Mbps Threat Prevention throughput2
- 100 Mbps IPsec VPN throughput
- 64,000 max sessions
- 4,200 new sessions per second3
- 1,000 IPsec VPN tunnels/tunnel interfaces
- 3 virtual routers
- 15 security zones
- 250 max number of policies
Palo Alto Networks Enterprise Firewall - PA-800 Series
The PA-800 Series next-generation firewalls prevent cyber threats and safely enable applications. The series includes PA-820 and PA-850, which are based on the same architectural foundation as all of our next-generation firewalls.
The PA-800 Series of appliances provide advanced visibility and control of applications, users, and content at throughput speeds of up to 1.9 Gbps and with I/O options of up to four 10 Gigabit SFP+ ports. Redundant power supplies provide hardware resiliency, and the USB port allows rapid deployment of large numbers of firewalls with consistent configuration.
PA-820 Firewall
- 940 Mbps firewall throughput (App-ID enabled)
- 610 Mbps threat prevention throughput
- 400 Mbps IPSec VPN throughput
- 128,000 max sessions
- 8,300 new sessions per second
- 1000 IPSec VPN tunnels/tunnel interfaces
- 5 virtual routers
- 30 security zones
- 1,500 max number of policies
PA-850 Firewall
- 1.9 Gbps firewall throughput (App-ID enabled)
- 780 Mbps threat prevention throughput
- 400 Mbps IPSec VPN throughput
- 192,000 max sessions
- 9,500 new sessions per second
- 1000 IPSec VPN tunnels/tunnel interfaces
- 5 virtual routers
- 40 security zones
- 1,500 max number of policies
Palo Alto Networks Enterprise Firewall - PA 3200 Series
The Palo Alto Networks® PA-3200 Series next-generation firewalls are designed for data center and internet gateway deployments. This series is comprised of the PA-3220, PA-3250, and PA-3260 firewalls. These models provide flexibility in performance and redundancy to help you meet your deployment requirements. All models in this series provide next-generation security features to help you secure your organization through advanced visibility and control of applications, users, and content.
PA-3220 Firewall
- 5 Gbps firewall throughput (App-ID enabled1)
- 2.2 Gbps Threat Prevention throughput2
- 2.5 Gbps IPsec VPN throughput
- 1,000,000 sessions
- 58,000 new sessions per second3
- 4,000 IPsec VPN tunnels/tunnel interfaces
- 1,024 SSL VPN Users
- 10 virtual routers
- 1/6 virtual systems (base/max4)
- 60 security zones
- 2,500 max number of policies
PA-3250 Firewall
-
6.3 Gbps firewall throughput
(App-ID enabled1) - 3 Gbps Threat Prevention throughput2
- 3.2 Gbps IPsec VPN throughput
- 2,000,000 sessions
- 94,000 new sessions per second3
- 6,000 IPsec VPN tunnels/tunnel interfaces
- 2,048 SSL VPN Users
- 10 virtual routers
- 1/6 virtual systems (base/max4)
- 60 security zones
- 5,000 max number of policies
PA-3260 Firewall
-
8.8 Gbps firewall throughput1
(App-ID enabled1) - 4.7 Gbps Threat Prevention throughput2
- 4.8 Gbps IPsec VPN throughput
- 3,000,000 max sessions
- 135,000 new sessions per second3
- 6,000 IPsec VPN tunnels/tunnel interfaces
- 2,048 SSL VPN Users
- 10 virtual routers
- 1/6 virtual systems (base/max4)
- 60 security zones
- 5,000 max number of policies
Palo Alto Networks Enterprise Firewall - PA 3400 Series
Palo Alto Networks PA-3400 Series ML-Powered NGFWs-comprising the PA-3440, PA-3430, PA- 3420, and PA-3410-target high-speed internet gateway deployments. The PA-3400 Series appliances secure all traffic.
PA-3410 Firewall
- 14.5/11.6 Gbps firewall throughput (HTTP/appmix)
- 5.2/5.9 Gbps threat prevention throughput (HTTP/appmix)
- 6.8 Gbps IPSec VPN throughput
- 1.4 M max sessions
- 145,000 new sessions per second
- 1/11 virtual systems (base/max)
PA-3420 Firewall
- 20.8/16.9 Gbps firewall throughput (HTTP/appmix)
- 7.6/8.7 Gbps Gbps threat prevention throughput (HTTP/appmix)
- 9.9 Gbps IPSec VPN throughput
- 2 M max sessions
- 205,000 new sessions per second
- 1/11 virtual systems (base/max)
PA-3430 Firewall
- 25.5/20.5 Gbps firewall throughput (HTTP/appmix)
- 9.2/10.5 Gbps 7.6 threat prevention throughput (HTTP/appmix)
- 12.2 Gbps IPSec VPN throughput
- 2.5 M max sessions
- 240,000 new sessions per second
- 1/11 virtual systems (base/max)
PA-3440 Firewall
- 30.2/24 Gbps firewall throughput (HTTP/appmix)
- 11.0/12.8 Gbps Gbps Gbps threat prevention throughput (HTTP/appmix)
- 14.5 Gbps IPSec VPN throughput
- 3 M max sessions
- 268,000 new sessions per second
- 1/11 virtual systems (base/max)
Palo Alto Networks Enterprise Firewall - PA 5200 Series
The PA-5200 Series next-generation firewalls prevent threats, and safely enable applications, across a diverse set of high-performance use cases (e.g., Internet Gateway, Data Center, and Service Provider environments). The series includes the PA-5260, PA-5250, and PA-5220 which provide predictable performance with deep visibility into and control over all traffic, including encrypted traffic.
The PA-5400 Series enables you to secure your organization through advanced visibility and control of applications, users, and content at throughput speeds of up to 200 Gbps. Dedicated processing resources assigned to networking, security, signature matching, and management functions ensure predictable performance.
PA-5280 Firewall
- 68 Gbps firewall throughput (App-ID enabled1)
- 30 Gbps Threat Prevention throughput2
- 24 Gbps IPsec VPN throughput
- 64,000,000 max sessions
- 462,000 new sessions per second3
- 225 virtual routers
- 25/225 virtual systems (base/max4)
PA-5260 Firewall
- 72.3 Gbps firewall throughput (App-ID enabled)
- 30.2 Gbps threat prevention throughput
- 21 Gbps IPSec VPN throughput
- 32,000,000 max sessions
- 458,000 new sessions per second
- 225 virtual routers
- 25/225 virtual systems (base/max)
PA-5250 Firewall
- 35.9 Gbps firewall throughput (App-ID enabled)
- 20.4 Gbps threat prevention throughput
- 14 Gbps IPSec VPN throughput
- 8,000,000 max sessions
- 348,000 new sessions per second
- 125 virtual routers
- 25/125 virtual systems (base/max)
PA-5220 Firewall
- 18.5 Gbps firewall throughput (App-ID enabled)
- 9.2 Gbps threat prevention throughput
- 5 Gbps IPSec VPN throughput
- 4,000,000 max sessions
- 169,000 new sessions per second
- 20 virtual routers
- 10/20 virtual systems (base/max)
PA-5450 Firewall
- 200 Gbps firewall throughput (HTTP/appmix)
- 125 Gbps Threat Prevention throughput
- 95 Gbps IPsec VPN throughput
- 100M Max sessions
- 4M New sessions per second
Palo Alto Networks Enterprise Firewall - PA 5400 Series
Palo Alto Networks PA-5400 Series ML-Powered NGFWs-comprising the PA-5430, PA-5420, and PA-5410-are ideal for high-speed data center, internet gateway, and service provider deployments. The PA-5400 Series appliances secure all traffic, including encrypted traffic.
PA-5410 Firewall
- 45.2/36.7 Gbps firewall throughput (HTTP/appmix)
- 22/23.5 Gbps threat prevention throughput (HTTP/appmix)
- 21 Gbps IPSec VPN throughput
- 4.1 M max sessions
- 246,000 new sessions per second
- 10/20 virtual systems (base/max)
PA-5420 Firewall
- 53.7/47.5 Gbps firewall throughput (HTTP/appmix)
- 28.8/30.5 Gbps Gbps threat prevention throughput (HTTP/appmix)
- 28.7 Gbps IPSec VPN throughput
- 6.2 M max sessions
- 315,000 new sessions per second
- 15/65 virtual systems (base/max)
PA-5430 Firewall
- 63/59.4 Gbps firewall throughput (HTTP/appmix)
- 37.6/40.9 Gbps threat prevention throughput (HTTP/appmix)
- 42 Gbps IPSec VPN throughput
- 8.3M max sessions
- 366,000 new sessions per second
- 25/125 virtual systems (base/max)
Palo Alto Networks Enterprise Firewall - PA 7000 Series
Our PA-7000 Series high-performance network security appliances offer the perfect blend of power, intelligence and simplicity.
Power - derived from a proven platform architecture that combines an ultra-efficient, single-pass software engine with nearly 700 function-specific processors for networking, security, content inspection, and management.
Intelligence - that optimizes security processing resource utilization and dynamically scales as new computing power becomes available.
Simplicity - resulting from a unified approach toward management and licensing.
PA-7050 Firewall
- 120 Gbps firewall throughput (App-ID enabled)
- 60 Gbps threat prevention throughput
- 24 Gbps IPSec VPN throughput
- 24,000,000 max sessions
- 720,000 new sessions per second
- 120,000 IPSec VPN tunnels/tunnel interfaces
- 20,000 SSL VPN Users
- 225 virtual routers
- 25/225 virtual systems (base/max)
- 900 security zones
- 40,000 max number of policies
PA-7080 Firewall
- 200 Gbps firewall throughput (App-ID enabled)
- 100 Gbps threat prevention throughput
- 80 Gbps IPSec VPN throughput
- 1,200,000 max sessions
- 80,000,000 new sessions per second
- 225 virtual routers
- 25/225 virtual systems (base/max)
- 900 security zones