Palo Alto Networks PA Series Firewall

Next-generation firewall model families include Palo Alto Networks PA-4000 Series and the PA-2000 Series, along with the newly released PA-500 and range from 250Mbps to 10Gbps in throughput capacity. Palo Alto Networks next-generation firewalls are built on a strong networking foundation, offer a familiar policy management interface and offer unprecedented features for your security infrastructure.

Palo Alto Networks Enterprise Firewall - PA-200 Series

The PA-200 is small and quiet enough to sit on a desk, yet powerful enough to deliver next-generation firewall security to a distributed enterprise office. This new platform extends visibility and control over applications, users and content into enterprise branch offices.

PA-200 Firewall

100 Mbps firewall throughput(App-ID enabled)
50 Mbps threat prevention throughput
50 Mbps IPSec VPN throughput
64,000 max sessions
1,000 new sessions per second
25 IPSec VPN tunnels/tunnel interfaces
25 SSL VPN Users
10 security zones
250 max number of policies

Palo Alto Networks Enterprise Firewall - PA-220 Series

The PA-220 next-generation firewall safely enables applications and prevents modern cyber threats. Suitable for small organizations, branch offices and retail locations, the PA-220 desktop form factor brings you the same PAN-OS features that protect your largest data centers, including high availability with active/active and active/passive modes.

The PA-220 provides you interactive visibility and control of applications, users, and content at throughput speeds of up to 500 Mbps. You get redundant power input for increased reliability, a fanless design for quiet operation, and solid state disks to remove any moving parts. The PA-220 also simplifies the deployments of large numbers of firewalls through the USB port.

PA-220 Firewall

500 Mbps firewall throughput (App-ID enabled)
150 Mbps threat prevention throughput
100 Mbps IPSec VPN throughput
64,000 max sessions
4,200 new sessions per second
250 IPSec VPN tunnels/tunnel interfaces
3 virtual routers
15 security zones
250 max number of policies

PA-220R Firewall

500 Mbps firewall throughput¹
150 Mbps Threat Prevention throughput²
100 Mbps IPsec VPN throughput
64,000 max sessions
4,200 new sessions per second³
1,000 IPsec VPN tunnels/tunnel interfaces
3 virtual routers
15 security zones
250 max number of policies

Palo Alto Networks Enterprise Firewall - PA-500 Series

The Palo Alto Networks enterprise firewall PA-500 is ideally suited for Internet gateway deployments within medium to large branch offices and medium sized enterprises to ensure network security and threat prevention. The Palo Alto firewall PA-500 manages network traffic flows with high performance processing and dedicated memory for networking, security, threat prevention, URL filtering and management. Palo Alto Networks next-generation firewall's high speed backplane smoothes the pathway between processors and the separation of data and control plane ensures that management access is always available, irrespective of the traffic load.

PA-500 Firewall

250 Mbps firewall throughput (App-ID enabled)
100 Mbps threat prevention throughput
50 Mbps IPSec VPN throughput
64,000 max sessions
7,500 new sessions per second
250 IPSec VPN tunnels/tunnel interfaces
100 SSL VPN Users
3 virtual routers
N/A virtual systems (base/max)
20 security zones
1,000 max number of policies

Palo Alto Networks Enterprise Firewall - PA-800 Series

The PA-800 Series next-generation firewalls prevent cyber threats and safely enable applications. The series includes PA-820 and PA-850, which are based on the same architectural foundation as all of our next-generation firewalls.

The PA-800 Series of appliances provide advanced visibility and control of applications, users, and content at throughput speeds of up to 1.9 Gbps and with I/O options of up to four 10 Gigabit SFP+ ports. Redundant power supplies provide hardware resiliency, and the USB port allows rapid deployment of large numbers of firewalls with consistent configuration.

PA-800 Firewall

PA-820 Firewall

940 Mbps firewall throughput (App-ID enabled)
610 Mbps threat prevention throughput
400 Mbps IPSec VPN throughput
128,000 max sessions
8,300 new sessions per second
1000 IPSec VPN tunnels/tunnel interfaces
5 virtual routers
30 security zones
1,500 max number of policies

PA-850 Firewall

1.9 Gbps firewall throughput (App-ID enabled)
780 Mbps threat prevention throughput
400 Mbps IPSec VPN throughput
192,000 max sessions
9,500 new sessions per second
1000 IPSec VPN tunnels/tunnel interfaces
5 virtual routers
40 security zones
1,500 max number of policies

Palo Alto Networks Enterprise Firewall - PA 3000 Series

The Palo Alto Networks™ PA-3000 Series is comprised of two high performance platforms, the PA-3050 and the PA-3020, both of which are targeted at high speed Internet gateway deployments. The PA-3000 Series manages network traffic flows using dedicated processing and memory for networking, security, threat prevention and management. Safely enable applications, users, and content at throughput speeds of up to 4 Gbps using the PA-3050 or the PA-3020. Predictable, multi-Gbps performance is delivered via dedicated, function-specific processing for networking, security, content inspection, and management.

PA-3000 Series

PA-3020 Firewall

2 Gbps firewall throughput (App-ID enabled)
1 Gbps threat prevention throughput
500 Mbps IPSec VPN throughput
250,000 max sessions
50,000 new sessions per second
1,000 IPSec VPN tunnels/tunnel interfaces
1,000 SSL VPN Users
10 virtual routers
1/6 virtual systems (base/max)
40 security zones
2,500 max number of policies

PA-3050 Firewall

4 Gbps firewall throughput (App-ID enabled)
2 Gbps threat prevention throughput
500 Mbps IPSec VPN throughput
500,000 max sessions
50,000 new sessions per second
2,000 IPSec VPN tunnels/tunnel interfaces
2,000 SSL VPN Users
10 virtual routers
1/6 virtual systems (base/max)
40 security zones
5,000 max number of policies

PA-3060 Firewall

4 Gbps firewall throughput (App-ID enabled)
2 Gbps threat prevention throughput
500 Mbps IPSec VPN throughput
500,000 max sessions
50,000 new sessions per second
2,000 IPSec VPN tunnels/tunnel interfaces
2,000 SSL VPN Users
10 virtual routers
1/6 virtual systems (base/max)
40 security zones
5,000 max number of policies

PA-3220 Firewall

5 Gbps firewall throughput (App-ID enabled¹)
2.2 Gbps Threat Prevention throughput²
2.5 Gbps IPsec VPN throughput
1,000,000 sessions
58,000 new sessions per second³
4,000 IPsec VPN tunnels/tunnel interfaces
1,024 SSL VPN Users
10 virtual routers
1/6 virtual systems (base/max⁴)
60 security zones
2,500 max number of policies

PA-3250 Firewall

6.3 Gbps firewall throughput
(App-ID enabled¹)
3 Gbps Threat Prevention throughput²
3.2 Gbps IPsec VPN throughput
2,000,000 sessions
94,000 new sessions per second³
6,000 IPsec VPN tunnels/tunnel interfaces
2,048 SSL VPN Users
10 virtual routers
1/6 virtual systems (base/max⁴)
60 security zones
5,000 max number of policies

PA-3260 Firewall

8.8 Gbps firewall throughput¹
(App-ID enabled¹)
4.7 Gbps Threat Prevention throughput²
4.8 Gbps IPsec VPN throughput
3,000,000 max sessions
135,000 new sessions per second³
6,000 IPsec VPN tunnels/tunnel interfaces
2,048 SSL VPN Users
10 virtual routers
1/6 virtual systems (base/max⁴)
60 security zones
5,000 max number of policies

Palo Alto Networks Enterprise Firewall - PA 5000 Series

The Palo Alto Networks™ PA-5000 Series is comprised of three high performance models, the PA-5060, the PA-5050 and the PA-5020, all of which are targeted at high speed datacenter and Internet gateway deployments. Use the PA-5060, PA-5050, and PA-5020 to safely enable applications, users, and content in high-speed datacenter, large Internet gateway, service provider, and multi-tenant environments. Predictable throughput levels of up to 20 Gbps are achieved using dedicated, function-specific processing for networking, security, content inspection, and management.

PA-5000 Series

PA-5020 Firewall

5 Gbps firewall throughput (App-ID enabled)
2 Gbps threat prevention throughput
2 Gbps IPSec VPN throughput
1,000,000 max sessions
120,000 new sessions per second
2,000 IPSec VPN tunnels/tunnel interfaces
5,000 SSL VPN Users
20 virtual routers
10/20 virtual systems (base/max)
80 security zones
10,000 max number of policies

PA-5050 Firewall

10 Gbps firewall throughput (App-ID enabled)
5 Gbps threat prevention throughput
4 Gbps IPSec VPN throughput
2,000,000 max sessions
120,000 new sessions per second
4,000 IPSec VPN tunnels/tunnel interfaces
10,000 SSL VPN Users
125 virtual routers
25/125 virtual systems (base/max)
500 security zones
20,000 max number of policies

PA-5060 Firewall

20 Gbps firewall throughput (App-ID enabled)
10 Gbps threat prevention throughput
4 Gbps IPSec VPN throughput
4,000,000 max sessions
120,000 new sessions per second
8,000 IPSec VPN tunnels/tunnel interfaces
20,000 SSL VPN Users
225 virtual routers
25/225 virtual systems (base/max)
900 security zones
40,000 max number of policies

Palo Alto Networks Enterprise Firewall - PA 5200 Series

The PA-5200 Series next-generation firewalls prevent threats, and safely enable applications, across a diverse set of high-performance use cases (e.g., Internet Gateway, Data Center, and Service Provider environments). The series includes the PA-5260, PA-5250, and PA-5220 which provide predictable performance with deep visibility into and control over all traffic, including encrypted traffic.

The PA-5200 Series enables you to secure your organization through advanced visibility and control of applications, users, and content at throughput speeds of up to 72 Gbps. Dedicated processing resources assigned to networking, security, signature matching, and management functions ensure predictable performance.

PA-5200 Series

PA-5280 Firewall

68 Gbps firewall throughput (App-ID enabled¹)
30 Gbps Threat Prevention throughput²
24 Gbps IPsec VPN throughput
64,000,000 max sessions
462,000 new sessions per second³
225 virtual routers
25/225 virtual systems (base/max⁴)

PA-5260 Firewall

72.3 Gbps firewall throughput (App-ID enabled)
30.2 Gbps threat prevention throughput
21 Gbps IPSec VPN throughput
32,000,000 max sessions
458,000 new sessions per second
225 virtual routers
25/225 virtual systems (base/max)

PA-5250 Firewall

35.9 Gbps firewall throughput (App-ID enabled)
20.4 Gbps threat prevention throughput
14 Gbps IPSec VPN throughput
8,000,000 max sessions
348,000 new sessions per second
125 virtual routers
25/125 virtual systems (base/max)

PA-5220 Firewall

18.5 Gbps firewall throughput (App-ID enabled)
9.2 Gbps threat prevention throughput
5 Gbps IPSec VPN throughput
4,000,000 max sessions
169,000 new sessions per second
20 virtual routers
10/20 virtual systems (base/max)

PA-5400 Series

PA-5450 Firewall

200 Gbps firewall throughput (HTTP/appmix)
125 Gbps Threat Prevention throughput
95 Gbps IPsec VPN throughput
100M Max sessions
4M New sessions per second

Palo Alto Networks Enterprise Firewall - PA 7000 Series

The PA-7050 protects datacenters and high-speed networks with firewall throughput of up to 120 Gbps and, fullthreat prevention at speeds of up to 100 Gbps. To address the computationally intensive nature of full-stack classification and analysis at speeds of 120 Gbps, more than 400 processors are distributed across networking, security, switch managementand logging functions. The result is that the PA-7050 allows you to deploy next-generation security in your datacenters without compromising performance.

PA-7000 Series

PA-7050 Firewall

120 Gbps firewall throughput (App-ID enabled)
60 Gbps threat prevention throughput
24 Gbps IPSec VPN throughput
24,000,000 max sessions
720,000 new sessions per second
120,000 IPSec VPN tunnels/tunnel interfaces
20,000 SSL VPN Users
225 virtual routers
25/225 virtual systems (base/max)
900 security zones
40,000 max number of policies

PA-7080 Firewall

200 Gbps firewall throughput (App-ID enabled)
100 Gbps threat prevention throughput
80 Gbps IPSec VPN throughput
1,200,000 max sessions
80,000,000 new sessions per second
225 virtual routers
25/225 virtual systems (base/max)
900 security zones