PAN Platform Summary
0 likes647 views
This document provides a summary of specifications and features for various Palo Alto Networks platform models - PA-4060, PA-4050, PA-4020, PA-2050, PA-2020, and PA-500. It includes details on their throughput and capacity for firewall, threat prevention and IPSec VPN, as well as hardware specifications and key features supported across all platforms such as application identification, policy-based controls, SSL/IPSec VPN, file/data filtering, and high availability.
PAN Platform Summary
- 1. Platform Specifications and Features Summary Performance and PA-4060 PA-4050 PA-4020 PA-2050 PA-2020 PA-500 Capacities Firewall throughput 10 Gbps 10 Gbps 2 Gbps 1 Gbps 500 Mbps 250 Mbps Threat prevention 5 Gbps 5 Gbps 2 Gbps 500 Mbps 200 Mbps 100 Mbps throughput IPSec VPN throughput 2 Gbps 2 Gbps 1 Gbps 300 Mbps 200 Mbps 50 Mbps New sessions per second 60,000 60,000 60,000 15,000 15,000 7,500 Max sessions 2,000,000 2,000,000 500,000 250,000 125,000 64,000 IPSec VPN tunnels/tunnel 4,000 4,000 2,000 2,000 1,000 250 interfaces SSL VPN Users 10,000 10,000 5,000 1,000 500 100 Virtual routers 125 125 20 10 10 2 Virtual systems 25 25 10 5 (with license) N/A Security zones 500 500 80 40 40 20 Max number of policies 20,000 20,000 10,000 5,000 2,500 1,000 Hardware PA-4060 PA-4050 / PA-4020 PA-2050 PA-2020 PA-500 Specifications (4) 10 Gigabit XFP (16) 10/100/1000 (16) 10/100/1000 (12) 10/100/1000 I/O (8) 10/100/1000 + (4) Gigabit SFP + (8) Gigabit SFP + (4) Gigabit SFP + (2) Gigabit SFP (2) 10/100/1000 high availability, (1) DB9 console (1) 10/100/1000 out of band management, Management I/O port, (1) 10/100/1000 out of band management (1) RJ-45 console port Rack mountable 2U, 19” standard rack 1U, 19” standard rack Power supply Redundant 400W 175W/200W 180W Safety UL, CUL, CB EMI FCC class A, CE class A, VCCI Class A, TUV Operating temp. 32 to 122 F, 0 to 50 C Non-operating temp. -4 to 158 F, -20 to 70 C Key Features Supported Across All Platforms Firewall Applications identified 950+ Policy-based control by application, application category, subcategory, technology, risk factor or characteristic Policy-based control by user, group or IP address Scheduled policies Per policy SSL decryption & inspection (inbound and outbound) IPSec VPN (site-to-site) SSL VPN (remote access) File and Data Filtering Block the unauthorized transfer of more than 50 file types Identify and control the transfer of Social Security Numbers, Credit Card Numbers, Custom Data Patterns QoS Policy-based traffic shaping (priority, guaranteed, maximum) per application, per user, per tunnel and more Policy-based diffserv marking Threat Prevention (Subscription Required) Block viruses, spyware, network worms and vulnerability exploits URL Filtering (Subscription Required) 76-Category/20 million URL on-box customizable database Customizable allow and block lists Customizable block page Custom categories Networking Dynamic routing (BGP, OSPF, RIP) Tap mode, virtual wire, layer 2, and layer 3 802.1Q VLAN tagging (layer 2, layer 3) Network address translation (NAT) DHCP server/ DHCP relay (up to 3 servers) IPv6 application control and inspection (Virtual Wire mode only) High Availability Active/Passive Configuration and session synchronization Interface and IP tracking Link and path failure monitoring Management Integrated web interface, CLI and centralized management (Panorama) Role-based administration SNMPv2 & Syslog Shared policies (Panorama) Jan 2010 (PAN-OS 3.1) Your Palo Alto Networks Reseller www.altaware.com sales@altaware.com (866) 833-4070