Palo Alto PA-3220 (PAN-PA-3220)
Liên hệ báo giáThiết bị tường lửa Palo Alto Networks PA-3220 (PAN-PA-3220)
- 10/100/1000 (12), 1G SFP (4), 1G/10G SFP/SFP+ (4)
- 10/100/1000 out-of-band management port (1), 10/100/1000 HA (2), 10G SFP+ HA (1), RJ-45 console port (1), Micro USB (1)
- Redundant 650-watt AC or DC (195/240)
- Firewall throughput: 4.4 Gbps
- IPsec VPN throughput: 2.5 Gbps
- Max sessions: 1M (48000 per sec.)
- Virtual systems (base/max): 1/6
Thiết bị tường lửa Palo Alto Networks PA-3220
SKU | PAN-PA-3220 |
---|---|
Performance and Capacities | |
Firewall throughput (HTTP/appmix) | 3.9/4.4 Gbps |
Threat Prevention throughput (HTTP/appmix) | 1.9/2.3 Gbps |
IPsec VPN throughput | 2.5 Gbps |
Max sessions | 1M |
New sessions per second | 48,000 |
Virtual systems (base/max) | 1/6 |
Hardware Specifications | |
I/O | 10/100/1000 (12), 1G SFP (4), 1G/10G SFP/SFP+ (4) |
Management I/O | 10/100/1000 out-of-band management port (1) 10/100/1000 high availability (2) 10G SFP+ high availability (1) RJ-45 console port (1) Micro USB (1) |
Storage Capacity | 240 GB SSD |
Power Supply (Avg/Max Power Consumption) | Redundant 650-watt AC or DC (195 / 240) |
Max BTU/hr | 819 |
Input Voltage (Input Frequency) | AC: 100–240 VAC (50/60Hz) DC: -48 V @ 4.7 A, -60 V @ 3.8 A |
Max Current Consumption | AC: 2.3 A @ 100 VAC, 1.0 A @ 240 VAC DC: -48 V @ 4.7 A, -60 V @ 3.8 A |
Mean Time Between Failure (MTBF) | 14 years |
Rack Mount Dimensions | 2U, 19” standard rack (3.5” H x 20.53” D x 17.34″ W) |
Weight (Standalone Device/As Shipped) | 29 lbs / 41.5 lbs |
Safety | cTUVus, CB |
EMI | FCC Class A, CE Class A, VCCI Class A |
Environment | Operating temperature: 32° to 122° F, 0° to 50° C Non-operating temperature: -4° to 158° F, -20° to 70° C Humidity tolerance: 10% to 90% Maximum altitude: 10,000 ft / 3,048 m Airflow: front to back |
Networking Features | |
---|---|
Interface Modes | L2, L3, tap, virtual wire (transparent mode) |
Routing | OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
SD-WAN | Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change |
IPv6 | L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC |
IPsec VPN | Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
VLANs | 802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP |
Network Address Translation | NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription |
High Availability | Modes: active/active, active/passive, HA clustering Failure detection: path monitoring, interface monitoring |
Zero Touch Provisioning (ZTP) | Available with -ZTP SKUs (PA-3220-ZTP) Requires Panorama 9.1.3 or higher |
Data sheet Palo Alto Networks PA-3200 Series
PA-3200 Series Hardware | |
---|---|
Palo Alto Networks PA-3220 with redundant AC power supplies | #PAN-PA-3220 |
Subscription | |
DNS Security subscription year 1, PA-3220 | #PAN-PA-3220-DNS |
GlobalProtect subscription year 1, PA-3220 | #PAN-PA-3220-GP |
Threat prevention subscription year 1, PA-3220 | #PAN-PA-3220-TP |
PANDB URL filtering subscription year 1, PA-3220 | #PAN-PA-3220-URL4 |
Premium support year 1, PA-3220 | #PAN-SVC-PREM-3220 |
Extends native protection across all attack vectors with cloud-delivered security subscriptions
- Threat Prevention—inspects all traffic to automatically block known vulnerabilities, malware, vulnerability ex-ploits, spyware, command and control (C2), and custom intrusion prevention system (IPS) signatures.
- WildFire® malware prevention—unifies inline machine learning protection with robust cloud-based analysis to instantly prevent new threats in real time as well as dis-cover and remediate evasive threats faster than ever
- URL Filtering—prevents access to malicious sites and protects users against web-based threats, including cre-dential phishing attacks.
- DNS Security—detects and blocks known and unknown threats over DNS (including data exfiltration via DNS tun-neling), prevents attackers from bypassing security mea-sures, and eliminates the need for independent tools or changes to DNS routing.
- IoT Security—discovers all unmanaged devices in your network quickly and accurately with ML, without the need to deploy additional sensors. Identifies risks and vul-nerabilities, prevents known and unknown threats, pro-vides risk-based policy recommendations, and automates enforcement.
Sản phẩm tương tự
Quantum Spark Pro 1555
CPAP-SG1555-SNBT – Firewall Check Point Quantum Spark Pro 1555
- 5 x 1GbE LAN switch
- 1 x 1GbE WAN interface
- USB port
- USB-C Console port
- 12V power connector
- Threat Prevention : 585 Mbps
- Next Generation Firewall : 800 Mbps
- IPS Throughput : 900 Mbps
Palo Alto PA-455 (PAN-PA-455)
Được xếp hạng 5.00 5 saoThiết bị tường lửa Palo Alto Networks PA-455 (PAN-PA-455)
- (2) 1G SFP/RJ45 combo, (2) 1G RJ45, (4) 1G RJ45/PoE
- OOB management (1), RJ45 console (1), USB (2), Micro USB console port (1)
- 3.2/3.3 Gbps Firewall throughput (HTTP/appmix)
- 1.6/2 Gbps Threat Prevention throughput (HTTP/appmix)
- 300,000 Max sessions
WatchGuard Firebox T45-PoE
Được xếp hạng 5.00 5 saoWatchGuard Firebox T45-PoE – Up to 3.94 Gbps firewall throughput, 5 x 1Gb ports (1 x PoE+), 30 Branch Office VPNs
- Firewall (IMIX): 1.44 Gbps
- VPN (IMIX): 460 Mbps
- UTM Full Scan: 557 Mbps
- HTTPS + IPS: 310 Mbps
- Concurrent Connections (Proxy): 3.85Million (285,000)
Quantum Spark 1800
CPAP-SG1800-SNBT – Firewall Check Point Quantum Spark 1800 Security Gateway:
- 16 x 1GbE LAN switch
- 1 x 1GbE copper/fiber WAN2 port
- 1 x 1GbE copper/fiber WAN1 port
- 1 x 10GbE copper/fiber DMZ port
- 2 x 2.5GbE ports
- 1 x 1GbE Management port
- Console port
- SD card slot
- 2 x USB ports
- 2 x power supplies
- Threat Prevention : 2,000 Mbps
- Next Generation Firewall : 5,000 Mbps
Sophos XGS 3300
Sophos XGS 3300 – Hardware Firewall with 2x GbE SFP and 2x 10GbE SFP+ for medium-sized and distributed enterprise
- Ethernet interfaces: 9x GbE-RJ45, 2x GbE SFP, 2x 10GbE SFP+
- Firewall Throughput: 40.0 Gbps
- Threat Protection Throughput: 2,770 Mbps
- Integrated 240 GB SATA-III SD
- For networks in the range of 50-250 users/devices
Sophos XGS 4300
Sophos XGS 4300 – Hardware Firewall with 4x 10GbE SFP+ for corporate datacenters an distributed enterprise
- Ethernet interfaces: 5x GbE RJ45, 4x 2.5GbE RJ45, 4x 10GbE SFP+
- Firewall Throughput: 75.0 Gbps
- Threat Protection Throughput: 4,800 Mbps
- Storage: 240 GB (SATA-III SD)
- For networks in the range of 250-1000 users/devices
WatchGuard Firebox T85-PoE
Được xếp hạng 5.00 5 saoWatchGuard Firebox T85-PoE – Up to 4.96 Gbps firewall throughput, 8 x 1Gb ports (2 x PoE+), 60 Branch Office VPNs
- Firewall (IMIX): 2.4 Gbps
- VPN (IMIX): 680 Mbps
- UTM Full Scan: 943 Mbps
- HTTPS + IPS: 576 Mbps
- Concurrent Connections (Proxy): 3.85Million (290,000)
WatchGuard Firebox M390
Được xếp hạng 5.00 5 saoWatchGuard Firebox M390 – Up to 2.4 Gbps UTM throughput, 8 x 1Gb ports, 250 Branch Office VPNs
- Firewall (UDP 1518) : 18 Gbps
- VPN (IMIX) : 1.8 Gbps
- UTM Full Scan : 2.4 Gbps
- HTTPS + IPS : 1.32 Gbps
- Concurrent Connections : 4.5Million
WatchGuard Firebox NV5
Được xếp hạng 5.00 5 saoWatchGuard Firebox NV5 – Includes SD-WAN and Up to 200 Mbps VPN throughput, 3 x 1 GbE ports, Up to 5 users
- Firewall (IMIX): 150 Mbps
- VPN (IMIX) 62 Mbps
- HTTPS Full Scan: 155 Mbps
- VPN Tunnels: 10 Branch Office; 10 Mobile
- Concurrent Connections: 73,000