THÔNG TIN SẢN PHẨM
Chi tiết và thông số kỹ thuật
Thiết bị tường lửa Palo Alto Networks PA-820
| SKU | PAN-PA-820 |
|---|---|
| Performance and Capacities | |
| Firewall throughput (HTTP/appmix) | 1.6/1.5 Gbps |
| Threat Prevention throughput (HTTP/appmix) | 790/840 Mbps |
| IPsec VPN throughput | 1.4 Gbps |
| Max sessions | 128,000 |
| New sessions per second | 8,100 |
| Hardware Specifications | |
| I/O | 10/100/1000 (4), Gigabit SFP (8) |
| Management I/O | 10/100/1000 out-of-band management port (1) 10/100/1000 high availability (2) RJ-45 console port (1) USB port (1) Micro USB console port (1) |
| Storage Capacity | 240 GB SSD |
| Power Supply | Fixed AC 200 W power supply (1) |
| Power Consumption | Maximum: 120 W Average: 41 W |
| Max BTU/hr | 256 |
| Input Voltage (Input Frequency) | 100–240 VAC (50–60Hz) |
| Max Current Consumption | 1.0 A @ 100 VAC, 0.5 A @ 240 VAC |
| Max Inrush Current | 0.4 A @ 230 VAC, 0.96 A @ 120 VAC |
| Rack Mount (Dimensions) | 1U, 19” standard rack (1.75” H x 14” D x 17.125” W) |
| Weight (Standalone Device/As Shipped) | 11 lbs / 18 lbs |
| Safety | cTUVus, CB |
| EMI | FCC Class A, CE Class A, VCCI Class A |
| Environment | Operating temperature: 32° to 104° F, 0° to 40° C Non-operating temperature: -4° to 158° F, -20° to 70° C |
| Airflow | Front to back |
| Networking Features | |
|---|---|
| Interface Modes | L2, L3, tap, virtual wire (transparent mode) |
| Routing | OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
| SD-WAN | Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change |
| IPv6 | L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC |
| IPsec VPN | Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
| VLANs | 802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP |
| Network Address Translation | NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription |
| High Availability | Modes: active/active, active/passive Failure detection: path monitoring, interface monitoring |
| Zero Touch Provisioning (ZTP) | Available with -ZTP SKUs (PA-820-ZTP) Requires Panorama 9.1.3 or higher |
Data sheet Palo Alto Networks PA-800 Series
| PA-800 Series Hardware | |
|---|---|
| Palo Alto Networks PA-820 | #PAN-PA-820 |
| PA-820 – 3 Year Bundle | #820-TP-URL4-WF-BKLN-3YR |
| Includes Palo Alto Networks PA-820 (PAN-PA-820), Threat Prevention Subscription (PAN-PA-820-TP-3YR), PANDB URL Filtering Subscription (PAN-PA-820-URL4-3YR), WildFire Subscription (PAN-PA-820-WF-3YR), Partner Enabled Premium Support (PAN-SVC-BKLN-820-3YR), and DNS Security subscription (PAN-PA-820-DNS-3YR) | |
Extends native protection across all attack vectors with cloud-delivered security subscriptions
- Threat Prevention—inspects all traffic to automatically block known vulnerabilities, malware, vulnerability ex-ploits, spyware, command and control (C2), and custom intrusion prevention system (IPS) signatures.
- WildFire® malware prevention—unifies inline machine learning protection with robust cloud-based analysis to instantly prevent new threats in real time as well as dis-cover and remediate evasive threats faster than ever
- URL Filtering—prevents access to malicious sites and protects users against web-based threats, including cre-dential phishing attacks.
- DNS Security—detects and blocks known and unknown threats over DNS (including data exfiltration via DNS tun-neling), prevents attackers from bypassing security mea-sures, and eliminates the need for independent tools or changes to DNS routing.
- IoT Security—discovers all unmanaged devices in your network quickly and accurately with ML, without the need to deploy additional sensors. Identifies risks and vul-nerabilities, prevents known and unknown threats, pro-vides risk-based policy recommendations, and automates enforcement.
