PA-220
Compact, powerful protection (PA-220)
Palo Alto Networks PA-220 brings ML-Powered Next-Generation Firewall capabilities to distributed enterprise branch offices, retail locations, and midsize businesses.
Leave no security gaps. Protect even the smallest parts of your business with the PA-220 Next-Generation Firewall appliance. This small appliance secures your network by preventing a broad range of cyber threats while safely enabling SD-WAN.
PA-220 Highlights
• World’s first ML-Powered NGFW
• Eight-time Leader in the Gartner Magic Quadrant® for Network Firewalls
• Leader in the Forrester WaveTM: Enterprise Firewalls, Q3 2020
• Highest Security Effectiveness score in the 2019 NSS Labs NGFW Test Report, with 100% of evasions blocked
• Extends visibility and security to all devices, including unmanaged IoT devices, without the need to deploy additional sensors
• Supports high availability with active/active and active/passive modes
• Delivers predictable performance with security services
• Features a silent, fanless design with an optional redundant power supply for branch and home offices
• Simplifies deployment of large numbers of firewalls with optional Zero Touch Provisioning (ZTP)
• Eight-time Leader in the Gartner Magic Quadrant® for Network Firewalls
• Leader in the Forrester WaveTM: Enterprise Firewalls, Q3 2020
• Highest Security Effectiveness score in the 2019 NSS Labs NGFW Test Report, with 100% of evasions blocked
• Extends visibility and security to all devices, including unmanaged IoT devices, without the need to deploy additional sensors
• Supports high availability with active/active and active/passive modes
• Delivers predictable performance with security services
• Features a silent, fanless design with an optional redundant power supply for branch and home offices
• Simplifies deployment of large numbers of firewalls with optional Zero Touch Provisioning (ZTP)
| Table 1: PA-220 Performance and Capacities 1 | |
| Firewall throughput (HTTP/appmix)2 | 575/540 Mbps |
| Threat prevention throughput (HTTP/appmix)3 | 275/320 Mbps |
| IPsec VPN throughput4 | 540 Mbps |
| Max sessions | 64,000 |
| New sessions per second5 | 4,300 |
- Results were measured on PAN-OS 10.0.
- Firewall throughput is measured with App-ID and logging enabled, using 64KB HTTP/appmix transactions.
- Threat Prevention throughput is measured with App-ID, IPS, antivirus, antispyware, WildFire, file blocking, and logging enabled, utilizing 64 KB HTTP/ appmix transactions.
- IPsec VPN throughput is measured with 64 KB HTTP transactions and logging enabled
- New sessions per second is measured with application-override utilizing 1 byte HTTP transactions.
Additional Resources
- Prices may fluctuate without notice due to Rand/Dollar exchange rate.
- Kindly confirm pricing and availability prior to placing an order.
Frikkie Botha –
I have deployed multiple of these units for SME customers. The PA-220 from Palo Alto Networks might seem like a small device, but it handles traffic up to 500Mbps without any problems.