Palo Alto PA-3420 (PAN-PA-3420)

Thiết bị tường lửa Palo Alto Networks PA-3420 (PAN-PA-3420)

1G/2.5G/5G/10G (12), 1G/10G SFP/SFP+ (10), 25G SFP28 (4)
100/1000 out-of-band management port (1), 100/1000 HA (2), 10G SFP+ HA (1), RJ-45 console port (1), Micro USB (1)
Redundant 450-watt AC (155W/190W)
Firewall throughput: 20.8 Gbps
IPsec VPN throughput: 9.9 Gbps
Max sessions: 2M (205000 per sec.)
Virtual systems (base/max): 1/11.

Thiết bị tường lửa Palo Alto Networks PA-3420

SKU	PAN-PA-3420
Performance and Capacities
Firewall throughput (HTTP/appmix)	20.8/16.9 Gbps
Threat Prevention throughput (HTTP/appmix)	7.6/8.7 Gbps
IPsec VPN throughput	9.9 Gbps
Max sessions	2M
New sessions per second	205,000
Virtual systems (base/max)	1/11
Hardware Specifications
I/O	1G/2.5G/5G/10G (12), 1G/10G SFP/SFP+ (10), 25G SFP28 (4)
Management I/O	100/1000 out-of-band management port (1) 100/1000 high availability (2), 10G SFP+ high availability (1) RJ-45 console port (1), Micro USB (1)
Storage Capacity	480 GB SSD
Power Supply (Avg/Max Power Consumption)	Redundant 450-watt AC (155W / 190W)
Max BTU/hr	650
Input Voltage Frequency	AC: 100–240 VAC (50/60Hz)
Max Current Consumption	AC: 1.9 A @ 100 VAC, 0.8 A @ 240 VAC
Mean Time Between Failure (MTBF)	22 years
Rack Mount Dimensions	1U, 19” standard rack (14.15” x 17.15” x 1.70”)
Weight (Standalone Device/As Shipped)	15.5 lbs / 25 lbs
Safety	cTUVus, CB
EMI	FCC Class A, CE Class A, VCCI Class A
Environment	Operating temperature: 32° to 122° F, 0° to 50° C Non-operating temperature: -4° to 158° F, -20° to 70° C Humidity tolerance: 10% to 90% Maximum altitude: 10,000 ft / 3,048 m Airflow: front to back

Networking Features
Interface Modes	L2, L3, tap, virtual wire (transparent mode)
Routing	OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-point protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 Bidirectional Forwarding Detection (BFD)
IPsec VPN	Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
VLANs	802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP
Network Address Translation	NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription
High Availability	Modes: active/active, active/passive, HA clustering Failure detection: path monitoring, interface monitoring

PA-3400 Series Hardware
Palo Alto Networks PA-3420 ML-Powered NGFWs	#PAN-PA-3420
Subscription
PA-3420, Advanced URL Filtering subscription, 1 year (12 months) term	#PAN-PA-3420-ADVURL
PA-3420, DLP subscription, 1 year (12 months) term.	#PAN-PA-3420-DLP
PA-3420, DNS security subscription, 1 year (12 months) term.	#PAN-PA-3420-DNS
PA-3420, GlobalProtect subscription, 1 year (12 months) term.	#PAN-PA-3420-GP
PA-3420, IoT subscription, 1 year (12 months) term.	#PAN-PA-3420-IOT
PA-3420, SaaS Inline subscription, 1 year (12 months) term.	#PAN-PA-3420-SAAS-INLINE
PA-3420, Threat prevention subscription, 1 year (12 months) term.	#PAN-PA-3420-TP
PA-3420, WildFire subscription, 1 year (12 months) term.	#PAN-PA-3420-WF
Advanced Threat Prevention subscription year 1, PA-3420	#PAN-PA-3420-ATP

Detects and Prevents Advanced Threats with Cloud-Delivered Security Services

Advanced Threat Prevention: Stop known exploits, malware, malicious URLs, spyware, and command and control (C2) with 96% prevention of web-based Cobalt Strike C2 and 48% more unknown C2 detected than the industry’s leading intrusion prevention (IPS) solution.
WildFire+ malware prevention: Ensure files are safe by automatically detecting and preventing unknown malware 180X faster with industry-largest threat intelligence and malware prevention engine.
Advanced URL Filtering: Enable safe access to the internet with the industry’s first r eal-time prevention of known and unknown websites, stopping 76% of malicious URLs 24 hours before other vendors.
DNS Security: Gain 40% more DNS-attack coverage and disrupt the 80% of attacks that use DNS for command and control and data theft, without requiring any changes to your infrastructure.
Enterprise DLP: Minimize risk of a data breach, stop out-of-policy data transfers, and enable compliance consistently across your enterprise, with 2X greater coverage of any cloud-delivered enterprise DLP.
SaaS Security: Stay ahead of the SaaS explosion with the industry’s only Next-Generation CASB to automatically see and secure all apps across all protocols.
IoT Security: Safeguard every “thing” and implement Zero Trust device security 20X faster, with the industry’s smartest security for smart devices.