PA L O A LT O N E T W O R K S : PA - 3 0 0 0 S e r i e s S p e c s h e e t
PA-3000 Series
PA-3060
Key Security Features:
CLASSIFY ALL APPLICATIONS, ON ALL PORTS,
ALL THE TIME WITH APP-ID™.
•Identify the application, regardless of port,
encryption (SSL or SSH) or evasive technique
employed.
•Use the application, not the port, as the basis
for all safe enablement policy decisions:
allow, deny, schedule, inspect, apply traffic
shaping.
•Categorize unidentified applications for
policy control, threat forensics, custom
App-ID creation, or packet capture for
App-ID development.
EXTEND SAFE APPLICATION ENABLEMENT
POLICIES TO ANY USER, AT ANY LOCATION,
WITH USER-ID™ AND GLOBALPROTECT™.
•Agentless integration with Active Directory,
LDAP, eDirectory Citrix and Microsoft
Terminal Services.
PA-3050
PA-3020
The Palo Alto Networks® PA-3000 Series is comprised of
the PA-3060, the PA-3050 and the PA-3020, all of which
are targeted at high speed Internet gateway deployments.
The PA-3000 Series manages network traffic flows using
dedicated processing and memory for networking, security,
threat prevention and management.
The controlling element of the PA-3000 Series is PAN-OS®, a security-specific
operating system that natively classifies all traffic, inclusive of applications, threats
and content, then ties that traffic to the user, regardless of location or device type.
The application, content, and user—in other words, the business elements that run
your business—are then used as the basis of your security policies, resulting in an
improved security posture and a reduction in incident response time.
•Easily integrate firewall policies with NAC,
802.1X wireless, Proxies and NAC solutions.
PERFORMANCE AND CAPACITIES1
•Deploy consistent policies to local and
remote users running Microsoft Windows,
Mac OS X, Linux, Android or iOS platforms.
Firewall throughput (App-ID enabled)
4 Gbps 4 Gbps
2 Gbps
Threat prevention throughput
2 Gbps
2 Gbps
1 Gbps
500 Mbps
500 Mbps
500 Mbps
50,000 50,000
50,000
500,000 500,000
250,000
1/6 1/6
1/6
IPSec VPN throughput New sessions per second
PROTECT AGAINST ALL THREATS—BOTH
Max sessions
KNOWN AND UNKNOWN—WITH CONTENT-ID™
Virtual systems (base/max )
2
AND WILDFIRE™.
•Block a range of known threats including
exploits, malware and spyware, across all
ports, regardless of common threat evasion
tactics employed.
•Limit unauthorized transfer of files and
sensitive data, and control non work-related
web surfing.
•Identify unknown malware, analyze it based
on more than 250 malicious behaviors, then
automatically create and deliver protection
in the next content update.
1
2
PA-3060 PA-3050
PA-3020
Performance and capacities are measured under ideal testing conditions using PAN-OS 6.0.
Adding virtual systems to the base quantity requires a separately purchased license.
To view additional information on the PA-3000 Series security features and
associated capacities, please visit www.paloaltonetworks.com/products
PA L O A LT O N E T W O R K S : PA - 3 0 0 0 S e r i e s S p e c s h e e t
The PA-3000 Series supports a wide range of networking features that allows you to more easily integrate our security features into
your existing network.
Networking Features
INTERFACE MODES
VLANS
• L2, L3, Tap, Virtual wire (transparent mode)
• 802.1q VLAN tags per device/per interface: 4,094/4,094
• Aggregate interfaces (802.3ad), LACP
ROUTING
• OSPFv2/v3, BGP with graceful restart, RIP, static routing
•Policy-based forwarding
•Point-to-Point Protocol over Ethernet (PPPoE)
•Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
IPV6
• L2, L3, tap, virtual wire (transparent mode)
•Features: App-ID, User-ID, Content-ID, WildFire and SSL decryption
• SLAAC
IPSEC VPN
• Key Exchange: Manual key, IKE v1 (Pre-shared key,
certificate-based authentication)
•Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
•Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
NETWORK ADDRESS TRANSLATION (NAT)
• NAT modes (IPv4): Static IP, dynamic IP, dynamic IP and port
(port address translation)
•NAT64
•Additional NAT features: Dynamic IP reservation, dynamic IP and
port oversubscription
HIGH AVAILABILITY
• Modes: Active/Active, Active/Passive
• Failure detection: Path monitoring, interface monitoring
Hardware Specifications
I/O
MEAN TIME BETWEEN FAILURE (MTBF)
PA-3060 - (8) 10/100/1000, (8) gigabit SFP, (2) 10 gigabit SFP+
PA-3050 | PA-3020 - (12) 10/100/1000, (8) SFP gigabit
• PA-3060 - 11.6 Years
• PA-3050/PA-3020 - 7 Years
MANAGEMENT I/O
RACK MOUNTABLE (DIMENSIONS)
• (1) 10/100/1000 out-of-band management port, (2) 10/100/1000 high
availability, (1) RJ-45 console port
PA-3060 - 1.5U, 19” standard rack (2.6”H x 14”D x 17.5”W)
PA-3050 | PA-3020 -1U, 19” standard rack (1.75”H x 17”D x 17”W)
STORAGE CAPACITY
WEIGHT (STAND ALONE DEVICE/AS SHIPPED)
• 120GB SSD
PA-3060 - 18lbs/27.5lbs
PA-3050 | PA-3020 - 15lbs/20lbs
POWER SUPPLY (AVG/MAX POWER CONSUMPTION)
SAFETY
PA-3060 - Redundant 400W AC (160/200)
PA-3050 | PA-3020 - Single 250W AC (150/200)
• CB, CSA
MAX BTU/HR
EMI
• 683
• FCC Class A, CE Class A, VCCI Class A, TUV
INPUT VOLTAGE (INPUT FREQUENCY)
CERTIFICATIONS
• 100-240VAC (50-60Hz)
See: https://www.paloaltonetworks.com/company/certifications.html
MAX CURRENT CONSUMPTION
ENVIRONMENT
• 2A@100VAC
• Operating temperature: 32° to 122° F, 0° to 50° C
• Non-operating temperature: -4° to 158° F, -20° to 70° C
To view additional information on the PA-3000 Series features and associated capacities, please visit www.paloaltonetworks.com/products.
4401 Great America Parkway
Santa Clara, CA 95054
Main:+1.408.753.4000
Sales:
+1.866.320.4788 Support:+1.866.898.9087
www.paloaltonetworks.com
Copyright ©2015, Palo Alto Networks, Inc. All rights reserved. Palo Alto Networks,
the Palo Alto Networks Logo, PAN-OS, App-ID and Panorama are trademarks of
Palo Alto Networks, Inc. All specifications are subject to change without notice.
Palo Alto Networks assumes no responsibility for any inaccuracies in this document
or for any obligation to update information in this document. Palo Alto Networks
reserves the right to change, modify, transfer, or otherwise revise this publication
without notice. PAN_SS_PA3000_052215
Download PDF
Similar pages