| Specifications |
Palo Alto PAN-PA-820 Firewall |
| Firewall throughput (HTTP/appmix) * |
1.6/1.5 Gbps |
| Threat Prevention throughput (HTTP/appmix) † |
790/840 Mbps |
| IPsec VPN throughput ‡ |
1.4 Gbps |
| Max concurrent sessions § |
128.000 |
| New sessions per second || |
8.100 |
| Notes: |
Note: Results were measured on PAN-OS 11.0.
* Firewall throughput is measured with App-ID and logging enabled, using 64 KB HTTP/appmix transactions.
† Threat Prevention throughput is measured with App-ID, IPS, antivirus, antispyware, WildFire, DNS Security, file blocking, and logging enabled,
utilizing 64 KB HTTP/appmix transactions.
‡ IPsec VPN throughput is measured with 64 KB HTTP transactions and logging enabled.
§ Max concurrent sessions are measured utilizing HTTP transactions.
|| New sessions per second is measured with application override utilizing 1-byte HTTP transactions. |
| Networking Features |
| Interface Modes |
L2, L3, tap, virtual wire (transparent mode) |
| Routing |
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing
Policy-based forwarding
Point-to-Point Protocol over Ethernet (PPPoE)
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
| SD-WAN |
Path quality measurement (jitter, packet loss, latency)
Initial path selection (PBF)
Dynamic path change |
| IPv6 |
L2, L3, tap, virtual wire (transparent mode)
Features: App-ID, User-ID, Content-ID, WildFire, and SSL decryption
SLAAC |
| IPsec and SSL VPN |
Key exchange: manual key, IKEv1, and IKEv2 (preshared key, certificate-based authentication)
Encryption: 3des, AES (128-bit, 192-bit, 256-bit)
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
GlobalProtect Large Scale VPN for simplified configuration and management (Requires GlobalProtect License.)
Secure access over IPsec and SSL VPN tunnels using GlobalProtect Gateway and Portals (Requires GlobalProtect License.) |
| VLANs |
802.1Q VLAN tags per device/per interface: 4,094/4,094
Aggregate interfaces (802.3ad), LACP |
| Network Address Translation |
NAT modes (IPv4): static IP, Dynamic IP, Dynamic IP and Port (port address translation)
NAT64, NPTv6
Additional NAT features: Dynamic IP reservation, tunable Dynamic IP and Port oversubscription |
| High Availability |
Modes: active/active, active/passive
Failure detection: path monitoring, interface monitoring |
| Zero Touch Provisioning (ZTP) |
Available with -ZTP SKUs (PA-220-ZTP)
Requires Panorama 9.1.3 or higher |
| Hardware Specifications |
| I/O |
10/100/1000 (4), Gigabit SFP (8) |
| Management I/O |
10/100/1000 out-of-band management port (1)
10/100/1000 high availability (2)
RJ-45 console port (1)
USB port (1)
Micro USB console port (1) |
| Storage Capacity |
240 GB SSD |
| Power Supply |
Fixed AC 200 W power supply (1) |
| Power Consumption |
Maximum: 120 W
Average: 41 W |
| Max BTU/hr |
256 |
| Input Voltage (Input Frequency) |
100–240 VAC (50–60 Hz) |
| Max Current Consumption |
1.0 A @ 100 VAC, 0.5 A @ 240 VAC |
| Max Inrush Current |
0.4 A @ 230 VAC, 0.96 A @ 120 VAC |
| Rack Mount (Dimensions) |
1U, 19” standard rack (1.75” H x 14” D x 17.125” W) |
| Weight (Standalone Device/As Shipped) |
11 lbs / 18 lbs |
| Safety |
cTUVus, CB |
| EMI |
FCC Class A, CE Class A, VCCI Class A |
| Environment |
Operating temperature: 32°F to 104°F, 0°C to 40°C
Nonoperating temperature: -4°F to 158°F, -20°C to 70°C |
| Airflow |
Front to back |
Add A Review
Your email address will not be published. Required fields are marked
Your Rating