Palo Alto Networks PA-1420

* Somente o Hardware, licenciamento sob consulta *

Comprised of the PA-1420 and PA-1410 models, the PA-1420 and PA-1410 models are designed to provide secure connectivity for branch offices of organizations and midsize businesses.

Highlights

  • The world's first ML-powered NGFW
  • Simplifies the deployment of a large number of firewalls with optional Zero Touch Provisioning (ZTP)
  • Native web proxy support in the NGFW to simplify and consolidate the management of firewall and proxy functions
  • Supports centralized management with Panorama Network Security Management
  • Extends visibility and security to all devices, including unmanaged IoT devices, without the need to install additional sensors
  • Supports high availability with active/active and active/passive modes
  • Maximizes Security Investments and Prevents Business Disruption with AIOps

ML-Powered Next-Generation Firewalls

The control element of the PA-1400 series is PANOS, the same software that runs on all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, including applications, threats, and content, and then allocates that traffic to the user, regardless of location or device type. The application, the content, and the user—in other words, the elements that keep your business running—then serve as the foundation for your security policies, resulting in an improved security posture and faster incident response time. 

Performance and Capacities of the PA-1410
Firewall throughput (HTTP/Appmix)9.9/9.5 Gbps
Threat Prevention throughput (HTTP/Appmix)5.0/4.8 Gbps
IPsec VPN Throughput 6.5 Gbps
Max. number of sessions1.400.000
New sessions per second140.000
Virtual Machines (Basic/Max)1/6


Network Features of the PA-1410
Interface ModesL2, L3, TAP, Virtual Wire (Transparent Mode)
RoutingOSPFv2/v3 with Graceful Restart, BGP with Graceful Restart, RIP, Static Routing
Policy-Based Forwarding (PBF)
Point-To-Point Protocol over Ethernet (PPPoE)
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2 and v3
SD-WANMeasurement of path quality (jitter, packet loss, latency)
First Path Selection (PBF)
Dynamic Path Change
IPv6L2, L3, TAP, Virtual Wire (Transparent Mode)
Features: App ID, User ID, Content ID, WildFire, and SSL Decryption
SLAAC
IPSec VPNKey exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication)
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
VLANs802.1Q VLAN tags per device and interface: 4,094/4,094 aggregate interface (802.3ad), LACP
Network Address Translation (NAT)NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (Port Address Translation)
NAT64, NPTv6
Additional NAT features: dynamic IP reservation, customizable overallocation of dynamic IP addresses and ports
High Availability (HA)Modes: Active/Active, Active/Passive
Fault Detection: Path Monitoring, Interface Monitoring
Zero Touch Provisioning (ZTP)Available with -ZTP SKUs (PA-820-ZTP) Requires Panorama 9.1.3 or later