Palo Alto Networks PA-850
* Somente o Hardware, licenciamento sob consulta
Palo Alto Networks PA-850 Next Generation Firewall System up to 1.9 Gbps, 2x AC
Permanent classification of all applications on all portsEnforce security policies for all users, regardless of their locationExtends native protection to all attack vectors with cloud-based security subscriptionsEnables SD-WAN functionality
The PA-800 Series ML-powered next-generation firewalls (NGFW) are controlled by PAN-OS®, which natively classifies all traffic, including applications, threats, and content, and then allocates that traffic to the specific user, regardless of location or device type. The application, content, and user—the resources essential to your operations—are then used to inform your security guidelines to increase security posture and reduce incident response times.
| Performance and Capacities of the PA-850 | |
|---|---|
| Firewall throughput (HTTP/Appmix) | 2.1/2.1 Gbps |
| Threat Prevention throughput (HTTP/Appmix) | 1.0/1.2 Gbps |
| IPsec VPN Throughput | 1.6 Gbps |
| Max. number of sessions | 192.000 |
| New sessions per second | 13.000 |
| Network Features of the PA-850 | |
|---|---|
| Interface Modes | L2, L3, TAP, Virtual Wire (Transparent Mode) |
| Routing | OSPFv2/v3 with Graceful Restart, BGP with Graceful Restart, RIP, Static Routing Policy-Based Forwarding (PBF) Point-To-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2 and v3 |
| SD-WAN | Measurement of path quality (jitter, packet loss, latency) First Path Selection (PBF) Dynamic Path Change |
| IPv6 | L2, L3, TAP, Virtual Wire (Transparent Mode) Features: App ID, User ID, Content ID, WildFire, and SSL Decryption SLAAC |
| IPSec VPN | Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
| VLANs | 802.1Q VLAN tags per device and interface: 4,094/4,094 aggregate interface (802.3ad), LACP |
| Network Address Translation (NAT) | NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (Port Address Translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, customizable overallocation of dynamic IP addresses and ports |
| High Availability (HA) | Modes: Active/Active, Active/Passive Fault Detection: Path Monitoring, Interface Monitoring |
| Zero Touch Provisioning (ZTP) | Available with -ZTP SKUs (PA-850-ZTP) Requires Panorama 9.1.3 or later |
