Stacks Image 1923


Palo Alto Networks

Stacks Image 1924
  • Application visibility (e.g. Facebook, Gmail, etc.)
  • URL Filtering
  • Threat Prevention (IDS/IPS, viruses, spyware, malware, vulnerabilities, exploits)
  • Data Filtering (Credit Cards, SSN, file types, custom patterns)
  • QoS Traffic Shaping
  • SSL VPN for remote users
  • VPN
  • Firewall with security zones
  • Router
  • High performance single data pass architecture
  • High Performance 10 Gbps Firewall Models
  • App-ID Enter description here.

    Application Identification

    • Identifies more than 1,000 applications irrespective of port, protocol, SSL encryption or evasive tactic employed.
    • Enables positive enforcement application usage policies: allow, deny, schedule, inspect, apply traffic shaping.
    • Graphical visibility tools enable simple and intuitive view into application traffic.

    Stacks Image 2195
  • User-ID Enter description here.

    User Identification

    • Policy-based visibility and control over who is using the applications through seamless integration with Active Directory, LDAP, and eDirectory.
    • Identifies Citrix and Microsoft Terminal Services users, enabling visibility and control over their respective application usage.
    • Control non-Windows hosts via web based authentication.

    Stacks Image 2300
  • Content-ID Enter description here.

    Content Identification

    • Block viruses, spyware, and vulnerability exploits, limit unauthorized transfer of files and sensitive data such as CC# or SSN, and control non-work related web surfing.
    • Single pass software architecture enables multi-gigabit throughput with low latency while scanning content.

    Stacks Image 2628
  • Support / Maintenance Plans Enter description here.
    Stacks Image 3833
Enterprise Firewalls
  • NEWEST - PA-200 - 100 Mbps Firewall throughput, 4 x 10/100/1000
  • PA-500 - 250 Mbps Firewall throughput, 8 x 10/100/1000
  • PA-2020 - 500 Mbps firewall throughput, 12 x 10/100/1000 + 2 SFP
  • PA-2050 - 1 Gbps firewall throughput, 16 x 10/100/1000 + 4 SFP
  • PA-4020 - 2 Gbps firewall throughput, 16 x 10/100/1000 + 8 SFP
  • PA-4050 - 10 Gbps firewall throughput, 16 x 10/100/1000 + 8 SFP
  • PA-4060 - 10 Gbps firewall throughput, 4 x 10 Gigabit XFP + 4 Gigabit SFP
  • NEW - PA-5020 - 5 Gbps firewall throughput, 12 x 10/100/1000, 8 x Gigabit SFP
  • NEW - PA-5050 - 10 Gbps firewall throughput, 12 x 10/100/1000, 8 x Gigabit SFP, 4 x 10 Gigabit SFP+
  • NEW - PA-5060 - 20 Gbps firewall throughput, 12 x 10/100/1000, 8 x Gigabit SFP, 4 x 10 Gigabit SFP+
  • PA-200
    Stacks Image 3369
    The Palo Alto Networks PA-200 is ideally suited for small offices or branch offices. It offers a separate processor for control and dataplane. 16 GB SSD enables full visibility and reporting tools. Logging survives a network outage! 2.5 GB DRAM is dedicated to the control processor and 1.5 GB DRAM is dedicated to the dataplane processor.

    Cooling is done with an ultra-quiet 12dB fan and the dimensions are 9" x 7" x 1.7".
    Stacks Image 1928
    Stacks Image 1929
    Features not supported on PA-200:
    • Virtual systems
    • Jumbo frames
    • Link aggregation
    • Limited to HA-lite (Passive HA without session synch)
  • PA-500
    Stacks Image 3487
    The Palo Alto Networks PA-500 is ideally suited for Internet gateway deployments within medium to large branch offices and medium sized enterprises. The PA-500 manages network traffic flows with high performance processing and dedicated memory for networking, security, threat prevention and management. A high speed backplane smoothes the pathway between processors and the separation of data and control plane ensures that management access is always available, irrespective of the traffic load.
    Stacks Image 1930
  • PA-2xxx
    Stacks Image 3494
    Stacks Image 3496
    The Palo Alto Networks PA-2000 Series is comprised of two high performance platforms, the PA-2020 and the PA-2050, both of which are ideally suited for high speed Internet gateway deployments within large branch offices and medium sized enterprises. The PA-2000 Series manages network traffic flows using dedicated processing and memory for networking, security, threat prevention and management. A high speed backplane smoothes the pathway between processors and the separation of data and control plane ensures that management access is always available, irrespective of the traffic load.
    Stacks Image 1931
  • PA-4xxx
    Stacks Image 3503
    Stacks Image 3505
    The Palo Alto Networks PA-4000 Series is comprised of three high performance platforms, the PA-4060, the PA-4050 and the PA-4020, all of which are targeted at high speed Internet gateway deployments within enterprise environments. The PA-4000 Series manages multi-Gbps traffic flows using dedicated processing and memory for networking, security, threat prevention and management. A 10 Gbps backplane smoothes the pathway between processors and the physical separation of data and control plane ensures that management access is always available, irrespective of the traffic load.
    Stacks Image 1932
  • PA-5xxx
    Stacks Image 3512
    Stacks Image 3514
    The PA-5000 Series of enterprise firewalls is designed to protect data centers, large enterprise Internet gateways, and service provider environments where traffic demands dictate predictable firewall and threat prevention throughput. Traffic flows of up to 20 Gbps are effectively protected with more than 40 processors distributed across four functional areas: networking, security, content inspection and management.

    Reliability and resiliency is delivered by active/active or active/passive high availability; physical separation of data and control plane; and redundant, hot swappable components.
    Stacks Image 1933

Flexible Deployment Topologies (per port!)

  • Tap Mode Enter description here.
    Use tap mode with span or mirror ports from switches. Provides full application visibility without inline deployment. Cannot be use to provide active control or blocking.
    Stacks Image 3419
  • Virtual Wire Enter description here.
    Provides full visibility and active control or blocking without requiring any changes to the network topology. Can be used in parallel with existing firewalls. Often used to provide IDP capability and/or URL filtering without replacing existing firewalls.
    Stacks Image 1945
  • Layer 3 Enter description here.
    Use for firewall replacement along with application control and visibility. Offers consolidation for firewall, VPN, IPS and URL filtering.
    Stacks Image 3429
Forget the bolt on UTM solutions with limited performance and start thinking high performance firewalls with source/dest control, but with the added functionality of user/group control and true application visibility into over 1,000 applications versus primitive and now useless port control.

Founded by security visionary Nir Zuk, Palo Alto Networks offers real innovation in the firewall by enabling unprecedented visibility and control of applications and content – by user, not just IP address – at up to 10Gbps with no performance degradation. Based on patent-pending App-ID™ technology, their next generation firewalls accurately identify applications – regardless of port, protocol, evasive tactic or SSL encryption – and scan content to stop threats and prevent data leakage. Enterprises can for the first time embrace Web 2.0 and maintain complete visibility and control, while significantly reducing total cost of ownership through device consolidation.