Highlights
- World’s first ML-Powered NGFW
- Ten-time Leader in the Gartner Magic Quadrant for Network Firewalls
- Leader in the Forrester Wave: Enterprise Firewalls, Q4 2022
- Highest Security Effectiveness score in the 2019 NSS Labs NGFW Test Report, with 100% of evasions blocked
- Spans a range of performance needs for the distributed enterprise with a broad lineup
- Offers security in a desktop form factor
- Extends visibility and security to all devices, including unmanaged IoT devices, without the need to deploy additional sensors
- Supports high availability with active/active and active/passive modes
- Delivers predictable performance with security services
- Features a silent, fanless design with an optional redundant power supply for branch and home offices
- Simplifies deployment of large numbers of firewalls with optional Zero Touch Provisioning (ZTP)
- Supports centralized administration with Panorama network security management
| Interface Modes – L2, L3, tap, virtual wire (transparent mode) |
| Routing – OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-point protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
| SD-WAN Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change |
| IPv6 L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC |
| IPsec VPN Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
| VLANs 802.1Q VLAN tags per device/per interface: 4,094/4,094 |
| Firewall throughput (HTTP/appmix) – 2.9/2.2 Gbps |
| Threat Prevention throughput (HTTP/appmix) – 0.9/1.0 Gbps |
| IPsec VPN throughput – 17 Gbps |
| Max sessions – 200,000 |
| New sessions per second – 37,000 |
| Virtual systems (base/max) – 1/2 |
| I/O – (7) RJ45 |
| Management I/O – 10/100/1000 out-of-band management port (1), RJ45 console port (1), USB port (2) |
| Power Over Ethernet (PoE) – |
| Storage Capacity – 64 GB eMMC |
| Max BTU/hr – 78 |
| Input Voltage (Input Frequency) – 100-240 VAC (50–60 Hz) |
| Max Current Consumption – 1.5 A @ 12 VDC |
| Max Inrush Current – 2.1 A |
| Dimensions – 1.63″ H x 6.42″ D x 9.53″ W |
| Weight (Standalone Device/As Shipped) – 3.1 lbs/5.9 lbs |
| Safety – cTUVus, CB |
| EMI – FCC Class B, CE Class B, VCCI Class B |
| Certifications – See paloaltonetworks.com/company/certifications.html |
| Environment – Operating temperature: 32°F to 104°F, 0°C to 40°C Non-operating temperature: -4°F to 158°F, -20°C to 70°C Passive cooling |
