Performance and Capacities¹

PA-7080 System²

PA-7050 System²

PA-5260

PA-5250

PA-5220

Firewall throughput (App-ID)

200 Gbps

120 Gbps

72.2 Gbps

35.9 Gbps

18.5 Gbps

Threat prevention throughput IPSec VPN throughput

100 Gbps

60 Gbps

30 Gbps

20.3 Gbps

9.2 Gbps

80 Gbps

48 Gbps

21 Gbps

14 Gbps

5 Gbps

New sessions per second

1,200,000

720,000

458,000

348,000

169,000

3

3

Max sessions

Virtual systems (base/max²)

40,000,000/80,000,000

24,000,000/48,000,000

32,000,000

8,000,000

4,000,000

25/225

25/225

25/225

25/125

10/20

Hardware Specifications

4

PA-7080 System

PA-7050 System

PA-5260

PA-5250

PA-5220

Interfaces supported NPC option 1

Interfaces supported NPC option 2⁴

Up to (20) QSFP+, (120) SFP+

Up to (12) QSFP+, (72) SFP+

(4) 100/1000/10G Cu, (16) 1G/10G SFP/SFP+, 

(4) 40G/100G QSFP28

(4) 100/1000/10G Cu, 

(16) 1G/10G SFP/SFP+, 

(4) 40G QSFP+

Up to (120) 10/100/1000, (80) SFP,

(40) SFP+

Up to (72) 10/100/1000, (48) SFP, (24)

SFP+

Management I/O

(2) 10/100/1000, (2) QSFP+ high availability, (1) 10/100/1000 out-of-band management, (1) RJ45 console

(2) 10/100/1000 Cu, (1) 10/100/1000 out-of-band management, (1) RJ45 console

                       (1)    40G/100G QSFP28 HA

            (1)    40G QSFP+ HA

Rack mountable?

19U, 19” standard rack

9U, 19” standard rack or 14U, 19” standard rack with optional Airduct kit

3U, 19” standard rack

Power supply

4x2500W AC (2400W / 2700) expandable to 8

4x2500W AC (2400W / 2700W)

2x1200W AC or DC (1:1 Fully Redundant)

Redundant power supply? Disk drives

Yes

Yes

2TB RAID1

System: 240GB SSD, RAID1. Log: 2TB HDD, RAID1

Hot swap fans

Yes

Yes

Firewall throughput (App-ID)

20 Gbps

10 Gbps

5 Gbps

4 Gbps

4 Gbps

2 Gbps

Threat prevention throughput

10 Gbps

5 Gbps

2 Gbps

2 Gbps

2 Gbps

1 Gbps

IPSec VPN throughput

4 Gbps

4 Gbps

2 Gbps

500 Mbps

500 Mbps

500 Mbps

New sessions per second

120,000

120,000

120,000

50,000

50,000

50,000

Max sessions

Virtual systems (base/max²)

4,000,000

2,000,000

1,000,000

500,000

500,000

250,000

25/225

25/125

10/20

1/6

1/6

1/6

Hardware Specifications

PA-5060

PA-5050

PA-5020

PA-3060

PA-3050

PA-3020

Interfaces supported⁴

(12) 10/100/1000, (8) SFP, (4) 10 SFP+

(12) 10/100/1000, (8) SFP

(8) 10/100/1000, (8) SFP, (2) 10

SFP+

(12) 10/100/1000, (8) SFP

Management I/O

(2) 10/100/1000 high availability, (1) 10/100/1000 out-of-band management, (1) RJ45 console

(1) 10/100/1000 out-of-band management,(2) 10/100/1000 high availability, (1) RJ-45 console

Rack mountable?

2U, 19” standard rack

1.5U, 19” standard rack

1U, 19” standard rack

Power supply

Redundant power supply?

Redundant 450W AC or DC

Redundant 400W AC

250W AC

Yes

Yes

No

Disk drives

120GB or 240GB SSD, RAID Optional

120GB SSD

Performance and Capacities¹

PA-850

PA-820

PA-500

PA-220

PA-200

Firewall throughput (App-ID) Threat prevention throughput

1.9 Gbps

940 Mbps

250 Mbps

500 Mbps

100 Mbps

780 Mbps

610 Mbps

100 Mbps

150 Mbps

50 Mbps

IPSec VPN throughput

500 Mbps

400 Mbps

50 Mbps

100 Mbps

50 Mbps

New sessions per second Max sessions

9,500

8,300

7,500

4,200

1,000

192,000

128,000

64,000

64,000

64,000

Virtual systems (base)

1

1

N/A

1

N/A

Hardware Specifications

PA-850

PA-820

PA-500

PA-220

PA-200

Interfaces supported⁴

(4) 10/100/1000, (4/8) SFP, (0/4)

10 SFP+

(4) 10/100/1000, (8) SFP

(8) 10/100/1000

(8) 10/100/1000

(4) 10/100/1000

Management I/O

(1) 10/100/1000 out-of-band management, (2) 10/100/1000 high availability, (1) RJ-45 console, (1) USB, (1) Micro USB console

(1) 10/100/1000 out-of-band management, (1) RJ-45 console

(1) 10/100/1000 out-of-band management, (1) RJ-45 console,

(1) USB, (1) Micro USB console

(1) 10/100/1000 out-ofband management, (1) RJ-45 console

Rack mountable?

1U, 19” standard rack

1U, 19” standard rack

1.62”H X 6.29”D X 8.07”W

1.75” H x 7”D x 9.25”W

Power supply

Redundant power supply?

Two 500W AC. One is redundant.

200W

180W

Dual redundant 40W

40W

Yes

No

No

Yes (optional)

No

Disk drives

Hot swap fans

240GB SSD

160GB

32GB EMMC

16GB SSD

No

No

No

No

Performance and Capacities ¹

VM-50

VM-100/VM-200

VM-300/VM-1000HV

VM-500

VM-700

Firewall throughput (App-ID) Threat prevention throughput

200 Mbps

2 Gbps

4 Gbps

8 Gbps

16 Gbps

100 Mbps

1 Gbps

2 Gbps

4 Gbps

8 Gbps

IPSec VPN throughput 

100 Mbps

1 Gbps

1.8 Gbps

4 Gbps

6 Gbps

1

New sessions per second

CPU Configurations Supported

3,000

15,000

30,000

60,000

120,000

25

2

2,4

2,4,8

2,4,8,16

Dedicated Memory (Minimum)

Dedicated Disk drive capacity (Min)

4.5GB

6.5GB

9GB

16GB

56GB

32GB⁶

60GB

60GB

60GB

60GB

Supported Environments

VMware ESXi 5.1/5.5/6.0 (Standalone)

KVM on CentOS/RHEL and Ubuntu

Microsoft Hyper-V (Windows 2012 R2 Server) 

Yes

NSX Manager 6.0/6.1/6.2  

No

Yes

Yes

No

Citrix Xen Server on SDX 10.1

No

Amazon AWS

Y (BYOL Only)

Y (BYOL and Marketplace)

Y (BY

OL Only)

Microsoft Azure

Firewall

Thousands of applications for visibility and control, ability to create custom applications, ability to manage unknown traffic based on policy

P

User identification and control: VPNs, WLAN Controllers, Captive Portal, Proxies, Active Directory, eDirectory, Exchange, Terminal Services, Syslog parsing, XML API

P

Granular SSL decryption & inspection (inbound and outbound), per-policy SSH control (inbound and outbound)

P

Networking: Dynamic routing (RIP, OSPF, BGP, Multiprotocol BGP), DHCP, DNS, NAT, Route redistribution, ECMP, LLDP, BFD, Tunnel content inspection

P

QoS: Policy-based traffic shaping (priority, guaranteed, maximum) per application, per user, per tunnel, based on DSCP classification

P

Virtual systems: Logical, separately-managed firewall instances within a single physical firewall, with each virtual system’s traffic kept separate

P

Zone-based network segmentation and zone protection; DoS protection against flooding of new sessions

P

Threat Prevention (subscription required) 

Prevention of a wide variety of threats, including vulnerability exploits, malware and botnets

P

Blocking polymorphic malware by focusing on payload, instead of hash or filename

P

Protections automatically updated every five minutes (with WildFire subscription)

P

Advanced Malware Protection (WildFire subscription required)

Dynamic analysis: Detonation of files in a custom-build evasion resistant virtual environment, enabling detection of zero-day malware and exploits

P

Static analysis: Detection of malware and exploits that attempt to evade dynamic analysis, as well as instantly identifying variants of existing malware

P

Machine learning: Extraction of thousands of unique features from each file, training a predictive machine learning classifier to identify new malware and exploits

P

Bare metal analysis: Evasive threats automatically sent to a real hardware environment for detonation, entirely removing an adversary’s ability to deploy anti-VM analysis

P

Automated signature updates every 5 minutes for zero-day malware and exploits discovered by any WildFire subscriber

P

Contextual Threat Intelligence Service (AutoFocus subscription required)

Context around attacks, adversaries and campaigns, including targeted industries

P

Accelerated analysis and response efforts, including prioritized alerts for the most critical threats

P

URL Filtering (Subscription Required)

Protection against malicious sites exposing your people and data to malware and exploit kits 

P

Protection from credential phishing by inspecting webpages to determine whether the content and purpose is malicious in nature

P

Custom URL categories, customizable alerts and notification pages

P

File and Data Filtering

Bidirectional control over the unauthorized transfer of file types and Social Security Numbers, Credit Card Numbers, and custom data patterns

P

Mobile Security (GlobalProtect subscription required)

Remote access VPN (SSL, IPSec, clientless) and mobile threat prevention and policy enforcement based on apps, users, content, device and device state

P

BYOD: app-level VPN for user privacy

P

Management and Visibility Tools (Panorama subscription required for managing multiple firewalls)

Intuitive policy control with applications, users, threats, advanced malware protection, URL, file types, data patterns – all in the same policy 

P

Actionable insight into traffic and threats with Application Command Center (ACC), fully customizable reporting

P

Aggregated logging and event correlation

P

Consistent management of all hardware and all VM-Series, role-based access control, logical and hierarchical device groups, and templates

P

GUI, CLI, XML-based REST API

P