Palo Alto Networks PA-5000 Series
Palo Alto Networks®
PA-5000 Series of next-generation firewall appliances is comprised of the
PA-5060, the PA-5050 and the PA-5020,
all of which are targeted at high-speed
data center and Internet gateway deployments. The PA-5000 Series delivers up to 20 Gbps of
throughput using dedicated processing
and memory for the key functional areas
of networking, security, threat
prevention and management
Key Security Features
Classifies all applications, on all ports,
all the time
•
Identifies
the application, regardless of port, encryp-tion (SSL or SSH), or evasive
technique employed.
•
Uses the
application, not the port, as the basis for all of your safe enablement policy
decisions: allow, deny, schedule, inspect and apply traffic-shaping.
•
Categorizes
unidentified applications for policy control, threat forensics or App-ID™
development.
Enforces security policies for any user, at
any location
• Deploys
consistent policies to local and remote
users running on the Windows®, Mac® OS X®,
Linux®, Android®, or Apple® iOS platforms.
• Enables
agentless integration with Microsoft® Active Directory®
and Terminal Services, LDAP, Novell® eDirectory™ and Citrix®.
•
Easily
integrates your firewall policies with 802.1X wireless, proxies, NAC solutions,
and any other source of user identity information.
Prevents known and unknown threats
•
Blocks a
range of known threats, including exploits, malware and spyware, across all
ports, regardless of common threat-evasion tactics employed.
•
Limits the
unauthorized transfer of files and sensitive data, and safely enables
non-work-related web surfing.
•
Identifies
unknown malware, analyzes it based on hundreds of malicious behaviors, and
then automatically creates and delivers
protection.
Performance and
capacities1
|
PA-5060
|
PA-5050
|
PA-5020
|
Firewall throughput (App-ID enabled)
|
20 Gbps
|
10 Gbps
|
5 Gbps
|
Threat prevention throughput
|
10 Gbps
|
5 Gbps
|
2 Gbps
|
IPsec VPN throughput
|
4 Gbps
|
4 Gbps
|
2 Gbps
|
Max sessions
|
4,000,000
|
2,000,000
|
1,000,000
|
New sessions per second
|
120,000
|
120,000
|
120,000
|
Virtual systems (base/max2)
|
25/225
|
25/125
|
10/20
|
The controlling element of the PA
-5000 Series is PAN-OS, a security-specific operating system that natively
classifies all traffic, inclusive of applications, threats and content, and
then ties that traffic to the user, regardless of location or device type. The
application, content and user – in other words, the business elements that run
your business – are then used as the basis of your security policies, resulting
in an improved security posture and a reduction in incident response time
Palo Alto Networks®
PA-5000 Series of next-generation firewall appliances is comprised of the
PA-5060, the PA-5050 and the PA-5020,
all of which are targeted at high-speed
data center and Internet gateway deployments. The PA-5000 Series delivers up to 20 Gbps of
throughput using dedicated processing
and memory for the key functional areas
of networking, security, threat
prevention and management
Key Security Features
Classifies all applications, on all ports,
all the time
•
Identifies
the application, regardless of port, encryp-tion (SSL or SSH), or evasive
technique employed.
•
Uses the
application, not the port, as the basis for all of your safe enablement policy
decisions: allow, deny, schedule, inspect and apply traffic-shaping.
•
Categorizes
unidentified applications for policy control, threat forensics or App-ID™
development.
Enforces security policies for any user, at
any location
• Deploys
consistent policies to local and remote
users running on the Windows®, Mac® OS X®,
Linux®, Android®, or Apple® iOS platforms.
• Enables
agentless integration with Microsoft® Active Directory®
and Terminal Services, LDAP, Novell® eDirectory™ and Citrix®.
•
Easily
integrates your firewall policies with 802.1X wireless, proxies, NAC solutions,
and any other source of user identity information.
Prevents known and unknown threats
•
Blocks a
range of known threats, including exploits, malware and spyware, across all
ports, regardless of common threat-evasion tactics employed.
•
Limits the
unauthorized transfer of files and sensitive data, and safely enables
non-work-related web surfing.
•
Identifies
unknown malware, analyzes it based on hundreds of malicious behaviors, and
then automatically creates and delivers
protection.
Performance and
capacities1
|
PA-5060
|
PA-5050
|
PA-5020
|
Firewall throughput (App-ID enabled)
|
20 Gbps
|
10 Gbps
|
5 Gbps
|
Threat prevention throughput
|
10 Gbps
|
5 Gbps
|
2 Gbps
|
IPsec VPN throughput
|
4 Gbps
|
4 Gbps
|
2 Gbps
|
Max sessions
|
4,000,000
|
2,000,000
|
1,000,000
|
New sessions per second
|
120,000
|
120,000
|
120,000
|
Virtual systems (base/max2)
|
25/225
|
25/125
|
10/20
|
The controlling element of the PA
-5000 Series is PAN-OS, a security-specific operating system that natively
classifies all traffic, inclusive of applications, threats and content, and
then ties that traffic to the user, regardless of location or device type. The
application, content and user – in other words, the business elements that run
your business – are then used as the basis of your security policies, resulting
in an improved security posture and a reduction in incident response time
