PA-200

Next-generation firewall in a small footprint

The PA-200 is a next-generation firewall appliance in a small form factor that secures networks by preventing a broad range of cyberthreats while safely enabling applications.

Palo Alto has been named a Leader in the Gartner Magic Quadrant^® for Network Firewalls for the EIGHTH time in a row. This year, we’re once again positioned highest in ability to execute as well as furthest in completeness of vision.

Learn more

Consistent architecture, compact implementation

The PA-200 desktop form factor brings the same PAN-OS^® features that protect your largest data centers – including high availability with active/active and active/passive modes – to small organizations or distributed branch offices. It provides interactive visibility and granular control of applications, users and content at throughput speeds up to 100 Mbps.

Classifies all applications, on all ports, all the time

The PA-200 identifies any application, regardless of port, encryption (SSL or SSH) or evasive technique employed, and uses the application – not the port – as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect and apply traffic-shaping. It also categorizes unidentified applications for policy control, threat forensics or custom App-ID development.

Enforces security policies for any user, at any location

The PA-200 lets you deploy consistent policies to local and remote users running on Windows^®, macOS^®, Linux, Android^® or Apple^® iOS platforms. You get agentless integration with Microsoft^® Active Directory^® and Terminal Services, LDAP, Novell^® eDirectory^™ and Citrix^®, and you can integrate your firewall policies easily with 802.1X wireless, proxies, network access control and other sources of user identity.

Prevents known and unknown threats

The PA-200 blocks a range of threats, including exploits, malware and spyware, across all ports, regardless of common threat-evasion tactics employed. It limits the unauthorized transfer of files and sensitive data to safely enable non-work-related web surfing. It also identifies unknown malware, analyzes it based on hundreds of malicious behaviors, and then automatically creates and delivers protection.

The PA-200

100 Mbps firewall throughput
50 Mbps Threat Prevention throughput
50 Mbps IPsec VPN throughput
64,000 max sessions
1,000 new sessions per second
25 IPsec VPN tunnels/tunnel interfaces
25 SSL VPN users
10 security zones
250 max number of policies

Request your Security Lifecycle Review

The SLR examines your network traffic and generates a comprehensive report unique to your organization to help you discover the applications and threats exposing vulnerabilities in your security posture. Request now