PA-3000 SERIES

Prevent threats, safely enable applications

Multi-gig-throughput firewalls with extreme versatility

The PA-3000 Series next-generation firewalls combine high throughput and consistent architecture to deliver security to a wide range of enterprise applications and use cases.

Palo Alto has been named a Leader in the Gartner Magic Quadrant® for Network Firewalls for the EIGHTH time in a row. This year, we’re once again positioned highest in ability to execute as well as furthest in completeness of vision.

Learn more

Predictable performance, broad threat coverage

The PA-3000 Series next-generation firewalls enable you to secure your organization through advanced visibility and granular control of applications, users and content at throughput speeds up to 4 Gbps. Dedicated computing and programmable hardware resources assigned to networking, security, signature matching and management functions ensure predictable performance.




PA-3000 Series architecture

The PA-3000 Series family

PA-3060

  • 4 Gbps firewall throughput
    (App-ID enabled)
  • 2 Gbps Threat Prevention throughput
  • 500 Mbps IPsec VPN throughput
  • 500,000 max sessions
  • 50,000 new sessions per second
  • 3,000 IPsec VPN tunnels/tunnel interfaces
  • 2,000 SSL VPN users
  • 10 virtual routers
  • 1/6 virtual systems (base/max5)
  • 40 security zones
  • 5,000 max number of policies

PA-3050

  • 4 Gbps firewall throughput
    (App-ID enabled)
  • 2 Gbps Threat Prevention throughput
  • 500 Mbps IPsec VPN throughput
  • 500,000 max sessions
  • 50,000 new sessions per second
  • 3,000 IPsec VPN tunnels/tunnel interfaces
  • 2,000 SSL VPN users
  • 10 virtual routers
  • 1/6 virtual systems (base/max5)
  • 40 security zones
  • 5,000 max number of policies

PA-3020

  • 2 Gbps firewall throughput
    (App-ID enabled)
  • 1 Gbps Threat Prevention throughput
  • 500 Mbps IPsec VPN throughput
  • 250,000 max sessions
  • 50,000 new sessions per second
  • 3,000 IPsec VPN tunnels/tunnel interfaces
  • 1,000 SSL VPN users
  • 10 virtual routers
  • 1/6 virtual systems (base/max5)
  • 40 security zones
  • 2,500 max number of policies

1. Firewall throughput measured with App-ID and logging enabled utilizing 64KB HTTP transactions
2. Threat Prevention throughput measured with App-ID, IPS, antivirus, anti-spyware, WildFire and logging enabled utilizing 64KB HTTP transactions
3. IPsec VPN throughput measured with 64KB HTTP transactions
4. New sessions per second measured with application-override utilizing 1-byte HTTP transactions
5. Adding virtual systems to the base quantity requires a separately purchased license

 

Request your Security Lifecycle Review (SLR)

The SLR examines your network traffic and generates a comprehensive report unique to your organization to help you discover the applications and threats exposing vulnerabilities in your security posture. Request now

 

 

Are you ready to take the
Ultimate Test Drive?

If you're ready to take the test drive, pick the best time for you below!

All times are displayed in Pacific time.


Learn


Evaluate


Implement



Get the latest news, invites to events, and threat alerts

Popular Resources

Legal Notices

Popular Links

Report a Vulnerability