PA-3000 Series - Multi-Gig-Throughput Firewall

Multi-gig-throughput firewalls with extreme versatility

The PA-3000 Series next-generation firewalls combine high throughput and consistent architecture to deliver security to a wide range of enterprise applications and use cases.

Highest Security Effectiveness in the 2019 NSS Labs Next-Generation Firewall Test Report

Palo Alto Networks achieved the highest Security Effectiveness score among all twelve products included in the 2019 NSS Labs Next-Generation Firewaall group test. Our Next-Generation Firewall blocked 100% of evasions, and it earned a “Recommended” rating – the highest rating NSS Labs awards.

Learn more

Predictable performance, broad threat coverage

The PA-3000 Series next-generation firewalls enable you to secure your organization through advanced visibility and granular control of applications, users and content at throughput speeds up to 4 Gbps. Dedicated computing and programmable hardware resources assigned to networking, security, signature matching and management functions ensure predictable performance.

PA-3000 Series architecture

The PA-3000 Series family

PA-3060

4 Gbps firewall throughput
(App-ID enabled)
2 Gbps Threat Prevention throughput
500 Mbps IPsec VPN throughput
500,000 max sessions
50,000 new sessions per second
3,000 IPsec VPN tunnels/tunnel interfaces
2,000 SSL VPN users
10 virtual routers
1/6 virtual systems (base/max⁵)
40 security zones
5,000 max number of policies

PA-3050

4 Gbps firewall throughput
(App-ID enabled)
2 Gbps Threat Prevention throughput
500 Mbps IPsec VPN throughput
500,000 max sessions
50,000 new sessions per second
3,000 IPsec VPN tunnels/tunnel interfaces
2,000 SSL VPN users
10 virtual routers
1/6 virtual systems (base/max⁵)
40 security zones
5,000 max number of policies

PA-3020

2 Gbps firewall throughput
(App-ID enabled)
1 Gbps Threat Prevention throughput
500 Mbps IPsec VPN throughput
250,000 max sessions
50,000 new sessions per second
3,000 IPsec VPN tunnels/tunnel interfaces
1,000 SSL VPN users
10 virtual routers
1/6 virtual systems (base/max⁵)
40 security zones
2,500 max number of policies

^{1. Firewall throughput measured with App-ID and logging enabled utilizing 64KB HTTP transactions}
^{2. Threat Prevention throughput measured with App-ID, IPS, antivirus, anti-spyware, WildFire and logging enabled utilizing 64KB HTTP transactions}
^{3. IPsec VPN throughput measured with 64KB HTTP transactions}
^{4. New sessions per second measured with application-override utilizing 1-byte HTTP transactions}
^{5. Adding virtual systems to the base quantity requires a separately purchased license}

Request your Security Lifecycle Review (SLR)

The SLR examines your network traffic and generates a comprehensive report unique to your organization to help you discover the applications and threats exposing vulnerabilities in your security posture. Request now