PA-3000 Series

Multi-gig-throughput firewalls with extreme versatility

The PA-3000 Series next-generation firewalls combine high throughput and consistent architecture to deliver security to a wide range of enterprise applications and use cases.

Palo Alto has been named a Leader in the Gartner Magic Quadrant^® for Network Firewalls for the EIGHTH time in a row. This year, we’re once again positioned highest in ability to execute as well as furthest in completeness of vision.

Learn more

Predictable performance, broad threat coverage

The PA-3000 Series next-generation firewalls enable you to secure your organization through advanced visibility and granular control of applications, users and content at throughput speeds up to 4 Gbps. Dedicated computing and programmable hardware resources assigned to networking, security, signature matching and management functions ensure predictable performance.

PA-3000 Series architecture

The PA-3000 Series family

PA-3060

4 Gbps firewall throughput
(App-ID enabled)
2 Gbps Threat Prevention throughput
500 Mbps IPsec VPN throughput
500,000 max sessions
50,000 new sessions per second
3,000 IPsec VPN tunnels/tunnel interfaces
2,000 SSL VPN users
10 virtual routers
1/6 virtual systems (base/max⁵)
40 security zones
5,000 max number of policies

PA-3050

4 Gbps firewall throughput
(App-ID enabled)
2 Gbps Threat Prevention throughput
500 Mbps IPsec VPN throughput
500,000 max sessions
50,000 new sessions per second
3,000 IPsec VPN tunnels/tunnel interfaces
2,000 SSL VPN users
10 virtual routers
1/6 virtual systems (base/max⁵)
40 security zones
5,000 max number of policies

PA-3020

2 Gbps firewall throughput
(App-ID enabled)
1 Gbps Threat Prevention throughput
500 Mbps IPsec VPN throughput
250,000 max sessions
50,000 new sessions per second
3,000 IPsec VPN tunnels/tunnel interfaces
1,000 SSL VPN users
10 virtual routers
1/6 virtual systems (base/max⁵)
40 security zones
2,500 max number of policies

^{1. Firewall throughput measured with App-ID and logging enabled utilizing 64KB HTTP transactions}
^{2. Threat Prevention throughput measured with App-ID, IPS, antivirus, anti-spyware, WildFire and logging enabled utilizing 64KB HTTP transactions}
^{3. IPsec VPN throughput measured with 64KB HTTP transactions}
^{4. New sessions per second measured with application-override utilizing 1-byte HTTP transactions}
^{5. Adding virtual systems to the base quantity requires a separately purchased license}

Request your Security Lifecycle Review (SLR)

The SLR examines your network traffic and generates a comprehensive report unique to your organization to help you discover the applications and threats exposing vulnerabilities in your security posture. Request now

Are you ready to take the
Ultimate Test Drive?

If you're ready to take the test drive, pick the best time for you below!

All times are displayed in Pacific time.

Sorry, there are no Test Drives
scheduled at the moment

Visit the Test Drive page

Week 1
Week 2
Week 3
Week 4

Next-Generation Firewalls - Product Selection

Visit

Link

Best Practices

Multi-gig-throughput firewalls with extreme versatility

The PA-3000 Series next-generation firewalls combine high throughput and consistent architecture to deliver security to a wide range of enterprise applications and use cases.

Predictable performance, broad threat coverage

PA-3000 Series architecture