Palo Alto Networks | HW Architecture
HomeIntroduction to PA-SeriesPA-7000 SeriesPA-5200 SeriesPA-3200 SeriesPA-800 SeriesPA-220/PA-220RPanorama™ - Network Security ManagementDetailed Specs on PA-SeriesReturn to Palo Alto Networks Site

PA-Series ML-Powered Next-Generation Firewalls

HARDWARE ARCHITECTURES

Introducing PA-Series

About PA-Series
Take a closer look at the hardware architecture of each PA-Series Next-Generation Firewall family by selecting from the “Select” menu above or one of the PA-Series buttons below.

PA-Series ML-Powered Next-Generation Firewalls

PA-7000 Series
PA-5200 Series
PA-3200 Series
PA-800 Series
PA-220/PA-220R

Network Security Management

Panorama™

PA-7000

About PA-7000 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

12-core

RAM

SW RAID

ssd1

ssd2

Data Plane

100G-NPC

offload engine

fpga

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

RAM

CPU

Network Processing

flow control | route lookup | MAC lookup | QoS | NAT

RAM

ASIC

Data Interfaces

DPC-A

offload engine

2 x
FPGA

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

RAM

CPU

PA-5200 Series

About PA-5200 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

PA-5220

CPU

8-core

PA-5250
PA-5260
PA-5280

CPU

12-core

RAM

STORAGE

Data Plane

offload engine

fpga

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

PA-5220

CPU

40-core

PA-5250

CPU

2 x 48-core

PA-5260
PA-5280

CPU

3 x 48-core

RAM

Network Processing

flow control | route lookup | MAC lookup | QoS | NAT

RAM

ASIC

Data Interfaces

PA-3200

About PA-3200 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

4-core

RAM

STORAGE

Data Plane

Signature Matching

RAM

FPGA

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

PA-3220

CPU

10 core

PA-3250

CPU

12 core

PA-3260

CPU

16 core

RAM

Network Processing

flow control | route lookup | MAC lookup | QoS | NAT

RAM

FPGA

Data Interfaces

PA-800

About PA-800 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

3 (of 7/8) cores

RAM

STORAGE

Data Plane

Security, Signature
and Network Processing

APP-ID | User-ID | URL match | policy match | app decoding
SSL/IPSec | decompression | flow control | route lookup
MAC lookup | QoS | NAT

PA-820

CPU

4 (of 7) cores

PA-850

CPU

5 (of 8) cores

RAM

Data Interfaces

PA-220/PA-220R

About PA-220/220R
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

2 (of 4) Cores

RAM

STORAGE

Data Plane

Security, Signature
and Network Processing

APP-ID | User-ID | URL match | policy match | app decoding | SSL/IPSec | decompression
flow control | route lookup | MAC lookup | QoS | NAT

RAM

CPU

2 (of 4) Cores

Data Interfaces

Panorama™
Network Security Management

About Panorama™
Visit Webpage
Download Datasheet
Home

M-600

MANAGEMENT

configuration | logging | reporting

CPU

28 core

RAM

256 GB

Storage

12 Bays
I/O: 10/100/1000 (4), DB9 console serial port (1), USB port (1)
Panorama Mode: 25,000 logs/second
Log Collector Mode: 50,000 logs/second
48 Terabytes Storage Max

M-200

MANAGEMENT

configuration | logging | reporting

CPU

8 core

RAM

128 GB

Storage

4 Bays
I/O: 10/100/1000 (4), DB9 console serial port (1), USB port (1), 10 GigE ports (2)
Panorama Mode: 10,000 logs/second
Log Collector Mode: 28,000 logs/second
16 Terabytes Storage Max

Get Detailed Specs

Home

PA-Series ML-Powered Next-Generation Firewalls

Comparison Info?

Looking for more information? To compare and review detailed specification of all appliances from the PA-Series family of next-generation firewalls, go to:

More Info?

To learn more about comprehensive security that’s natively integrated with our Next-Generation Firewalls, go to:
COMPARE FIREWALLS
SECURITY SUBSCRIPTIONS

About PA-7000 Series

Palo Alto Networks PA-7000 Series ML-Powered Next-Generation Firewalls offer superior security within high-performance, business-critical environments, including large data centers and high-bandwidth network perimeters.

Designed to handle growing throughput needs for application-, user-, and device-generated data, these systems offer amazing performance, prevention capabilities to stop the most advanced cyber attacks, and high-throughput decryption to stop threats hiding under the veil of encryption. Built to maximize security-processing resource utilization and automatically scale as new computing power becomes available, the PA-7000 Series offers simplicity defined by a single-system approach to management and licensing. Palo Alto Networks PA-7000 Series ML-Powered Next-Generation Firewalls offer superior security within high-performance, business-critical environments, including large data centers and high-bandwidth network perimeters.

About PA-5200 Series

Palo Alto Networks PA-5200 Series ML-Powered Next-Generation Firewalls—comprising the PA-5280, PA-5260, PA-5250, and PA-5220—are ideal for high-speed data center, internet gateway, and service provider deployments. Pop Up 2: The PA-5200 Series delivers up to 67 Gbps of throughput, using dedicated processing and memory, for the key functional areas of networking, security, threat prevention, and management.

About PA-3200 Series

Palo Alto Networks PA-3200 Series ML-Powered Next-Generation Firewalls—comprising the PA-3260, PA-3250, and PA-3220—are targeted at high-speed internet gateway deployments. PA-3200 Series appliances secure all traffic, including encrypted traffic, using dedicated processing and memory for networking, security, threat prevention, and management.

About PA-800 Series

Palo Alto Networks PA-800 Series ML-Powered Next-Generation Firewalls, comprising the PA-820 and PA-850, are designed to provide secure connectivity for organizations’ branch offices as well as midsize businesses. Enables you to safely implement SD-WAN and delivers an exceptional end user experience by minimizing latency, jitter, and packet loss.

About PA-220/PA-220R

Protect even the smallest parts of your business with the PA-220/PA-220R ML-Powered Next-Generation Firewall appliance. With an App-ID throughput of 580 Mpbs, this small appliance secures your network by preventing a broad range of cyber threats while safely enabling SD-WAN.

The PA-220R ruggedized appliance brings next-generation capabilities to industrial applications in harsh environments.

About PA-Series

PA-Series constitute the full range of our ML-Powered Next-Generation Firewall physical appliances that are easy to deploy into your organization’s network and purposefully designed for simplicity, automation, and integration. No matter where you need protection, our PA-Series ML-Powered Next-Generation Firewalls are architected to provide consistent protection to your entire network – from your headquarters and office campus, branch offices and data center to your mobile and remote workforce.

Panorama™ - Network Security Management

IT/Network Security teams are stretched thin with having to manage increasingly complex security tools and multiple management consoles. Security deployments can overload teams with complex security rules and data from multiple sources. 

Panorama™ provides a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations. It reduces complexity by simplifying the configuration, deployment, and management of your security posture. Receive centralized visibility and comprehensive insights into your network traffic, logs, and threats. Reduce administrative workload by helping manage updates, automating threat responses, and utilize API-based integrations with third-party systems.

The Palo Alto Networks® M-600 and M-200 appliances are multi-function appliances that you can configure to function in Panorama™ Management mode, Panorama Management-only mode, Panorama Log Collector mode, or PAN-DB Private Cloud mode (M-600 only).
Return to Palo Alto Networks Main Site
© 2020 Palo Alto Networks, Inc. All rights reserved.