PAN-PA-5020 Firewall Product Price & Datasheet

PAN-PA-5020 Specification
Model	PA-5020
Performance and Capacities Description
Firewall throughput (App-ID enabled)	5 Gbps
Threat prevention throughput	2 Gbps
IPSec VPN throughput	2 Gbps
New sessions per second	120,000
Max sessions	1,000,000
IPSec VPN tunnels/tunnel interfaces	2,000
GlobalProtect (SSL VPN) concurrent users	5,000
SSL decrypt sessions	15,000
SSL Inbound Certificates	100
Virtual routers	20
Virtual systems (base/max2)	10/20*
Security zones	80
Max. number of policies	10,000
Hardware Description
I/O	(12)10/100/1000, (8) Gigabit SFP
Management I/O	(2) 10/100/1000 high availability, (1) 10/100/1000 out-of-band management, (1) RJ45 console port
Storage Options	Single or dual solid state disk drives
Storage Capacity	120GB, 240GB SSD, RAID 1
Power supply (Avg/max power consumption)	Redundant 450W AC (270W/340W)
Max BTU/HR	1,160
Input Voltage (Input Frequency)	100-240VAC (50-60Hz); -40 to -72 VDC
Max Current Consumption	8A@100VAC, 14A@48VDC
Mean Time Between Failure (MTBF)	6.5 Years
Max Inrush Current	80A@230VAC; 40A@120VAC; 40A@48VDC
Rack Mountable	2U, 19″ standard rack
Dimensions	3.5″H x 20″D x 17.5″W
Weight (Stand alone device/as shipped)	41lbs/55lbs
Safety	UL, CUL, CB
EMI	FCC Class A, CE Class A, VCCI Class A
Certifications	NEBS Level 3, FIPS level 2, ICSA
Environment
Operating temperature	32° to 122° F, 0° to 50° C
Non-operating temperature	-4° to 158° F, -20° to 70° C

The Palo Alto Networks PA-5000 Series is comprised of three high-performance models, the PA-5060, the PA-5050 and the PA-5020, all of which are targeted at high-speed datacenter and Internet gateway deployments.

Use the PA-5060, PA-5050, and PA-5020 to safely enable applications, users, and content in the high-speed datacenter, large Internet gateway, service provider, and multi-tenant environments. Predictable throughput levels of up to 20 Gbps are achieved using dedicated, function-specific processing for networking, security, content inspection, and management.

Quick Specs

Table 1 shows the Quick Specs.

Part number	PAN-PA-5020
Description	Palo Alto Networks PA-5020, 5 Gbps firewall throughput, 2 Gbps threat prevention throughput
Firewall throughput (App-ID enabled)	5 Gbps
Threat prevention throughput	2 Gbps
IPSec VPN throughput	2 Gbps
IPSec VPN tunnels/tunnel interfaces	2,000
Virtual routers	20
Security zones	80

Product Details

Security Features

1.Application Visibility

Port numbers, protocols, and IP addresses are useful for network devices, but they tell you nothing about what is on your network. Detailed information about the applications, users, and content traversing your network empowers you to quickly determine any risks they pose and quickly respond. Leveraging the rich context provided by Palo Alto Networks firewalls, our visualization, analysis, and reporting tools let you quickly learn more about activity on your network and analyze incidents from a current or comparative perspective.

2.User Visibility

An integral component for secure application enablement policies.

Traditionally, security policies were applied based on IP addresses, but the increasingly dynamic nature of users and applications mean that IP addresses alone have become ineffective as a policy control element for safe application enablement. Palo Alto Networks next-generation firewalls integrate with a wide range of enterprise directories and terminal services offerings.

3.Antivirus

Network-based Malware Protection.

The broadening use of social media, messaging and other non-work-related applications introduce a variety of vectors for viruses, spyware, worms and other types of malwares. Palo Alto Networks next-generation firewalls allow you to block unwanted applications with App-ID, and then scan allowed applications for malware.

4.Data Filtering & File Blocking

The application function level control, file blocking by type, and data filtering features of our next-generation firewalls allow you to implement a range of policies that help balance permitting the use of personal or non-work-related applications, with the business and security risks of unauthorized file and data transfer.

5.Modern Malware Protection

WildFire: Protection from targeted and unknown threats.

Modern attackers are increasingly using targeted and new unknown variants of malware to sneak past traditional security solutions. To address this, Palo Alto Networks developed WildFire, which identifies new malware in minutes. By executing suspect files in a virtual environment and observing their behavior, Palo Alto Networks identifies malware quickly and accurately, even if the malware sample has never been seen before. Once a file is deemed malicious, WildFire automatically generates protections that are delivered to all WildFire subscribers within an hour of detection. A WildFire license provides your IT team with a wealth of forensics to see exactly who was targeted, the application used in the delivery, and any URLs that were part of the attack.

Networking Features

1.Decryption

Identify & Control Encrypted Traffic.

Take control of your SSL and SSH encrypted traffic and ensure it is not being used to conceal unwanted activity or dangerous content. Using policy-based decryption and inspection, you can confirm that SSL and SSH are being used for business purposes only, instead of to spread threats or unauthorized data transfer.

2.IPv6

Safely enabling applications, users and content in IPv6 environments.

Our next-generation firewalls allow you to deploy consistent, safe application enablement policies across IPv6, IPv4 and mixed environments.

3.Networking

Our flexible networking architecture includes dynamic routing, switching, and VPN connectivity, which enables you to easily deploy Palo Alto Networks next-generation firewalls into nearly any networking environment.

4.VPN

Standards-based VPN Connectivity.

Secure site-to-site and remote user connectivity is a critical infrastructure component. Every Palo Alto Networks next-generation firewall platform allows you to easily and securely communicate between sites using standards-based IPSec VPN connections. Remote user communications are protected through a rich set of VPN features.

Compare to Similar Items

Table 2 shows the comparison.

Model	PAN-PA-5020	PAN-PA-5050	PAN-PA-5060
Firewall throughput (App-ID enabled)	5 Gbps	10 Gbps	20 Gbps
Threat prevention throughput	2 Gbps	5 Gbps	10 Gbps
IPSec VPN throughput	2 Gbps	4 Gbps	4 Gbps
New sessions per second	120,000	120,000	120,000
Max sessions	1,000,000	2,000,000	4,000,000
IPSec VPN tunnels/tunnel interfaces	2,000	4,000	8,000
GlobalProtect (SSL VPN) concurrent users	5,000	10,000	20,000
SSL decrypt sessions	15,000	45,000	90,000
SSL Inbound Certificates	100	300	1,000
Virtual routers	20	125	225
Virtual systems (base/max2)	10/20*	25/125*	25/225*
Security zones	80	500	900
Max. number of policies	10,000	20,000	40,000

Get More Information

Do you have any question about the PAN-PA-5020

Contact us now via Live Chat or [email protected].