PALO ALTO PAN-PA-5420-AC FIREWALL
$122,472
Description
Palo Alto PAN-PA-5420-AC Firewall
The Palo Alto PA-5400 Series is designed for high-speed deployments such as data centers and internet gateways. These NGFWs extend the visibility and security into all devices across multiple locations with high availability.
The PAN-PA-5420-AC supports full Layer 7 inspection. This security technology allows the analysis of network traffic at the application layer. The PAN-PA-5420-AC offers a built-in Policy Optimizer that simplifies the migration from legacy Layer 4 security rules.
Key Features:
- SD-WAN functionality
- IoT security
- Firewall throughput (HTTP/appmix): 68.0/56.0 Gbps
Properties
| Properties | Palo Alto PAN-PA-5420-AC Firewall |
| Description | The PAN-PA-5420-AC offers a built-in Policy Optimizer that simplifies the migration from legacy Layer 4 security rules. |
| Product Family | PA-5400 Series firewalls |
| Product Type | Firewall |
| Quick tech specs | • 5420 • with redundant AC power supplies • 100 Gigabit Ethernet • 25 Gigabit Ethernet • 2U • Security appliance • 40 Gigabit LAN • 5 GigE • front to back airflow • rack-mountable |
Specifications
| Palo Alto PAN-PA-5420-AC Firewall | |
| Firewall throughput (HTTP/appmix) ( Firewall throughput is measured with App-ID and logging enabled, utilizing 64 KB HTTP/appmix transactions.) | 53.7/47.5 Gbps |
| Threat Prevention throughput (HTTP/appmix) (Threat Prevention throughput is measured with App-ID, IPS, antivirus, antispyware, WildFire, DNS Security, file blocking, and logging enabled, utilizing 64 KB HTTP/appmix transactions.) |
28.8/30.5 Gbps |
| IPsec VPN throughput (IPsec VPN throughput is measured with 64 KB HTTP transactions and logging enabled.) | 28.7 Gbps |
| Max sessions | 6.2M |
| New sessions per second (New sessions per second is measured with application-override, utilizing 1 byte HTTP transactions.) | 315.000 |
| Virtual systems (base/max) (Adding virtual systems over base quantity requires a separately purchased license.) | 15/65 |
| Specifications | PA-5400 Series |
| Interface Modes | L2, L3, tap, virtual wire (transparent mode) |
| Routing | OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) and DHCP supported for dynamic address assignment Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 Bidirectional Forwarding Detection (BFD) |
| SD-WAN | Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) |
| IPv6 | L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC |
| IPsec and SSL VPN | Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3des, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 GlobalProtect Large Scale VPN for simplified configuration and management* Secure access over IPsec and SSL VPN tunnels using GlobalProtect gateway and portals* |
| VLANs | 802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP |
| Network Address Translation | NAT modes (IPv4): static IP, dynamic IP, Dynamic IP and Port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable Dynamic IP and Port oversubscription |
| High Availability | Modes: active/active, active/passive, HA clustering Failure detection: path monitoring, interface monitoring |
| Mobile Network Infrastructure | 5G Security GTP Security SCTP Security * Requires GlobalProtect license |
| Hardware Specifications | |
| 1/O | PA-5420: 1G/2.5G/5G/10G (8), 1G/10G SFP/SFP+ (12), 25G SFP28 (4), 40G/100G QSPF+/QSFP28 (4) |
| Management I/O | 1G/10G SFP/SFP+ out-of-band management port (1), 1G/10G SFP/SFP+ high availability (2), 40G QSFP+ high availability (1), RJ-45 console port (1), Micro USB |
| Storage Capacity | 480 GB SSD pair, system storage |
| Power Supply (Avg/Max Power Consumption) | 630/760 W |
| Max BTU/hr | 1638 |
| Power Supplies (Base/Max) | 1:1 fully redundant (2/2) |
| AC Input Voltage (Input Hz) | 100–240 VAC (50–60 Hz) |
| AC Power Supply Output | 1,200 watts/power supply |
| Max Current Consumption | AC: 7 A @ 100 VAC, 3 A @ 240 VAC DC: 15 A @ -48 VDC, 12 A @ -60 VDC |
| Max Inrush Current | AC: 50 A @ 230 VAC, 50 A @ 120 VAC DC: 200 A @ 72 VDC |
| Mean Time Between Failure (MTBF) | 22 years |
| Rack Mount Dimensions | 2U, 19" standard rack (3.45" H x 22.5" D x 17.34" W) |
| Weight (Standalone Device/As Shipped) | 35.2 lbs/48.8 lbs |
| Safety | cTUVus, CB |
| EMI | FCC Class A, CE Class A, VCCI Class A |
| Environment | Operating temperature: 32°F to 122°F, 0°C to 50°C Nonoperating temperature: -4°F to 158°F, -20°C to 70°C Humidity tolerance: 10% to 90% Maximum altitude: 10,000 ft/3,048 m Airflow: front to back |