Palo Alto Networks PA-3220
Multi-Gig-Throughput Next-Generation Firewalls to Secure Your Internet Edge

SKU: N/A Category: Brand:


Palo Alto Networks® PA-3200 Series of next-generation firewalls comprises the PA-3260, PA-3250 and PA-3220, all of which are targeted at high-speed internet gateway deployments. The PA-3220 next-generation firewall secures all traffic, including encrypted traffic, using dedicated processing and memory for networking, security, threat prevention and management.

The PA-3200 Series enables you to secure your organization through advanced visibility and control of applications, users, and content at throughput speeds of up to 8.8 Gbps. Dedicated computing and programmable hardware resources assigned to networking, security, signature matching, and management functions ensure predictable performance.

The controlling element of the PA-3220 next-generation firewall is PAN-OS® security operating system, which natively classifies all traffic, inclusive of applications, threats and content, and then ties that traffic to the user, regardless of location or device type. The application, content and user – in other words, the elements that run your business – are then used as the basis of your security policies, resulting in an improved security posture and a reduction in incident response time.


  • 5 Gbps firewall throughput (App-ID enabled1)
  • 2.2 Gbps Threat Prevention throughput2
  • 2.5 Gbps IPsec VPN throughput
  • 1,000,000 max sessions
  • 58,000 new sessions per second
  • 4,000 IPSec VPN tunnels/tunnel interfaces
  • 1,024 SSL VPN Users
  • 10 virtual routers
  • 60 security zones
  • 2,500 max number of policies

1. Firewall throughput measured with App-ID and logging enabled utilizing 64KB HTTP transactions

2. Threat Prevention throughput measured with App-ID, IPS, antivirus, anti-spyware, WildFire and logging-enabled utilizing 64KB HTTP transactions

3. New sessions per second measured with application-override utilizing 1-byte HTTP transactions

4. Adding virtual systems over base quantity requires a separately purchased license