Palo Alto Networks PA-450: ML-Powered NGFW for SMB & Branch Offices

ML-Powered Next-Generation Firewall

Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack prevention for file-based attacks while identifying and immediately stopping never-before-seen phishing attempts.

Delivers an exceptional end user experience by minimizing latency, jitter, and packet loss.

Avoids introducing latency by scanning traffic for all signatures in a single pass, using stream-based, uniform signature matching.

Offers rich visibility into TLS traffic, such as amount of encrypted traffic, TLS/SSL versions, cipher suites, and more, without decrypting.

Uses the application, not the port, as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect, and apply traffic-shaping.

Performs networking, policy lookup, application and decoding, and signature matching—for all threats and content—in a single pass. This significantly reduces the amount of processing overhead required to perform multiple functions in one security device.
Avoids introducing latency by scanning traffic for all signatures in a single pass, using stream-based, uniform signature matching.
Enables consistent and predictable performance when security subscriptions are enabled.

Allows you to easily adopt SD-WAN by simply enabling it on your existing firewalls.
Enables you to safely implement SD-WAN, which is natively integrated with our industry-leading security.
Delivers an exceptional end-user experience by minimizing latency, jitter, and packet loss.

Still have Questions?

Interface Modes: L2, L3, tap, virtual wire (transparent mode)
Routing: OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing, Policy-based forwarding, Point-to-point protocol over Ethernet (PPPoE)
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
SD-WAN: Path quality measurement (jitter, packet loss, latency), Initial path selection (PBF), Dynamic path change
IPv6: L2, L3, tap, virtual wire (transparent mode), Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption, SLAAC
IPsec VPN: Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication), Encryption: 3DES, AES (128-bit, 192-bit, 256-bit), Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
VLANs: 802.1Q VLAN tags per device/per interface: 4,094/4,094
Network Address Translation
High Availability Modes: active/active, active/passive
Failure detection: path monitoring, interface monitoring
Mobile Network Infrastructure: 5G Security, 5G MEC (multi-access edge computing) Security
GTP Security
SCTP Security

I/O (PA-460, PA-450, PA-440): 10/100/1000 (8) RJ45
I/O (PA-410): 10/100/1000 (7) RJ45
Management I/O (PA-460, PA-450, PA-440): 10/100/1000 out-of-band management port (1), RJ45 console port (1), USB port (2), Micro USB console port (1)
Management I/O (PA-410): 10/100/1000 out-of-band management port (1), RJ45 console port (1), USB port (2)
Storage Capacity (PA-460, PA-450, PA-440): 128 GB eMMC
Storage Capacity (PA-410): 64 GB eMMC
Power Supply (Avg/Max Power Consumption) (PA-460, PA-450): 33/41 W
Power Supply (Avg/Max Power Consumption) (PA-440): 29/34 W
Power Supply (Avg/Max Power Consumption) (PA-410): 17/18 W
Max BTU/hr (PA-460, PA-450): 141
Max BTU/hr (PA-440): 117
Max BTU/hr (PA-410): 78
AC Input Voltage (Input Hz): 100-240 VAC (50-60 Hz)
Max Current Consumption (PA-460, PA-450): 3.4 A @ 12 VDC
Max Current Consumption (PA-440): 2.9 A @ 12 VDC
Max Current Consumption (PA-410): 1.5 A @ 12 VDC
Max Inrush Current (PA-460, PA-450): 4.2 A
Max Inrush Current (PA-440): 3.3 A
Max Inrush Current (PA-410): 2.1 A