Earn 50,489 points when you buy me!
Palo Alto Networks PA-3400 Series ML-Powered NGFWs—comprising the PA-3440, PA-3430, PA-3420, and PA-3410—target high-speed internet gateway deployments. The PA-3400 Series appliances secure all traffic.
ML-Powered Next-Generation Firewall
• Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack
prevention for file-based attacks while identifying and immediately stopping never-before-seen
phishing attempts.
• Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW.
• Uses behavioral analysis to detect IoT devices and make policy recommendations; cloud-delivered
and natively integrated service on the NGFW.
• Automates policy recommendations that save time and reduce the chance of human error.
Identifies and Categorizes All Applications, on All Ports, All the Time, with
Full Layer 7 Inspection
• Identifies the applications traversing your network irrespective of port, protocol, evasive techniques,
or encryption (TLS/SSL). In addition, it automatically discovers and controls new applications to
keep pace with the SaaS explosion with SaaS Security subscription.
• Uses the application, not the port, as the basis for all your safe enablement policy decisions: allow,
deny, schedule, inspect, and apply traffic-shaping.
• Offers the ability to create custom App-ID™ tags for proprietary applications or request App-ID
development for new applications from Palo Alto Networks.
• Identifies all payload data within the application (e.g., files and data patterns) to block malicious
files and thwart data exfiltration attempts.
• Creates standard and customized application usage reports, including software-as-a-service (SaaS)
reports that provide insight into all sanctioned and unsanctioned SaaS traffic on your network.
• Enables safe migration of legacy Layer 4 rule sets to App-ID-based rules with built-in Policy
Optimizer, giving you a rule set that is more secure and easier to manage
Delivers a Unique Approach to Packet Processing with Single-Pass
Architecture
• Performs networking, policy lookup, application and decoding, and signature matching—for all
threats and content—in a single pass. This significantly reduces the amount of processing overhead
required to perform multiple functions in one security device.
• Avoids introducing latency by scanning traffic for all signatures in a single pass, using stream-based,
uniform signature matching.
• Enables consistent and predictable performance when security subscriptions are enabled.
Enables SD-WAN Functionality
• Allows you to easily adopt SD-WAN by simply enabling it on your existing firewalls.
• Enables you to safely implement SD-WAN, which is natively integrated with our industry-leading
security.
• Delivers an exceptional end-user experience by minimizing latency, jitter, and packet loss
| Firewall throughput (HTTP/appmix) | 19 Gbps |
| Threat Prevention throughput (HTTP/appmix) | 10 Gbps |
| IPsec VPN throughput | 9.9 Gbps |
| Max sessions | 2.2M |
| New sessions per second | 220,000 |
| Virtual systems (base/max) | 1/11 |
| MFG Part Number | PAN-PA-3420 |
| Interface Modes | L2, L3, tap, virtual wire (transparent mode) |
| Routing | OSPFv2/v3 with graceful restart, BGP with graceful Policy-based forwarding Point-to-point protocol over Ethernet (PPPoE) and DHCP supported for dynamic address assignment Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 Bidirectional Forwarding Detection (BFD) |
| IPsec VPN | Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key,certificate-based authentication Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 GlobalProtect large-scale VPN for simplified configuration and management |
| VLANs | 802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP |
| Network Address Translation | NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription |
| High Availability | Modes: active/active, active/passive Failure detection: path monitoring, interface monitoring |
| Mobile Network Infrastructure | 5G Security GTP Security SCTP Security |
| I/O | PA-3410: 1G/2.5G/5G/10G (12), 1G/10G SFP/SFP+ (10), 25G SFP28 (4) PA-3420: 1G/2.5G/5G/10G (12), 1G/10G SFP/SFP+ (10), 25G SFP28 (4) PA-3430: 1G/2.5G/5G/10G (12), 1G/10G SFP/SFP+ (10), 25G SFP28 (4), 40G/100G QSFP/QSFP28 (2) PA-3440: 1G/2.5G/5G/10G (12), 1G/10G SFP/SFP+ (10), 25G SFP28 (4), 40G/100G QSFP/QSFP28 (2) |
| Management I/O | 100/1000 out-of-band management port (1) 100/1000 high availability (2), 10G SFP+ high availability (1) RJ-45 console port (1), Micro USB (1) |
| Storage Capacity | 480 GB SSD |
| Power Supply (Avg/Max Power Consumption) | Redundant 450-watt AC (133W/190W) |
| Max BTU/hr | 650 |
| AC Input Voltage (Input Hz) | AC: 100–240 VAC (50–60Hz) |
| Max Current Consumption | AC: 1.9 A @ 100 VAC, 0.8 A @ 240 VAC |
| Rack Mount (Dimensions) | 1U, 19” standard rack 14.15” x 17.15” x 1.70” |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
|  |
