Palo Alto PA-5440 Networks® Series of next-generation firewall appliances comprises the PA-5280, PA-5260, PA-5250 and PA-5220, which are ideal for high-speed data center, internet gateway and service provider deployments. The PA-5440 Series delivers up to 68 Gbps of throughput using dedicated processing and memory for the key functional areas of networking, security, threat prevention and management.
- 200 Gbps firewall throughput (HTTP/appmix)
- 125 Gbps Threat Prevention throughput
- 95 Gbps IPsec VPN throughput
- 100M Max sessions
- 4M New sessions per second
Table1: PA-5450 Performance and Capacities
|
|
PA-5450ConfiguredSystem*
|
Single PA-5400-DPC-A
|
Firewall throughput (HTTP/appmix)
|
200/200 Gbps
|
72/68 Gbps
|
Threat Prevention throughput (HTTP/appmix)
|
125/150 Gbps
|
31/37 Gbps
|
IPsec VPN throughput
|
95 Gbps**
|
19 Gbps
|
Max sessions
|
100M
|
20M
|
New sessions per second
|
4M
|
830,000
|
Virtual systems (base/max)
|
25/225
|
—
|
Table2:PA-5450NetworkingFeatures
|
Interface Modes
|
L2, L3, tap, virtual wire (transparent mode)
|
Routing
|
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing
|
Policy-based forwarding
|
Point-to-point protocol over Ethernet (PPPoE) and DHCP supported for dynamic address assignment
|
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
|
Bidirectional Forwarding Detection (BFD)
|
SD-WAN
|
Path quality measurement (jitter, packet loss, latency)
|
Initial path selection (PBF)
|
Dynamic path change
|
IPv6
|
L2, L3, tap, virtual wire (transparent mode)
|
Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption
|
SLAAC
|
IPsec VPN
|
Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication)
|
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
|
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
|
GlobalProtect large-scale VPN for simplified configuration and management
|
Table2:PA-5450NetworkingFeatures(cont.)
|
VLANs
|
802.1Q VLAN tags per device/per interface: 4,094/4,094
|
Aggregate interfaces (802.3ad), LACP
|
NetworkAddressTranslation
|
NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation)
|
NAT64, NPTv6
|
Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription
|
High Availability
|
Modes: active/active, active/passive, HA clustering
|
Failure detection: path monitoring, interface monitoring
|
Mobile Network Infrastructure*
|
GTP Security
|
SCTP Security
able3:PA-5450HardwareSpecifications
|
PA-5400-NC-ANetworking I/O
|
100/1000/10G Cu (4), 1G/10G SFP/ SFP+ (12), 40G/100G
QSFP28 (2); minimum 1 NC and maximum 2 NCs per system; 2 NCs require 2 or more DPCs installed
|
PAN-PA-5400-MPC-A Management I/O
|
10/100/1000 (2), 40G/100G QSFP28 HA (2), 10/100/1000 out-of-
band management (2), RJ45 console port (1), USB console port (1)
|
Storage Capacity
|
480 GB SSD, RAID1, system storage 4 TB SSD, log storage (optional)
|
MaxBTU/hr
|
8,828
|
Power Supplies (Base/Max)
|
2/4
|
AC Input Voltage (Input Frequency)
|
100–120 VAC & 200–240 VAC (50–60 Hz)
|
AC Power Supply Output
|
2,200 watts/power supply
|
MaxCurrentConsumption
|
AC: 100–120 VAC, ~14 A max. per input 200–240 VAC, ~12.5 A
max. per input
|
DC: 48–60 VDC, 52 A max. per input
|
Table3:PA-5450HardwareSpecifications(cont.)
|
Max Inrush Current
|
AC: 35 A @ 230 VAC, 35 A @ 120 VAC
|
DC: 50 A @ 72 VDC
|
Rack Mount (Dimensions)
|
5U, 19” standard rack
8.75” H x 30.25” D x 17.38” W
|
Maximum Time Between Failure (MTBF)
|
Configuration dependent; contact your Palo Alto Networks representative for MTBF details.
|
Safety
|
cTUVus, CB
|
EMI
|
FCC Class A, CE Class A, VCCI Class A, KCC Class A, BSMI Class A
|
Environment
|
Operating temperature: 32° to 122° F, 0° to 50° C
|
Non-operating temperature: -4° to 158° F, -20° to 70° C
|
|
PA-5450 Base AC Hardware Bundle
Includes Chassis, 2xAC power supplies, 4xFans, Base Card, Management Processing Card, and Networking Card, includes 4 post rack mount kit
#PAN-PA-5450-AC-SYS
PA-5450 Base DC Hardware Bundle
Includes Chassis, 2xAC power supplies, 4xFans, Base Card, Management Processing Card, and Networking Card, includes 4 post rack mount kit
#PAN-PA-5450-DC-SYS
Datasheet
Sản phẩm đề xuất: Palo Alto PA-5220 | Palo Alto PA-5250 | Palo Alto PA-5260 | Palo Alto PA-5280
Cụm từ tìm kiếm phổ biến: Palo Alto | Firewall Palo Alto