Pa 220r

PA-220R
Palo Alto Networks® PA-220R ruggedized appliance brings next-generation

capabilities to industrial applications in harsh environments.
Key Security Features

Classifies all applications, on all ports, all the time
• App-IDs for industrial protocols and applications,
such as Modbus, DNP3, IEC 60870-5-104,
Siemens S7, OSIsoft PI® and more.
• Identifies the application, regardless of port, encryp-
tion (SSL or SSH) or evasive technique employed. PA-220R
• Uses the application, not the port, as the basis for The PA-220R is a ruggedized next-generation firewall that
all of your safe enablement policy decisions: allow, secures industrial and defense networks in a range of harsh
deny, schedule, inspect and apply traffic-shaping. environments, such as utility substations, power plants,
• Categorizes unidentified applications for policy manufacturing plants, oil and gas facilities, building management
control, threat forensics or App-ID™ technology systems, and healthcare networks.
development. The controlling element of the Palo Alto Networks® PA-220R is
PAN-OS® security operating system, which natively classifies
Enforces security policies for any user, at any
location all traffic, inclusive of applications, threats and content, and
then ties that traffic to the user, regardless of location or device
• Deploys consistent policies to local and remote type. The application, content and user – in other words, the
users running on the Windows®, Mac® OS X®, elements that run your business – are then used as the basis of
macOS®, Linux, Android® or Apple® iOS platforms. your security policies, resulting in an improved security posture
• Enables agentless integration with Microsoft® and a reduction in incident response time.
Active Directory® and Terminal Services, LDAP,
Novell® eDirectory™ and Citrix®. Highlights
• Easily integrates your firewall policies with 802.1X • Extended operating range for temperature.
wireless, proxies, NAC solutions and any other • Certified to IEC 61850-3 and IEEE 1613 environmental
source of user identity information. and testing standards for vibration, temperature and
immunity to electromagnetic interference.
Prevents known and unknown threats
• Dual DC power (12-24V).
• Blocks a range of known general and ICS-specific
• High availability firewall configuration (active/active and
threats, including exploits, malware and spyware,
active/passive).
across all ports, regardless of common evasion
tactics employed. • Fan-less design, no moving parts.
• Flexible I/O with support for both copper and optical via
• Limits the unauthorized transfer of files and
SFP ports.
sensitive data.
• Flexible mounting options, including DIN rail, rack and
• Identifies unknown malware, analyzes it based wall mount.
on hundreds of malicious behaviors, and then • Simplified remote site deployment via USB-based
automatically creates and delivers protection. bootstrapping.
Palo Alto Networks | PA-220R | Datasheet 1

Performance and Capacities PA-220R High Availability
Firewall throughput (App-ID enabled)1 500 Mbps Modes: active/active, active/passive
Threat prevention throughput 2

150 Mbps Failure detection: path monitoring, interface monitoring
IPsec VPN throughput 100 Mbps

Industrial Protocols and Applications
Max sessions 64,000
https://www.paloaltonetworks.com/resources/whitepapers/
New sessions per second3 4,200 app-ids-industrial-control-systems-scada-networks
1. Firewall throughput measured with App-ID and logging enabled utilizing
64KB HTTP transactions
Networking Features
2. Threat Prevention throughput measured with App-ID, IPS, antivirus,
anti-spyware, WildFire and logging enabled utilizing 64KB HTTP transactions I/O
3. New sessions per second measured with application-override utilizing
(6) 10/100/1000, (2) SFP
1 byte HTTP transactions
Management I/O
(1) 10/100/1000 out-of-band management port, (1) RJ-45 console port,
The PA-220R supports a wide range of networking features
that enable you to more easily integrate our security features (1) USB port, (1) Micro USB console port
into your existing network. Storage Capacity
64GB EMMC
Hardware Specifications
Power Supply (Avg/Max Power Consumption)
Interface Modes
Dual DC power feeds (13 W/16 W)
L2, L3, tap, virtual wire (transparent mode)
Max BTU/hr
Routing
55
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP,
static routing Input Voltage (Input Frequency)
Policy-based forwarding 12-24VDC 1.25A
Point-to-point protocol over Ethernet (PPPoE) Max Current Consumption

Multicast: PIM-SM, PIM-SSM, IGMP v1, v2 and v3 Firewall – 1.25A@12VDC
Max inrush current 4.9A @ 12VDC
IPv6
L2, L3, tap, virtual wire (transparent mode)
Rack Mount (Dimensions)
2.0” H x 8.66” D x 9.25” W
Features: App-ID, User-ID™, Content-ID™, WildFire® and SSL
Flexible mounting options including DIN rail, rack and wall mount
SLAAC
Weight (Stand-Alone Device/As Shipped)
IPsec VPN
4.5 lbs / 6.0 lbs
Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key,
certificate-based authentication) Safety
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) TUV CB report and TUV NRTL
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 EMI
VLANs FCC Class A, CE Class A, VCCI Class A
802.1q VLAN tags per device/per interface: 4,094/4,094 Certifications
Network Address Translation IEC 61850-3 and IEEE 1613 environmental and testing standards.
NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port For more certifications, see:
(port address translation) https://www.paloaltonetworks.com/company/certifications.html
NAT64, NPTv6 Environment
Additional NAT features: dynamic IP reservation, tunable dynamic Operating temperature: -40° to 158° F, -40° to 70° C
IP and port oversubscription Non-operating temperature: -40° to 167° F, -40° to 75° C
Passive cooling
To view additional information about the features and associated capacities of the PA-220R, please visit
www.paloaltonetworks.com/products.
3000 Tannery Way © 2018 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark
Santa Clara, CA 95054 of Palo Alto Networks. A list of our trademarks can be found at https://www.
Main: +1.408.753.4000 paloaltonetworks.com/company/trademarks.html. All other marks mentioned
Sales: +1.866.320.4788 herein may be trademarks of their respective companies. pa-220r-ds-021318
Support: +1.866.898.9087
www.paloaltonetworks.com

Pa 220r

Uploaded by

Copyright:

Available Formats

Pa 220r

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Pa 220r

Uploaded by

Copyright:

Available Formats

PA-220R

Palo Alto Networks® PA-220R ruggedized appliance brings next-generation

Key Security Features

Palo Alto Networks | PA-220R | Datasheet 1

Threat prevention throughput 2

IPsec VPN throughput 100 Mbps

Point-to-point protocol over Ethernet (PPPoE) Max Current Consumption

You might also like