PAL:PAN-PA-5250 Datasheet

Get a Quote

Overview
Palo Alto Networks® PA-5200 Series of next-generation firewall appliances is comprised of the PA-5260, the PA-5250 and the PA-5220, which target at high-speed
data center, internet gateway, and service provider deployments. The PA-5200 Series delivers up to 72 Gbps of throughput using dedicated processing and memory
for the key functional areas of networking, security, threat prevention and management.

Quick Specs
Table 1 shows the Quick Specs.

Part number PAN-PA-5250

Palo Alto Networks PA-5250, Security appliance, 40 Gigabit LAN, 100 Gigabit Ethernet, 3U, rack-
Description
mountable

Firewall throughput (App-ID enabled) 35.9 Gbps

Threat prevention throughput 20.3 Gbps

IPSec VPN throughput 14 Gbps

Max sessions 8,000,000

New sessions per second 348,000

Virtual systems (base/max) 25/125

Product Details
Key Security Features

1.Classifies all applications, on all ports, all the time

-Identifies the application, regardless of port, encryption (SSL or SSH), or evasive technique employed.

-Uses the application, not the port, as the basis for all of your safe enablement policy decisions: allow, deny, schedule, inspect and apply traffic-shaping.

-Categorizes unidentified applications for policy control, threat forensics or App-ID™ application identification technology development.

2.Enforces security policies for any user, at any location

-Deploys consistent policies to local and remote users running on the Windows, Mac OS X, Linux, Android or Apple iOS platforms.

-Enables agentless integration with Microsoft Active Directory and Terminal Services, LDAP, Novell eDirectory and Citrix.

-Easily integrates your firewall policies with 802.1X wireless, proxies, NAC solutions, and any other source of user identity information.

3.Prevents known and unknown threats

-Blocks a range of known threats, including exploits, malware and spyware, across all ports, regardless of common threat-evasion tactics employed.

-Limits the unauthorized transfer of files and sensitive data, and safely enables non-work-related web surfing.

-Identifies unknown malware, analyzes it based on hundreds of malicious behaviors, and then automatically creates and delivers protection.

Compare to Similar Items

Table 2 shows the comparison.

Model PAN-PA-5260 PAN-PA-5250 PAN-PA-5220

Firewall throughput (App-ID enabled) 72.2 Gbps 35.9 Gbps 18.5 Gbps

Threat prevention throughput 30 Gbps 20.3 Gbps 9.2 Gbps

IPsec VPN throughput 21 Gbps 14 Gbps 5 Gbps

 Max sessions 32,000,000 8,000,000 4,000,000

New sessions per second 458,000 348,000 169,000

Virtual systems (base/max) 25/225 25/125 10/20

Get More Information

Do you have any question about thePAN-PA-5250?

Contact us now via Live Chat or sales@router-switch.com.

Specification

PAN-PA-5250 Specification

Model PA-5250

Performance and Capacities Specifications

Firewall throughput (App-ID enabled) 35.9 Gbps

Threat prevention throughput 20.3 Gbps

IPsec VPN throughput 14 Gbps

Max sessions 8,000,000

New sessions per second 348,000

Virtual systems (base/max) 25/125

Networking Features

L2, L3, Tap, Virtual wire (transparent mode)

Interface Modes Point-to-point protocol over Ethernet (PPPoE) and DHCP supported for dynamic
address assignment

OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, Static routing
Policy-based forwarding
Routing
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
Bidirectional Forwarding Detection (BFD)

L2, L3, Tap, Virtual Wire (transparent mode)

IPv6 Features: App-ID, User-ID, Content-ID, WildFire, and SSL decryption
SLAAC

Key exchange: Manual key, IKE v1 and IKEv2 (pre-shared key, certificate-based
authentication)
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
IPsec VPN
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
GlobalProtect large-scale VPN (LSVPN) for simplified configuration and
management

802.1q VLAN tags per device/per interface: 4,094/4,094

VLANs
Aggregate interfaces (802.3ad), LACP

NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address
translation)
Network Address Translation (NAT) NAT64, NPTv6
Additional NAT features: Dynamic IP reservation, tun- able dynamic IP and port
oversubscription

Modes: Active/Active, Active/Passive

High Availability
Failure detection: Path monitoring, interface monitoring

Hardware Specifications
 I/O (4) 100/1000/10G Cu, (16) Gig/10Gig SFP/SFP+, (4) 40G/100G QSFP28

(2) 10/100/1000, (1) 40G/100G QSFP28 HA, (1) 10/100/1000 out-of-band

Management I/O
management, (1) RJ45 console port

Storage Options Dual Solid State Disk Drives

Storage Capacity 240GB SSD, RAID1, System Storage 2TB HDD, RAID1, Log Storage

Power (Max Power Consumption) 870 Watts

Max BTU/hr 2,970

Power Supplies (base/max) 1:1 Fully Redundant (2/2)

AC Input Voltage (input Hz) 100-240VAC (50-60Hz)

AC Power Supply Output 1200 Watt/power supply

Dimensions 5.25”H X 20.5”D X 17.25”W

Safety cCSAus, CB IEC60950-1

EMI FCC Class A, CE Class A, VCCI Class A

Environment

Operating temperature 32°F to 122°F (0° to 50°C)

Non-operating temperature -20° to 70°C (-4°F to 158°F)

Want to Buy

Order Now Get a Quote

Why Router-switch.com

As a leading network hardware supplier, Router-switch.com focuses on original new ICT equipment of Cisco, Huawei, HPE,
Dell, Hikvision, Juniper, Fortinet, etc.

200+ 18,000+ $20,000,000 50%-98% 100%

Countries we Sold Customers Trusted Inventory Available Off Global List Price Safe Online Shopping

Contact Us

● Tel: +1-626-655-0998 (USA) +852-3050-1066 / +852-3174-6166

● Fax: +852-3050-1066 (Hong Kong)
● Email: sales@router-switch.com