10/100/1000 (12), 1G/10G SFP/SFP+ (8), 40G QSFP+ (4)
10/100/1000 out-of-band management port (1), 10/100/1000 HA (2), 10G SFP+ HA (1), RJ-45 console port (1), Micro USB (1)
Redundant 650-watt AC or DC (195/240)
Firewall throughput: 7.8 Gbps
IPsec VPN throughput: 4.4 Gbps
Max sessions: 2.2M (88000 per sec.)
Virtual systems (base/max): 1/6.

Thiết bị tường lửa Palo Alto Networks PA-3260

SKU	PAN-PA-3260
Performance and Capacities
Firewall throughput (HTTP/appmix)	7/7.8 Gbps
Threat Prevention throughput (HTTP/appmix)	3.5/4.3 Gbps
IPsec VPN throughput	4.4 Gbps
Max sessions	2.2M
New sessions per second	88,000
Virtual systems (base/max)	1/6
Hardware Specifications
I/O	10/100/1000 (12), 1G/10G SFP/SFP+ (8), 40G QSFP+ (4)
Management I/O	10/100/1000 out-of-band management port (1) 10/100/1000 high availability (2) 10G SFP+ high availability (1) RJ-45 console port (1) Micro USB (1)
Storage Capacity	240 GB SSD
Power Supply (Avg/Max Power Consumption)	Redundant 650-watt AC or DC (180 / 240)
Max BTU/hr	819
Input Voltage (Input Frequency)	AC: 100–240 VAC (50/60Hz) DC: -48V to -60V
Max Current Consumption	AC: 2.3 A @ 100 VAC, 1.0 A @ 240 VAC DC: -48 V @ 4.7 A, -60 V @ 3.8 A
Mean Time Between Failure (MTBF)	14 years
Rack Mount Dimensions	2U, 19” standard rack (3.5” H x 20.53” D x 17.34" W)
Weight (Standalone Device/As Shipped)	29 lbs / 41.5 lbs
Safety	cTUVus, CB
EMI	FCC Class A, CE Class A, VCCI Class A
Environment	Operating temperature: 32° to 122° F, 0° to 50° C Non-operating temperature: -4° to 158° F, -20° to 70° C Humidity tolerance: 10% to 90% Maximum altitude: 10,000 ft / 3,048 m Airflow: front to back

Networking Features
Interface Modes	L2, L3, tap, virtual wire (transparent mode)
Routing	OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
SD-WAN	Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change
IPv6	L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC
IPsec VPN	Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
VLANs	802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP
Network Address Translation	NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription
High Availability	Modes: active/active, active/passive, HA clustering Failure detection: path monitoring, interface monitoring
Zero Touch Provisioning (ZTP)	Available with -ZTP SKUs (PA-3260-ZTP) Requires Panorama 9.1.3 or higher

PA-3200 Series Hardware
Palo Alto Networks PA-3260 with redundant AC power supplies	#PAN-PA-3260
Subscription
DNS Security subscription year 1, PA-3260	#PAN-PA-3260-DNS
GlobalProtect subscription year 1, PA-3260	#PAN-PA-3260-GP
Threat prevention subscription year 1, PA-3260	#PAN-PA-3260-TP
PANDB URL filtering subscription year 1, PA-3260	#PAN-PA-3260-URL4
Premium support year 1, PA-3260	#PAN-SVC-PREM-3260

Extends native protection across all attack vectors with cloud-delivered security subscriptions

Threat Prevention—inspects all traffic to automatically block known vulnerabilities, malware, vulnerability ex-ploits, spyware, command and control (C2), and custom intrusion prevention system (IPS) signatures.
WildFire® malware prevention—unifies inline machine learning protection with robust cloud-based analysis to instantly prevent new threats in real time as well as dis-cover and remediate evasive threats faster than ever
URL Filtering—prevents access to malicious sites and protects users against web-based threats, including cre-dential phishing attacks.
DNS Security—detects and blocks known and unknown threats over DNS (including data exfiltration via DNS tun-neling), prevents attackers from bypassing security mea-sures, and eliminates the need for independent tools or changes to DNS routing.
IoT Security—discovers all unmanaged devices in your network quickly and accurately with ML, without the need to deploy additional sensors. Identifies risks and vul-nerabilities, prevents known and unknown threats, pro-vides risk-based policy recommendations, and automates enforcement.