10/100/1000 (4), Gigabit SFP (8) or 10/100/1000 (4), Gigabit SFP (4), 10 Gigabit SFP+ (4)
10/100/1000 out-of-band management port (1), 10/100/1000 high availability (2), RJ-45 console port (1), USB port (1), Micro USB console port (1)
Storage Capacity: 240 GB SSD.
Firewall throughput: 2.0 Gbps
IPsec VPN throughput:1.8 Gbps
Max sessions: 192,000
New sessions per second: 13,100.

Thiết bị tường lửa Palo Alto Networks PA-850

SKU	PAN-PA-850
Performance and Capacities
Firewall throughput (HTTP/appmix)	2.0 / 2.0 Gbps
Threat Prevention throughput (HTTP/appmix)	1.0 / 1.0 Gbps
IPsec VPN throughput	1.8 Gbps
New sessions per second	13,100
Max sessions	192,000
Hardware Specifications
I/O	● 10/100/1000 (4), Gigabit SFP (8) or ● 10/100/1000 (4), Gigabit SFP (4), 10 Gigabit SFP+ (4)
Management I/O	10/100/1000 out-of-band management port (1) 10/100/1000 high availability (2) RJ-45 console port (1) USB port (1) Micro USB console port (1)
Storage Capacity	240 GB SSD
Power Supply	AC 450 W power supplies (2); one is redundant
Power Consumption	Maximum: 240 W Average: 64 W
Max BTU/hr	256
Input Voltage (Input Frequency)	100–240 VAC (50–60Hz)
Max Current Consumption	2.0 A @ 100 VAC, 1.0 A @ 240 VAC
Max Inrush Current	1.0 A @ 230 VAC, 1.84 A @ 120 VAC
Rack Mount (Dimensions)	1U, 19” standard rack (1.75” H x 14.5” D x 17.125” W)
Weight (Standalone Device/As Shipped)	13.5 lbs / 21.5 lbs
Safety	cTUVus, CB
EMI	FCC Class A, CE Class A, VCCI Class A
Environment	- Operating temperature: 32° to 104° F, 0° to 40° C - Non-operating temperature: -4° to 158° F, -20° to 70° C
Airflow	Front to back

Networking Features
Interface Modes	L2, L3, tap, virtual wire (transparent mode)
Routing	OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
SD-WAN	Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change
IPv6	L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC
IPsec VPN	Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
VLANs	802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP
Network Address Translation	NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription
High Availability	Modes: active/active, active/passive Failure detection: path monitoring, interface monitoring
Zero Touch Provisioning (ZTP)	Available with -ZTP SKUs (PA-850-ZTP) Requires Panorama 9.1.3 or higher

PA-800 Series Hardware
Palo Alto Networks PA-850	#PAN-PA-850
PA-850 - 3 Year Bundle	#850-TP-URL4-WF-BKLN-3YR
Includes Palo Alto Networks PA-850 (PAN-PA-850), Threat Prevention Subscription (PAN-PA-850-TP-3YR), PANDB URL Filtering Subscription (PAN-PA-850-URL4-3YR), WildFire Subscription (PAN-PA-850-WF-3YR), Partner Enabled Premium Support (PAN-SVC-BKLN-850-3YR), and DNS Security subscription (PAN-PA-850-DNS-3YR)	#850-TP-URL4-WF-BKLN-3YR

Extends native protection across all attack vectors with cloud-delivered security subscriptions

Threat Prevention—inspects all traffic to automatically block known vulnerabilities, malware, vulnerability ex-ploits, spyware, command and control (C2), and custom intrusion prevention system (IPS) signatures.
WildFire® malware prevention—unifies inline machine learning protection with robust cloud-based analysis to instantly prevent new threats in real time as well as dis-cover and remediate evasive threats faster than ever
URL Filtering—prevents access to malicious sites and protects users against web-based threats, including cre-dential phishing attacks.
DNS Security—detects and blocks known and unknown threats over DNS (including data exfiltration via DNS tun-neling), prevents attackers from bypassing security mea-sures, and eliminates the need for independent tools or changes to DNS routing.
IoT Security—discovers all unmanaged devices in your network quickly and accurately with ML, without the need to deploy additional sensors. Identifies risks and vul-nerabilities, prevents known and unknown threats, pro-vides risk-based policy recommendations, and automates enforcement.