PA-200

Palo Alto Networks® PA-200 is a next-generation firewall appliance

for distributed enterprise branch offices and midsize businesses.

Key Security Features:

Classifies all applications, on all ports, all the time
• Identifies the application, regardless of port, encryption (SSL or
SSH), or evasive technique employed.
• Uses the application, not the port, as the basis for all of your safe
enablement policy decisions: allow, deny, schedule, inspect and
apply traffic-shaping.
• Categorizes unidentified applications for policy control, threat PA-200
forensics or App-ID™ development.

Enforces security policies for any user, at any location

The controlling element of the PA-200 is ­PAN-OS®,
• Deploys consistent policies to local and remote ­users running a security-specific operating system that natively
on the Windows®, Mac® OS X®, Linux®, Android®, or Apple® iOS classifies all traffic, inclusive of applications,
platforms. threats and content, and then ties that traffic to
• Enables agentless integration with Microsoft® Active ­Directory® the user, regardless of location or device type. The
and Terminal Services, LDAP, Novell® ­eDirectory™ and Citrix®. application, content, and user – in other words,
the business elements that run your business – are
• Easily integrates your firewall policies with 802.1X wireless, then used as the basis of your security policies,
proxies, NAC solutions, and any other source of user identity resulting in an improved security posture and a
information. reduction in incident response time.

Prevents known and unknown threats

Performance and Capacities1 PA-200
• Blocks a range of known threats, including exploits, malware and
spyware, across all ports, regardless of common threat-evasion Firewall throughput (App-ID enabled) 100 Mbps
tactics employed. Threat prevention throughput 50 Mbps
• Limits the unauthorized transfer of files and sensitive data, and IPsec VPN throughput 50 Mbps
safely enables non-work-related web surfing.
New sessions per second 1,000
• Identifies unknown malware, analyzes it based on ­hundreds of Max sessions 64,000
malicious behaviors, and then ­automatically creates and delivers
1
Performance and capacities are measured under ideal testing
protection. conditions using PAN-OS 7.1.

Palo Alto Networks | PA-200 Specsheet 1

The PA-200 supports a wide range of networking features that enable you to more easily integrate our security features
into your existing network.

Networking Features Hardware Specifications

Interface Modes I/O

L2, L3, Tap, Virtual wire (transparent mode) (8) 10/100/1000
Routing Management I/O
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, (1) 10/100/1000 out-of-band management port, ­
Static routing (1) RJ-45 console port
Policy-based forwarding Storage capacity
Point-to-Point Protocol over Ethernet (PPPoE) 16GB SSD
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 Power supply (Avg/Max power consumption)
Bidirectional Forwarding Detection (BFD) 40W (20W/30W)

IPv6 Max BTU/hr

L2, L3, Tap, Virtual wire (transparent mode) 102 BTU
Features: App-ID, User-ID, Content-ID, WildFire and SSL decryption Input voltage (Input frequency)
SLAAC 100-240VAC (50-60Hz)

IPsec VPN Max current consumption

Key exchange: Manual key, IKEv1 and IKEv2 (pre-shared key, 3.3A@100VAC
­certificate-based authentication)
Mean Time Between Failure (MTBF)
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
13 years
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
Weight (Stand-alone device/As shipped)
VLANs
2.8 lbs /5.0 lbs Shipping
802.1q VLAN tags per device/per interface: 4,094/4,094
Safety
Network Address Translation (NAT)
cCSAus, CB
NAT modes (IPv4): Static IP, dynamic IP, dynamic IP and port
(port address translation) EMI
NAT64, NPTv6 FCC Class B, CE Class B, VCCI Class B

Additional NAT features: Dynamic IP reservation, tunable dynamic IP Certifications

and port oversubscription
See: https://www.paloaltonetworks.com/company/certifications.html
High availability
Environment
Active/Passive with no session synchronization
Operating temperature: 32 to 104 F, 0 to 40 C
Failure detection: Path monitoring, interface monitoring
Non-operating temperature: -4 to 158 F, -20 to 70 C

To view additional information about the features and associated capacities of the PA-200, please visit
www.paloaltonetworks.com/products.

4401 Great America Parkway © 2016 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark
Santa Clara, CA 95054 of Palo Alto Networks. A list of our trademarks can be found at http://www.
Main: +1.408.753.4000 paloaltonetworks.com/company/trademarks.html. All other marks mentioned
Sales: +1.866.320.4788 herein may be trademarks of their respective companies.
Support: +1.866.898.9087 pan-ss-pa-200-040116

www.paloaltonetworks.com