The PA-3220 is a cutting-edge, ML-Powered Next-Generation Firewall (NGFW) ideal for high-speed internet gateway deployments and IoT device security. This appliance provides security for all traffic, including encrypted data, by employing dedicated processing and memory resources for networking, security, threat prevention, and management. Please contact our cybersecurity experts for assistance with a firewall sizing survey or any other cybersecurity solutions, such as SASE, SSE, and Cloud Security.
Manufacturer: Palo Alto Networks
Manufacturer Part Number: PAN-PA-3220
Manufacturer Website Address: http://www.paloaltonetworks.com
Brand Name: Palo Alto
Product Series: PA-3200
Product Model: PA-3220
Product Name: Palo Alto PA-3220 Network Security/Firewall Appliance
Marketing Information:
Palo Alto Networks PA-3200 Series next-generation firewalls-comprising the PA-3260, PA-3250, and PA-3220-are targeted at high-speed internet gateway deployments. PA-3200 Series appliances secure all traffic, including encrypted traffic, using dedicated processing and memory for networking, security, threat prevention, and management.
Product Type: Network Security/Firewall Appliance
Technical Information for the Palo Alto PA-3220
Firewall Protection Supported:
- SSL Encrypted Traffic Protection
- Threat Protection
- Malware Protection
- Spyware Protection
Encryption Standard:
- 3DES
- AES (128-bit)
- AES (192-bit)
- AES (256-bit)
- MD5
- SHA-1
- SHA-256
- SHA-384
- SHA-512
Interfaces/Ports
Total Number of Ports: 12
Number of Network (RJ-45) Ports: 12
Network & Communication
Ethernet Technology: 10 Gigabit Ethernet
Network Standard:
- 10/100/1000Base-T
- 1000Base-X
- 10GBase-X
I/O Expansions
Number of Total Expansion Slots: 8
Expansion Slot Type:
- SFP (mini-GBIC)
- SFP+
Number of SFP Slots: 4
Number of SFP+ Slots: 4
Management & Protocols
Manageable: Yes
Physical Characteristics
Compatible Rack Unit: 2U
Form Factor: Rack-mountable
Height: 3.5″
Width: 17.3″
Depth: 20.5″
Weight (Approximate): 29 lb
Warranty
Limited Warranty: 12 Month
The Comparison Table Below Shows the PA-3200 Series Performance and Capacities
| PA-3220 | PA-3250 | PA-3260 | |
| Firewall throughput (HTTP/appmix)* | 3.7/4.2 Gbps | 4.6/5.0 Gbps | 6.9/7.8 Gbps |
| Threat Prevention throughput (HTTP/appmix)† | 1.9/2.3 Gbps | 2.4/2.7 Gbps | 3.6/4.3 Gbps |
| IPsec VPN throughput‡ | 2.4 Gbps | 2.6 Gbps | 4.4 Gbps |
| Max sessions | 1M | 2M | 2.2M |
| New sessions per second§ | 46,000 | 58,000 | 84,000 |
| Virtual systems (base/max)|| | 1/6 | 1/6 | 1/6 |
Note: Results were measured on PAN-OS 11.0.
*Firewall throughput is measured with App-ID and logging enabled, utilizing 64 KB HTTP/appmix transactions.
† Threat Prevention throughput is measured with App-ID, IPS, antivirus, antispyware, WildFire, file blocking, and logging enabled, utilizing 64 KB HTTP/appmix transactions.
‡ IPsec VPN throughput is measured with 64 KB HTTP transactions and logging enabled.
§ New sessions per second is measured with application-override, utilizing 1 byte HTTP transactions.
|| Adding virtual systems over base quantity requires a separately purchased license.