The Palo Alto Networks PA-400 Series, comprising the PA-460, PA-410, PA-410, and PA-410, brings ML-Powered NGFW capabilities to distributed enterprise branch offices, retail locations, and midsize businesses.
The world’s first ML-Powered Next-Generation Firewall (NGFW) enables you to prevent unknown threats, see and secure everything—including the Internet of Things (IoT)—and reduce errors with automatic policy recommendations.
The controlling element of the PA-400 Series is PAN-OS®, the same software that runs all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, inclusive of applications, threats, and content, and then ties that traffic to the user regardless of location or device type. The application, content, and user—in other words, the elements that run your business—then serve as the basis of your security policies, resulting in improved security posture and reduced incident response times.
Quick Specs
Table 1 shows the Quick Specs.
|
Part number |
PAN-PA-440 |
|
Description |
Palo Alto Networks PA-440, 3.0 Gbps firewall throughput, 0.9 Gbps threat prevention throughput |
|
Firewall throughput (HTTP/appmix) |
3.0/2.4 Gbps |
|
Threat Prevention throughput (HTTP/appmix) |
0.9/1.0 Gbps |
|
IPsec VPN throughput |
1.6 Gbps |
|
Max sessions |
200,000 |
|
New sessions per second |
39,000 |
Product Details
Key Security and Connectivity Features1.ML-Powered Next-Generation Firewall
Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack prevention for file- based attacks while identifying and immediately stopping never-before-seen phishing attempts.
2.Enables SD-WAN functionalityDelivers an exceptional end user experience by minimizing latency, jitter, and packet loss.
3.Delivers a unique approach to packet processing with Single-Pass Architecture
Avoids introducing latency by scanning traffic for all signatures in a single pass, using stream-based, uniform signature matching.
4.Prevents malicious activity concealed in encrypted trafficOffers rich visibility into TLS traffic, such as the amount of encrypted traffic, TLS/SSL versions, cipher suites, and more, without decrypting.
5.Identifies and categorizes all applications, on all ports, all the time, with full Layer 7 inspectionUses the application, not the port, as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect, and apply traffic-shaping.
6.Enforces security for users at any location, on any device, while adapting policy based on user activityPrevents corporate credentials from leaking to third-party websites and prevents reuse of stolen credentials by enabling multi-factor authentication (MFA) at the network layer for any application without any application changes.
Compare to Similar Items
Table 2 shows the comparison.
|
Model |
PAN-PA-440 |
|||
|
Firewall throughput (HTTP/appmix) |
5.2/4.7 Gbps |
3.8/3.2 Gbps |
3.0/2.4 Gbps |
1.7/1.3 Gbps |
|
Threat Prevention throughput (HTTP/appmix) |
2.4/2.6 Gbps |
1.6/1.7 Gbps |
0.9/1.0 Gbps |
0.6/0.7 Gbps |
|
IPsec VPN throughput |
3.1 Gbps |
2.2 Gbps |
1.6 Gbps |
0.93 Gbps |
|
Max sessions |
400,000 |
300,000 |
200,000 |
64,000 |
|
New sessions per second |
74,000 |
52,000 |
39,000 |
13,000 |
Get More Information
Do you have any question about the PAN-PA-440?
Contact us now via Live Chat or [email protected].
PA-440 Specification
PAN-PA-440 Specification |
|
|
Model |
PA-440 |
|
Performance and Capacities Specifications |
|
|
Firewall throughput (HTTP/appmix) |
3.0/2.4 Gbps |
|
Threat Prevention throughput (HTTP/appmix) |
0.9/1.0 Gbps |
|
IPsec VPN throughput |
1.6 Gbps |
|
Max sessions |
200,000 |
|
New sessions per second |
39,000 |
|
Networking Features |
|
|
Interface Modes |
L2, L3, tap, virtual wire (transparent mode) |
|
Routing |
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-point protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
|
SD-WAN |
Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change |
|
IPv6 |
L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC |
|
IPsec VPN |
Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
|
Hardware Specifications |
|
|
I/O |
10/100/1000 (8) RJ45 |
|
Management I/O |
10/100/1000 out-of-band management port (1), RJ45 console port (1), USB port (1), Micro USB console port (1) |
|
Storage Capacity |
128 GB eMMC |
|
Power supply (Avg/max power consumption) |
29/34 W |
|
Max BTU/HR |
117 |
|
Input Voltage (Input Frequency) |
100–240 VAC (50–60 Hz) |
|
Max Current Consumption |
2.9 A @ 12 VDC |
|
Max Inrush Current |
3.3 A |
|
Dimensions |
1.74” H x 8.83” D x 8.07” W |
|
Weight (Standalone device/as shipped) |
5.0 lbs / 7.8 lbs |
|
Safety |
cTUVus, CB |
|
EMI |
FCC Class B, CE Class B, VCCI Class B |
|
Environment |
|
|
Operating temperature |
32° to 104° F, 0° to 40° C |
|
Non-operating temperature |
-4° to 158° F, -20° to 70° C Passive cooling |
Customer questions & answers
Customer reviews
0 out of 5
No reviews yet