• Identifies the application, regardless of port, encryption (SSL or SSH), or evasive technique employed
• Uses the application, not the port, as the basis for all of your safe enablement policy decisions: allow, deny, schedule, inspect and apply traffic-shaping
• Categorizes unidentified applications for policy control, threat forensics or App-ID application identification technology development

Enforces security policies for any user, at any location

• Deploys consistent policies to local and remote users running on the Windows®, Mac® OS X®, Linux®, Android or Apple® iOS platforms
• Enables agentless integration with Microsoft® Active Directory® and Terminal Services, LDAP, Novell® eDirectory and Citrix®
• Easily integrates your firewall policies with 802.1X wireless, proxies, NAC solutions, and any other source of user identity information

Prevents known and unknown threats

• Blocks a range of known threats, including exploits, malware and spyware, across all ports, regardless of common threat-evasion tactics employed
• Limits the unauthorized transfer of files and sensitive data, and safely enables non-work-related web surfing
• Identifies unknown malware, analyzes it based on hundreds of malicious behaviors, and then automatically creates and delivers protection

Palo Alto Networks PA-800 Series next-generation firewall appliances, comprised of the PA-820 and PA-850, are designed to secure enterprise branch offices and midsized businesses.

The controlling element of the Palo Alto Networks® PA-800 Series appliances is PAN-OS® security operat- ing system, which natively classifies all traffic, inclusive of applications, threats and content, and then ties that traffic to the user, regardless of location or device type. The application, content and user – in other words, the business elements that run your business – are then used as the basis of your security policies, resulting in an improved security posture and a reduction in incident response time.

Specification

The Palo Alto Networks enterprise firewall PA-500 is ideally suited for Internet gateway deployments within medium to large branch offices and medium sized enterprises to ensure network security and threat prevention. The Palo Alto firewall PA-500 manages network traffic flows with high performance processing and dedicated memory for networking, security, threat prevention, URL filtering and management. Palo Alto Networks next-generation firewall’s high speed backplane smoothes the pathway between processors and the separation of data and control plane ensures that management access is always available, irrespective of the traffic load.

The high speed backplane is divided into separate data and control planes, thereby ensuring that management access is always available, irrespective of the traffic load. The controlling element of the PA-500 next-generation firewall is PAN-OS, a security-specific operating system that allows organizations to safely enable applications using App-ID, User-ID, Content-ID, GlobalProtect and WildFire.

Classify all applications, on all port, all the time with App-ID.

• Identify the application, regardless of port, encryption (SSL or SSH) or evasive technique employed.
• Use the application, not the port, as the basis for all safe enablement policy decisions: allow, deny, schedule, inspect, apply traffic shaping.
• Categorize unidentified applications for policy control, threat forensics, custom App-ID creation, or packet capture for App-ID development.

Extend safe application enablement policies to any user, at any location, with User-ID and GlobalProtect.

• Agentless integration with Active Directory, LDAP, eDirectory Citrix and Microsoft Terminal Services.
• Integrate with NAC, 802.1X wireless and other non-standard user repositories with an XML API.
• Deploy consistent policies to local and remote users running Microsoft Windows, Mac OS X, Linux, Android or iOS platforms.

Protect against all threat—both known and unknown—with Content-ID and Wildfire

• Block a range of known threats including exploits, malware and spyware, across all ports, regardless of common threat evasion tactics employed.
• Limit unauthorized transfer of files and sensitive data, and control non-workrelated web surfing.
• Identify unknown malware, analyze for more than 100 malicious behaviors, automatically create and deliver a signature in the next available update.

The controlling element of the Palo Alto Networks® PA-220R is PAN-OS® security operating system, which natively classifies all traffic, inclusive of applications, threats and content, and then ties that traffic to the user, regardless of location or device type. The application, content and user – in other words, the elements that run your business – are then used as the basis of your security policies, resulting in an improved security posture and a reduction in incident response time.

Specification

• Identifies the application, regardless of port, encryption (SSL or SSH), or evasive technique employed
• Uses the application, not the port, as the basis for all of your safe enablement policy decisions: allow, deny, schedule, inspect and apply traffic-shaping
• Categorizes unidentified applications for policy control, threat forensics or App-ID application identification technology development

Enforces security policies for any user, at any location

• Deploys consistent policies to local and remote users running on the Windows®, Mac® OS X®, Linux®, Android®, or Apple® iOS platforms
• Enables agentless integration with Microsoft® Active Directory® and Terminal Services, LDAP, Novell® eDirectory and Citrix®
• Easily integrates your firewall policies with 802.1X wireless, proxies, NAC solutions, and any other source of user identity information

Prevents known and unknown threats

• Blocks a range of known threats, including exploits, malware and spyware, across all ports, regardless of common threat-evasion tactics employed
• Limits the unauthorized transfer of files and sensitive data, and safely enables non-work-related web surfing
• Identifies unknown malware, analyzes it based on hundreds of malicious behaviors, and then automatically creates and delivers protection

The controlling element of the Palo Alto Networks® PA-220 is PAN-OS® security operating system, which natively classifies all traffic, inclusive of applications, threats and content, and then ties that traffic to the user, regardless of location or device type. The application, content and user – in other words, the business elements that run your business – are then used as the basis of your security policies, resulting in an improved security posture and a reduction in incident response time.

Highlights

• High availability with active/active and active/passive modes
• Redundant power input for increased reliability
• Fan-less design
• Simplified deployments of large numbers of firewalls through USB

Specification

The Palo Alto Networks PA-200 is targeted at high speed firewall deployments within distributed enterprise branch offices. The PA-200 manages network traffic flows using dedicated computing resources for networking, security, threat prevention and management.

The high speed backplane is divided into separate data and control planes, thereby ensuring that management access is always available, irrespective of the traffic load. The controlling element of the PA-200 next-generation firewall is PAN-OS, a security-specific operating system that allows organizations to safely enable applications using App-ID, User-ID, Content-ID, GlobalProtect, and WildFire.

Classify all applications, on all port, all the time with App-ID.

• Identify the application, regardless of port, encryption (SSL or SSH) or evasive technique employed.
• Use the application, not the port, as the basis for all safe enablement policy decisions: allow, deny, schedule, inspect, apply traffic shaping.
• Categorize unidentified applications for policy control, threat forensics, custom App-ID creation, or packet capture for App-ID development.

Extend safe application enablement policies to any user, at any location, with User-ID and GlobalProtect.

• Agentless integration with Active Directory, LDAP, eDirectory Citrix and Microsoft Terminal Services.
• Integrate with NAC, 802.1X wireless and other non-standard user repositories with an XML API.
• Deploy consistent policies to local and remote users running Microsoft Windows, Mac OS X, Linux, Android or iOS platforms.

Protect against all threat—both known and unknown—with Content-ID and Wildfire

• Block a range of known threats including exploits, malware and spyware, across all ports, regardless of common threat evasion tactics employed.
• Limit unauthorized transfer of files and sensitive data, and control non-workrelated web surfing.
• Identify unknown malware, analyze for more than 100 malicious behaviors, automatically create and deliver a signature in the next available update.

Specification

Specification

Specification

The controlling element of the PA-3000 Series is PAN-OS, a security-specific operating system that natively classifies all traffic, inclusive of applications, threats and content, then ties that traffic to the user, regardless of location or device type. The application, content, and user—in other words, the business elements that run your business—are then used as the basis of your security policies, resulting in an improved security posture and a reduction in incident response time.

Classify all applications, on all port, all the time with App-ID.

• Identify the application, regardless of port, encryption (SSL or SSH) or evasive technique employed.
• Use the application, not the port, as the basis for all safe enablement policy decisions: allow, deny, schedule, inspect, apply traffic shaping.
• Categorize unidentified applications for policy control, threat forensics, custom App-ID creation, or packet capture for App-ID development.

Extend safe application enablement policies to any user, at any location, with User-ID and GlobalProtect.

• Agentless integration with Active Directory, LDAP, eDirectory Citrix and Microsoft Terminal Services.
• Easily integrate firewall policies with NAC, 802.1X wireless, Proxies and NAC solutions.
• Deploy consistent policies to local and remote users running Microsoft Windows, Mac OS X, Linux, Android or iOS platforms.

Protect against all threat—both known and unknown—with Content-ID and Wildfire

• Block a range of known threats including exploits, malware and spyware, across all ports, regardless of common threat evasion tactics employed.
• Limit unauthorized transfer of files and sensitive data, and control non-workrelated web surfing.
• Identify unknown malware, analyze for more than 230 malicious behaviors, automatically create and deliver a signature in the next available update.

The controlling element of the PA-3000 Series is PAN-OS, a security-specific operating system that natively classifies all traffic, inclusive of applications, threats and content, then ties that traffic to the user, regardless of location or device type. The application, content, and user—in other words, the business elements that run your business—are then used as the basis of your security policies, resulting in an improved security posture and a reduction in incident response time.

Classify all applications, on all port, all the time with App-ID.

• Identify the application, regardless of port, encryption (SSL or SSH) or evasive technique employed.
• Use the application, not the port, as the basis for all safe enablement policy decisions: allow, deny, schedule, inspect, apply traffic shaping.
• Categorize unidentified applications for policy control, threat forensics, custom App-ID creation, or packet capture for App-ID development.

Extend safe application enablement policies to any user, at any location, with User-ID and GlobalProtect.

• Agentless integration with Active Directory, LDAP, eDirectory Citrix and Microsoft Terminal Services.
• Easily integrate firewall policies with NAC, 802.1X wireless, Proxies and NAC solutions.
• Deploy consistent policies to local and remote users running Microsoft Windows, Mac OS X, Linux, Android or iOS platforms.

Protect against all threat—both known and unknown—with Content-ID and Wildfire

• Block a range of known threats including exploits, malware and spyware, across all ports, regardless of common threat evasion tactics employed.
• Limit unauthorized transfer of files and sensitive data, and control non-workrelated web surfing.
• Identify unknown malware, analyze for more than 230 malicious behaviors, automatically create and deliver a signature in the next available update.

The controlling element of the PA-3000 Series is PAN-OS, a security-specific operating system that natively classifies all traffic, inclusive of applications, threats and content, then ties that traffic to the user, regardless of location or device type. The application, content, and user—in other words, the business elements that run your business—are then used as the basis of your security policies, resulting in an improved security posture and a reduction in incident response time.

Classify all applications, on all port, all the time with App-ID.

• Identify the application, regardless of port, encryption (SSL or SSH) or evasive technique employed.
• Use the application, not the port, as the basis for all safe enablement policy decisions: allow, deny, schedule, inspect, apply traffic shaping.
• Categorize unidentified applications for policy control, threat forensics, custom App-ID creation, or packet capture for App-ID development.

Extend safe application enablement policies to any user, at any location, with User-ID and GlobalProtect.

• Agentless integration with Active Directory, LDAP, eDirectory Citrix and Microsoft Terminal Services.
• Easily integrate firewall policies with NAC, 802.1X wireless, Proxies and NAC solutions.
• Deploy consistent policies to local and remote users running Microsoft Windows, Mac OS X, Linux, Android or iOS platforms.

Protect against all threat—both known and unknown—with Content-ID and Wildfire

• Block a range of known threats including exploits, malware and spyware, across all ports, regardless of common threat evasion tactics employed.
• Limit unauthorized transfer of files and sensitive data, and control non-workrelated web surfing.
• Identify unknown malware, analyze for more than 230 malicious behaviors, automatically create and deliver a signature in the next available update.