Pa lo Alto Networks Enterprise Firewall PA-410

The world’s first ML-Powered Next-Generation Firewall (NGFW) enables you to prevent unknown threats, see and secure everything—including the Internet of Things (IoT)—and reduce errors with automatic policy recommendations.

Category : PaloAlto Firewall
Brand : Palo Alto
Model : Palo Alto-410

Description

PA-400 Series
The Palo Alto Networks PA-400 Series, comprisingrnthe PA-460, PA-450, PA-440, and PA-410, bringsrnML-Powered NGFW capabilities to distributedrnenterprise branch offices, retail locations, andrnmidsize businesses.rnThe world’s first ML-Powered Next-GenerationrnFirewall (NGFW) enables you to prevent unknownrnthreats, see and secure everything—including thernInternet of Things (IoT)—and reduce errors withrnautomatic policy recommendations. 


Key Security and Connectivity Features


ML-Powered Next-Generation Firewall

  • Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack
  • prevention for file-based attacks while identifying and immediately stopping never-before-seen phishing attempts.
  •  Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW.
  •  Uses behavioral analysis to detect IoT devices and make policy recommendations as part of a cloud-delivered and natively integrated service on the NGFW.
  • Automates policy recommendations that save time and reduce the chance of human error
PA-400 Series Performance and Capacities

Firewall throughput (HTTP/appmix)
  • 1.6/1.2 Gbps 

Threat Prevention throughput (HTTP/appmix)

  • 0.6/0.685 Gbps

IPsec VPN throughput

  • 0.93 Gbps

Max sessions

  • 64,000

New sessions per second

  • 12,000
Networking Features

Interface Modes
  • L2, L3, tap, virtual wire (transparent mode)

Routing

  • OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing
  • Policy-based forwarding
  • Point-to-point protocol over Ethernet (PPPoE)
  • Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3

SD-WAN

  • Path quality measurement (jitter, packet loss, latency)
  • Initial path selection (PBF)
  • Dynamic path change

IPv6

  • L2, L3, tap, virtual wire (transparent mode)
  • Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption
  • SLAAC

IPsec VPN

  • Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication)
  • Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
  • Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512

VLANs

  • 802.1Q VLAN tags per device/per interface: 4,094/4,094