Table1: PA-5450 Performance and Capacities |
||
---|---|---|
PA-5450ConfiguredSystem* |
Single PA-5400-DPC-A |
|
Firewall throughput (HTTP/appmix) |
200/200 Gbps |
72/68 Gbps |
Threat Prevention throughput (HTTP/appmix) |
125/150 Gbps |
31/37 Gbps |
IPsec VPN throughput |
95 Gbps** |
19 Gbps |
Max sessions |
100M |
20M |
New sessions per second |
4M |
830,000 |
Virtual systems (base/max) |
25/225 |
— |
Table2:PA-5450NetworkingFeatures |
---|
Interface Modes |
L2, L3, tap, virtual wire (transparent mode) |
Routing |
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing |
Policy-based forwarding |
Point-to-point protocol over Ethernet (PPPoE) and DHCP supported for dynamic address assignment |
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
Bidirectional Forwarding Detection (BFD) |
SD-WAN |
Path quality measurement (jitter, packet loss, latency) |
Initial path selection (PBF) |
Dynamic path change |
IPv6 |
L2, L3, tap, virtual wire (transparent mode) |
Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption |
SLAAC |
IPsec VPN |
Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication) |
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) |
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
GlobalProtect large-scale VPN for simplified configuration and management |
Table2:PA-5450NetworkingFeatures(cont.) |
|||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
VLANs |
|||||||||||||||||||||||||||||||||
802.1Q VLAN tags per device/per interface: 4,094/4,094 |
|||||||||||||||||||||||||||||||||
Aggregate interfaces (802.3ad), LACP |
|||||||||||||||||||||||||||||||||
NetworkAddressTranslation |
|||||||||||||||||||||||||||||||||
NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) |
|||||||||||||||||||||||||||||||||
NAT64, NPTv6 |
|||||||||||||||||||||||||||||||||
Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription |
|||||||||||||||||||||||||||||||||
High Availability |
|||||||||||||||||||||||||||||||||
Modes: active/active, active/passive, HA clustering |
|||||||||||||||||||||||||||||||||
Failure detection: path monitoring, interface monitoring |
|||||||||||||||||||||||||||||||||
Mobile Network Infrastructure* |
|||||||||||||||||||||||||||||||||
GTP Security |
|||||||||||||||||||||||||||||||||
SCTP Security
|
PA-5450 Base AC Hardware Bundle
Includes Chassis, 2xAC power supplies, 4xFans, Base Card, Management Processing Card, and Networking Card, includes 4 post rack mount kit
#PAN-PA-5450-AC-SYS
PA-5450 Base DC Hardware Bundle
Includes Chassis, 2xAC power supplies, 4xFans, Base Card, Management Processing Card, and Networking Card, includes 4 post rack mount kit
#PAN-PA-5450-DC-SYS