 
      
        Palo Alto Networks Enterprise Firewall PA-450
        The World's first ML-Powered Next Generation Firewall
      
      
         
      
        Click here to jump to more pricing!
        Please Note: All Prices are Inclusive of GST
      
Overview:
The Palo Alto Networks PA-400 Series, comprising the PA-460, PA-450, PA-440, and PA-410, brings ML-Powered NGFW capabilities to distributed enterprise branch offices, retail locations, and midsize businesses.
The world's first ML-Powered Next-Generation Firewall (NGFW) enables you to prevent unknown threats, see and secure everything-including the Internet of Things (IoT)-and reduce errors with automatic policy recommendations.
The controlling element of the PA-400 Series is PAN-OS®, the same software that runs all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, inclusive of applica- tions, threats, and content, and then ties that traffic to the user regardless of location or device type. The application, content, and user-in other words, the elements that run your business-then serve as the basis of your security pol- icies, resulting in improved security posture and reduced incident response times.
Key Security and Connectivity Features:
ML-Powered Next-Generation Firewall
- Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack prevention for file- based attacks while identifying and immediately stopping never-before-seen phishing attempts.
- Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW.
- Uses behavioral analysis to detect IoT devices and make policy recommendations as part of a cloud-delivered and natively integrated service on the NGFW.
- Automates policy recommendations that save time and reduce the chance of human error.
Identifies and categorizes all applications, on all ports, all the time, with full Layer 7 inspection
- Identifies the applications traversing your network irrespective of port, protocol, evasive techniques, or encryption (TLS/SSL).
- Uses the application, not the port, as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect, and apply traffic-shaping.
- Offers the ability to create custom App-ID™ tags for pro- prietary applications or request App-ID development for new applications from Palo Alto Networks.
- Identifies all payload data within an application (e.g., files and data patterns) to block malicious files and thwart exfil- tration attempts.
- Creates standard and customized application usage reports, including software-as-a-service (SaaS) reports that provide insight into all sanctioned and unsanctioned SaaS traffic on your network.
- Enables safe migration of legacy Layer 4 rule sets to App-ID-based rules with built-in Policy Optimizer, giving you a rule set that is more secure and easier to manage.
Enables SD-WAN functionality
- Allows you to easily adopt SD-WAN by simply enabling it on your existing firewalls.
- Enables you to safely implement SD-WAN, which is natively integrated with our industry-leading security.
- Delivers an exceptional end user experience by minimizing latency, jitter, and packet loss.
Prevents malicious activity concealed in encrypted traffic
- Inspects and applies policy to TLS/SSL-encrypted traffic, both inbound and outbound, including for traffic that uses TLS 1.3 and HTTP/2.
- Offers rich visibility into TLS traffic, such as amount of encrypted traffic, TLS/SSL versions, cipher suites, and more, without decrypting.
- Enables control over use of legacy TLS protocols, insecure ciphers, and misconfigured certificates to mitigate risks.
- Facilitates easy deployment of decryption and lets you use built-in logs to troubleshoot issues, such as applications with pinned certificates.
- Lets you enable or disable decryption flexibly based on URL category, source and destination zone, address, user, user group, device, and port, for privacy and compliance purposes.
- Allows you to create a copy of decrypted traffic from the firewall (i.e., decryption mirroring) and send it to traffic collection tools for forensics, historical purposes, or data loss prevention (DLP).
Delivers a unique approach to packet processing with Single-Pass Architecture
- Performs networking, policy lookup, application and de- coding, and signature matching-for all threats and con- tent-in a single pass. This significantly reduces the amount of processing overhead required to perform multi- ple functions in one security device.
- Avoids introducing latency by scanning traffic for all signa- tures in a single pass, using stream-based, uniform signa- ture matching.
- Enables consistent and predictable performance when security subscriptions are enabled. (In Table 1, "Threat Prevention throughput" is measured with multiple sub- scriptions enabled.)
Enforces security for users at any location, on any device, while adapting policy based on user activity
- Enables visibility, security policies, reporting, and forensics based on users and groups-not just IP addresses.
- Easily integrates with a wide range of repositories to lever- age user information: wireless LAN controllers, VPNs, directory servers, SIEMs, proxies, and more.
- Allows you to define Dynamic User Groups (DUGs) on the firewall to take time-bound security actions without wait- ing for changes to be applied to user directories.
- Applies consistent policies irrespective of users' locations (office, home, travel, etc.) and devices (iOS and Android® mobile devices, macOS®, Windows®, Linux desktops, lap- tops; Citrix and Microsoft VDI and Terminal Servers).
- Prevents corporate credentials from leaking to third-party websites and prevents reuse of stolen credentials by enabling multi-factor authentication (MFA) at the network layer for any application without any application changes.
- Provides dynamic security actions based on user behavior to restrict suspicious or malicious users.
Technical Specifications:
| Table 1: PA-400 Series Performance and Capacities | ||||
|---|---|---|---|---|
| 
 | PA-460 | PA-450 | PA-440 | PA-410 | 
| Firewall throughput (HTTP/appmix) | 5.2/4.7 Gbps | 3.8/3.2 Gbps | 3.0/2.4 Gbps | 1.7/1.3 Gbps | 
| Threat Prevention throughput (HTTP/appmix) | 2.4/2.6 Gbps | 1.6/1.7 Gbps | 0.9/1.0 Gbps | 0.6/0.7 Gbps | 
| IPsec VPN throughput | 3.1 Gbps | 2.2 Gbps | 1.6 Gbps | 0.93 Gbps | 
| Max sessions | 400,000 | 300,000 | 200,000 | 64,000 | 
| New sessions per second | 74,000 | 52,000 | 39,000 | 13,000 | 
| Table 2: PA-400 Series Networking Features | 
|---|
| Interface Modes | 
| L2, L3, tap, virtual wire (transparent mode) | 
| Routing | 
| OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing | 
| Policy-based forwarding | 
| Point-to-point protocol over Ethernet (PPPoE) | 
| Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 | 
| SD-WAN | 
| Path quality measurement (jitter, packet loss, latency) | 
| Initial path selection (PBF) | 
| Dynamic path change | 
| IPv6 | 
| L2, L3, tap, virtual wire (transparent mode) | 
| Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption | 
| SLAAC | 
| IPsec VPN | 
| Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication) | 
| Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) | 
| Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 | 
| VLANs | 
| 802.1Q VLAN tags per device/per interface: 4,094/4,094 | 
| Table 3: PA-400 Series Hardware Specifications | 
|---|
| I/O | 
| PA-460, PA-450, PA-440: 10/100/1000 (8) RJ45 PA-410: 10/100/1000 (7) RJ45 | 
| Management I/O | 
| 10/100/1000 out-of-band management port (1), RJ45 console port (1), USB port (1), Micro USB console port (1) | 
| Storage Capacity | 
| PA-460, PA-450, PA-440: 128 GB eMMC PA-410: 64 GB eMMC | 
| Table 3: PA-400 Series Hardware Specifications (cont.) | 
|---|
| Power Supply (Avg/Max Power Consumption) | 
| 
                        PA-460, PA-450: 33/41 W | 
| Max BTU/hr | 
| 
                        PA-460, PA-450: 141 | 
| Input Voltage (Input Frequency) | 
| 100–240 VAC (50–60 Hz) | 
| Max Current Consumption | 
| 
                        PA-460, PA-450: 3.4 A @ 12 VDC | 
| Max Inrush Current | 
| 
                        PA-460, PA-450: 4.2 A | 
| Dimensions | 
| 
                        PA-460, PA-450, PA-440: 1.74” H x 8.83” D
                        x 8.07” W | 
| Weight (Standalone Device/As Shipped) | 
| 
                        PA-460, PA-450, PA-440: 5.0 lbs / 7.8 lbs | 
| Safety | 
| cTUVus, CB | 
| EMI | 
| FCC Class B, CE Class B, VCCI Class B | 
| Environment | 
| Operating temperature: 32° to 104° F, 0° to 40° C Non-operating temperature: -4° to 158° F, -20° to 70° C Passive cooling | 
Documentation:
Download the Palo Alto Networks Firewall Overview Datasheet (PDF).
Download the Palo Alto Networks PA-400 Series Specification Datasheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing subject to change without notice.
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote

