Palo Alto Datasheet - PA-220

PA-220

App-ID firewall throughput500 Mbps

Threat prevention throughput150 Mbps

Connections per second4,200

Max sessions (IPv4 or IPv6)64,000

Performance

App-ID firewall throughput500 Mbps

Threat prevention throughput150 Mbps

IPSec VPN throughput100 Mbps

Connections per second4,200

Sessions

Max sessions (IPv4 or IPv6)64,000

Policies

Security rules250

Security rule schedules256

NAT rules400

Decryption rules100

App override rules100

QoS rules100

Tunnel content inspection rules100

Policy based forwarding rules100

Captive portal rules10

DoS protection rules100

Security Zones

Max security zones15

Objects (addresses and services)

Address objects2,500

Address groups125

Members per address group2,500

Service objects1,000

Service groups250

Members per service group500

FQDN address objects2,000

Max IP addresses registered per system*1,000

Tags per IP address32

Security Profiles

Security profiles38

App-ID

Custom App-ID signatures6,000

Shared custom App-IDs512

Custom App-IDs (virtual system specific)6,416

User-ID

User-IP mappings (management plane)512,000

User-IP mappings (data plane)128,000

Active and unique groups used in policy1,000

Number of agents100

Monitored servers per agent100

Maximum terminal services agents400

SSL Decryption

Max SSL inbound certificates25

SSL certificate cache (forward proxy)128

Max concurrent decryption sessions6,400

URL Filtering

Total entries for allow list, block list and custom categories25,000

Max custom categories2,849

Max custom categories (virtual system specific)500

Dataplane cache size for URL filtering5,000

Management plane dynamic cache size1,000,000

Interfaces

Mgmt - out-of-band10/100/1000, RJ45/Micro USB console

Mgmt - 10/100/1000 high availabilityNA

Mgmt - 40Gbps high availabilityundefined

Traffic - 10/100/10008

Traffic - 100/1000/10000NA

Traffic - 1Gbps SFPNA

Traffic - 10Gbps SFP+NA

Traffic - 10Gbps XFPNA

Traffic - 40Gbps QSFPNA

802.1q tags per device4,094

802.1q tags per physical interface4,094

Max interfaces (logical and physical)1,024

Maximum aggregate interfaces4

Virtual Routers

Virtual routers3

Virtual Wires

Virtual wires256

Virtual Systems

Base virtual systems1

Max virtual systems*NA

Routing

IPv4 forwarding table size*2,500

IPv6 forwarding table size*2,500

System total forwarding table size5,000

Max route maps per virtual router50

Max routing peers (protocol dependent)500

Static entries - DNS proxy1,024

Bidirectional Forwarding Detection (BFD) SessionsNA

L2 Forwarding

ARP table size per device1,500

IPv6 neighbor table size1,500

MAC table size per device1,500

Max ARP entries per broadcast domain1,500

Max MAC entries per broadcast domain1,500

NAT

Total NAT rule capacity400

Max NAT rules (static)*400

Max NAT rules (DIP)*400

Max NAT rules (DIPP)200

Max translated IPs (DIP)16,000

Max translated IPs (DIPP)*200

Default DIPP pool oversubscription*2

Address Assignment

DHCP servers3

Max number of assigned addresses64,000

High Availability

Devices supported2

Max virtual addresses32

QoS

Number of QoS policies100

Physical interfaces supporting QoS8

Clear text nodes per physical interface31

DSCP marking by policyYes

Subinterfaces supportedSystem Limit

IPSec VPN

Site to site1,000

Max IKE Peers1,000

GlobalProtect Client VPN

Max tunnels (SSL, IPSec, and IKE with XAUTH)250

GlobalProtect Clientless VPN

Max SSL tunnels50

Multicast

Replication (egress interfaces)100

Routes500

Product Notes

End-of-saleN
A