Palo Alto Firewalls

Palo Alto's desktop PA-Series models, such as the PA-400 series, are aimed at branches and small offices. The right model depends on internet line speed, users, VPN connections and ports. Use the threat prevention throughput in the Palo Alto datasheet rather than the headline figure. Send those details and the team will suggest a model to check against your plans.

The firewall enforces policy with the base platform, but threat prevention, URL filtering, sandboxing and vendor support are separate subscriptions registered to the device. Without them, those protections do not receive updates. Confirm which subscriptions you need, and their terms, with Palo Alto Networks or its partner before ordering.

Yes, PA-Series firewalls can be managed centrally from Panorama, Palo Alto's management platform, alongside head-office firewalls. Panorama should run the same or a later PAN-OS version than the firewalls it manages, so check versions before adding a new unit. Panorama itself is licensed separately by Palo Alto Networks.

Palo Alto Networks controls how a previously owned unit is registered and whether new subscriptions can be applied to it. The rules can differ from buying new, so confirm the position with Palo Alto or its partner for the exact model before ordering, particularly if you need threat prevention from the first day.

App-ID is the Palo Alto feature that identifies which application a flow belongs to by inspecting the traffic itself, rather than trusting the port number. It lets policy allow a business application while blocking others that share the same port, and it gives clear reporting on what is actually running across the network.