Palo Alto Networks PA-2020 500 Mbps Next-Generation 12-Port Firewall

Description: Used unit in good cosmetic and working condition. Pulled from a working environment. Has some signs of previous use.. Palo Alto Networks PA-2020 500 Mbps Next-Generation 12-Port Firewall with 160GB hard drive. Rack mount kit and power cord are included. Firewall throughput (App-ID enabled) 500 Mbps Threat prevention throughput 200 Mbps IPSec VPN throughput 200 Mbps New sessions per second 15,000 Max sessions 125,000 IPSec VPN tunnels/tunnel interfaces 1,000 GlobalProtect (SSL VPN) concurrent users 500 SSL decrypt sessions 1,000 SSL inbound certificates 25 Virtual routers 10 Virtual systems (base/max2) 1/6 Security zones 40 Max. number of policies 2,500 HARDWARE SPECIFICATIONS I/O PA-2020: (12) 10/100/1000, (2) SFP optical gigabit MANAGEMENT I/O • (1) 10/100/1000 out-of-band management port, (1) RJ-45 console port STORAGE CAPACITY • 160GB HDD POWER SUPPLY (AVG/MAX POWER CONSUMPTION) • 250W (105W/120W) MAX BTU/HR • 409 INPUT VOLTAGE (INPUT FREQUENCY) • 100-240VAC (50-60Hz) MAX CURRENT CONSUMPTION • 3A@100VAC MEAN TIME BETWEEN FAILURE (MTBF) • 7.3 years NETWORKING INTERFACE MODES • L2, L3, Tap, Virtual wire (transparent mode) ROUTING Modes: OSPF, RIP, BGP, Static Forwarding table size (entries per device/per VR): 2,500/2,500 (PA-2020) Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 HIGH AVAILABILITY • Modes: Active/Active, Active/Passive • Failure detection: Path monitoring, Interface monitoring ADDRESS ASSIGNMENT • Address assignment for device: DHCP Client/PPPoE/Static • Address assignment for users: DHCP Server/DHCP Relay/Static IPV6 • L2, L3, tap, virtual wire (transparent mode) • Features: App-ID, User-ID, Content-ID, WildFire and SSL decryption MAX INRUSH CURRENT • 70A@230VAC; 35A@115VAC RACK MOUNTABLE (DIMENSIONS) • 1U, 19” standard rack (1.75”H x 17”D x 17”W) WEIGHT (STAND ALONE DEVICE/AS SHIPPED) • 15lbs/20lbs SAFETY • UL, CUL, CB EMI • FCC Class A, CE Class A, VCCI Class A, TUV CERTIFICATIONS • FIPS 140 Level 2, Common Criteria EAL2, ICSA, UCAPL ENVIRONMENT • Operating temperature: 32 to 122 F, 0 to 50 C • Non-operating temperature: -4 to 158 F, -20 to 70 C VLANS • 802.1q VLAN tags per device/per interface: 4,094/4,094 • Max interfaces: 2,048 (PA-2050), 1,024 (PA-2020) • Aggregate interfaces (802.3ad) NAT/PAT • Max NAT rules: 1,000 • Max NAT rules (DIPP): 200 • Dynamic IP and port pool: 254 • Dynamic IP pool: 16,234 • NAT Modes: 1:1 NAT, n:n NAT, m:n NAT • DIPP oversubscription (Unique destination IPs per source port and IP): 2 • NAT64 VIRTUAL WIRE • Max virtual wires: 1,024 (PA-2050), 512 (PA-2020) • Interface types mapped to virtual wires: physical and subinterfaces L2 FORWARDING • ARP table size/device: 2,500 (PA-2050), 1,000 (PA-2020) • MAC table size/device: 2,500 (PA-2050), 1,000 (PA-2020) • IPv6 neighbor table size: 1,000 SECURITY FIREWALL • Policy-based control over applications, users and content • Fragmented packet protection • Reconnaissance scan protection • Denial of Service (DoS)/Distributed Denial of Services (DDoS) protection • Decryption: SSL (inbound and outbound), SSH WILDFIRE Identify and analyze targeted and unknown files for more than 100 malicious behaviors Generate and automatically deliver protection for newly discovered malware via signature updates Signature update delivery in less than 1 hour, integrated logging/ reporting; access to WildFire API for programmatic submission of up to 100 samples per day and up to 1,000 report queries by file hash per day (Subscription Required) FILE AND DATA FILTERING • File transfer: Bi-directional control over more than 60 unique file types • Data transfer: Bi-directional control over unauthorized transfer of CC# and SSN • Drive-by download protection USER INTEGRATION (USER-ID) Microsoft Active Directory, Novell eDirectory, Sun One and other LDAP-based directories Microsoft Windows Server 2003/2008/2008r2, Microsoft Exchange Server 2003/2007/2010 Microsoft Terminal Services, Citrix XenApp XML API to facilitate integration with non-standard user repositories IPSEC VPN (SITE-TO-SITE) • Key Exchange: Manual key, IKE v1 • Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) • Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 • Dynamic VPN tunnel creation (GlobalProtect) THREAT PREVENTION (SUBSCRIPTION REQUIRED) • Application, operating system vulnerability exploit protection • Stream-based protection against viruses (including those embedded in HTML, Javascript, PDF and compressed), spyware, worms URL FILTERING (SUBSCRIPTION REQUIRED) • Pre-defined and custom URL categories • Device cache for most recently accessed URLs • URL category as part of match criteria for security policies • Browse time information QUALITY OF SERVICE (QOS) Policy-based traffic shaping by application, user, source, destination, interface, IPSec VPN tunnel and more 8 traffic classes with guaranteed, maximum and priority bandwidth parameters Real-time bandwidth monitor Per policy diffserv marking Physical interfaces supported for QoS: 4 SSL VPN/REMOTE ACCESS (GLOBALPROTECT) GlobalProtect Gateway GlobalProtect Portal Transport: IPSec with SSL fall-back Authentication: LDAP, SecurID, or local DB Client OS: Mac OS X 10.6, 10.7 (32/64 bit), 10.8 (32/64 bit), Windows XP, Windows Vista (32/64 bit), Windows 7 (32/64 bit) Third party client support: Apple iOS, Android 4.0 and greater, VPNC IPSec for Linux MANAGEMENT, REPORTING, VISIBILITY TOOLS Integrated web interface, CLI or central management (Panorama) Multi-language user interface Syslog, Netflow v9 and SNMP v2/v3 XML-based REST API Graphical summary of applications, URL categories, threats and data (ACC) View, filter and export traffic, threat, WildFire, URL, and data filtering logs Fully customizable reporting Normal 0 false false false EN-US X-NONE X-NONE MicrosoftInternetExplorer4

Price: 135 USD

Location: Cumberland, Maryland

End Time: 2024-11-13T02:48:47.000Z

Shipping Cost: N/A USD