Palo Alto PA-440: Data Sheet
·2 min read·330 words
The Palo Alto PA-440 is Palo Alto Networks' entry-level NGFW for SMBs with 20-100 users. The successor to the PA-220, it incorporates Single Pass Parallel Processing (SP3), App-ID, User-ID, and Content-ID technologies. Renowned for its No. 1 detection quality in the Gartner Magic Quadrant. Data sheet.
Specifications
- Firewall throughput: 3.0 Gbps
- Threat Prevention throughput: 2.2 Gbps (IPS + AV + AntiSpyware enabled)
- SSL decryption throughput: 1.8 Gbps
- Concurrent sessions: 400 000
- New sessions/sec: 23 000
- IPsec VPN tunnels: 100 site-to-site + 250 GlobalProtect
- Maximum policies: 2 500 rules
Interfaces
- 8× GbE RJ45 ports
- No SFP ports (PA-450 adds 2× SFP)
- 1× dedicated management port
- 1× console port
- 1× USB port for reset/bootstrap
Pricing and licenses
- PA-440 hardware: €2 490 excluding VAT
- Threat Prevention for 1 year: €1 190 excluding VAT
- URL Filtering (Advanced) for 1 year: €790 excluding VAT
- WildFire (cloud sandbox) for 1 year: €890 excluding VAT
- GlobalProtect VPN for 1 year: €590 excluding VAT
- SD-WAN subscription for 1 year: €490 excluding VAT
- Complete Bundle for 1 year (all-inclusive): €2 890 excluding VAT
- 3-year TCO with Bundle: 2 490 + 3×2 890 = €11 160 excluding VAT
Palo Alto positioning
Palo Alto differentiates itself through:
- App-ID: L7 application detection independent of port/protocol (e.g., TeamViewer and BitTorrent tunneling)
- User-ID: AD/LDAP/Kerberos integration for user-based policies
- Content-ID: real-time SSL inspection with no performance impact
- PAN-OS: proprietary OS with frequent updates
- WildFire: cloud sandboxing with collaborative intelligence
Competitor comparison
- FortiGate 60F: ~55% less expensive, similar performance for basic firewalling, lower IPS quality
- Cisco Firepower 1010: comparable price and similar detection quality, but more complex management
- Check Point 1570: direct competitor with better R81.20 centralized management
Sizing
SMB with 50 users and stringent security requirements: 1× PA-440 + Complete Bundle = €11 160 excluding VAT/3 years. Headquarters with 100 users: 2× PA-440 HA = €22 320 excluding VAT/3 years.
Order from OPTINOC
Brand-new, genuine Palo Alto PA-440 with a pre-activated Complete Bundle. App-ID/User-ID configuration included at no extra charge. SMB quote within 2 hours.