Skip to content


Product Line: Palo Alto PA-3060
Product Type: Firewall
Original price $600.00 - Original price $3,680.00
Original price
$600.00 - $3,680.00
Current price $3,680.00
Title: Surplus

Orders typically ship within 1-3 Business days, if you need an item to ship sooner please contact us.

Product Description

The PA-3060 is equipped with a 4 Gbps firewall throughput and 2 Gbps threat prevention throughput, supported by a 120GB SSD for storage, ensuring efficient data management and security operations. It supports up to 500,000 max sessions with a capability to initiate 50,000 new sessions per second, and offers flexibility with 1/6 base/max virtual systems, catering to diverse networking environments. Connectivity options are comprehensive, featuring (8) 10/100/1000 and (8) Gigabit SFP ports, along with (2) 10 Gigabit SFP+ for high-speed networking, and includes redundancy with its 400W AC power supply for reliable operation.

Key Feature for the PA-3060

  • What is the App-ID enabled firewall throughput of the PA-3060?
    • The firewall throughput with App-ID enabled on the PA-3060 is 4 Gbps.
  • How many new sessions per second can the device handle?
    • The device can handle 50,000 new sessions per second.
  • What are the dimensions and weight of the stand-alone PA-3060?
    • The dimensions are 2.6"H x 14"D x 17.5"W, and it weighs 18lbs as a stand-alone device.
  • Can you detail the high availability modes available on this model?
    • High availability modes include Active/Active and Active/Passive with path monitoring and interface monitoring for failure detection.
  • What types of interface modes does the PA-3060 support?
    • It supports L2, L3, Tap, and Virtual wire (transparent mode) interface modes.
  • What is the maximum power consumption and BTU/hr of the PA-3060?
    • The maximum power consumption is 200W, and it generates a maximum of 683 BTU/hr.
  • How does the PA-3060 handle VPNs and what key exchanges does it support?
    • It handles IPSec VPNs, supporting both manual key and IKEv1/IKEv2 key exchanges, with options for pre-shared key or certificate-based authentication.
  • What are the storage capacity and power supply specifications of the PA-3060?
    • The storage capacity is 120GB SSD, and it has a redundant 400W AC power supply.
  • What routing protocols does the PA-3060 support?
    • It supports OSPFv2/v3, BGP (both with graceful restart), RIP, and static routing.
  • How many VLANs can be configured on the PA-3060, and does it support VLAN tagging?
    • Up to 4,094 VLANs can be configured per device, with support for 802.1q VLAN tagging per interface.

Product Review

The Palo Alto PA-3060 firewall delivers a solid throughput with App-ID enabled at 4 Gbps and threat prevention throughput at 2 Gbps, ensuring efficient traffic management and security enforcement. However, its IPsec VPN throughput is limited to 500 Mbps, which may be a bottleneck for organizations with heavy VPN traffic. Additionally, the device supports a range of interfaces and high availability modes, but its scalability is somewhat restricted, supporting only up to 6 virtual systems, which might not meet the needs of larger, more complex networks.


The Palo Alto PA-3060 is a firewall designed to secure networks with advanced threat prevention features and high throughput rates. It offers a firewall throughput of 4 Gbps with App-ID enabled, ensuring efficient traffic flow and security scanning. The device's threat prevention throughput stands at 2 Gbps, providing robust protection against various cyber threats. For secure remote connections, it supports IPsec VPN with a throughput of 500 Mbps, facilitating safe and reliable remote access. This model can handle new sessions at a rate of 50,000 per second, with a maximum capacity of 500,000 sessions, supporting busy network environments efficiently. It offers flexibility in virtual systems, starting with one and expandable up to six, catering to growing network demands. The PA-3060 is equipped with a comprehensive range of I/O options, including: - Eight 10/100/1000 Ethernet ports - Eight Gigabit SFP slots - Two 10 Gigabit SFP+ slots For management and high availability, the device features one 10/100/1000 out-of-band management port, two 10/100/1000 high availability ports, and one RJ-45 console port. It comes with a 120GB SSD for storage, ensuring ample space for logs and reports. The power supply is redundant with a 400W AC, with average and maximum power consumption of 160W and 200W, respectively. It operates efficiently with a maximum BTU/hr of 683. The PA-3060 is designed for universal power input, supporting 100-240VAC at 50-60Hz and a max current consumption of 2A@100VAC. This device is 1.5U rack-mountable, fitting standard 19” racks with dimensions of 2.6”H x 14”D x 17.5”W. The standalone device weighs 18lbs, with the shipping weight at 27.5lbs. For ensuring continuous operation, it supports high availability modes including Active/Active and Active/Passive, with failure detection mechanisms like path and interface monitoring. The operating temperature range is from 32 to 122 F (0 to 50 C), and the non-operating temperature range is from -4 to 158 F (-20 to 70 C), ensuring reliability across various environments. The PA-3060 supports multiple interface modes, including Layer 2, Layer 3, Tap, and Virtual Wire (transparent mode), providing versatility in deployment. Its IPSec VPN capabilities include manual key, IKEv1, and IKEv2 with options for pre-shared key or certificate-based authentication, ensuring secure and flexible VPN configurations. VLAN support is extensive, with 802.1q VLAN tags allowing up to 4,094 per device and per interface, offering high flexibility in network segmentation. The device is capable of sophisticated routing with support for OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, and static routing, catering to complex network architectures and ensuring uninterrupted network performance.


Model Identifier Palo Alto PA-3060
Application-Identified Throughput Capacity 4 Gigabits/sec
Threat Management Speed 2 Gigabits/sec
Throughput for IPsec VPN 500 Megabits/sec
Session Initiation Rate 50,000 sessions/sec
Maximum Concurrent Sessions 500,000 sessions
Virtual System Capacity (initial/max) 1/6
Network Interfaces 8 x 10/100/1000 Ethernet, 8 x Gigabit SFP, 2 x 10G SFP+
Management Network Ports 1 x 10/100/1000 OOB, 2 x 10/100/1000 HA, 1 x RJ-45 console
Storage Specification 120GB Solid State Drive
Power Supply Specification Redundant 400W AC (160/200W consumption)
Heat Dissipation Rate 683 BTU/hr
Electrical Input Requirements 100-240VAC at 50-60Hz
Electric Current Requirement 2A@100VAC
Mounting Configuration 1.5U, fits 19-inch rack (2.6”H x 14”D x 17.5”W)
Unit Weight (Net/Shipping) 18 lbs/27.5 lbs
High Availability Configurations Active/Active, Active/Passive with Path and Interface Monitoring
Operational Temperature Range 32°F to 122°F (0°C to 50°C)
Storage Temperature Range -4°F to 158°F (-20°C to 70°C)
Supported Interface Modes Layer 2, Layer 3, Tap, Virtual Wire
IPSec VPN Configurations Manual Key, IKEv1/2 with PSK or Certificate Authentication
Virtual LAN Support 802.1Q Tagging, Up to 4,094 VLANs per Device/Interface
Routing Protocols Supported OSPFv2/v3, BGP with Restart, RIP, Static Routing

Compare products

{"one"=>"Select 2 or 3 items to compare", "other"=>"{{ count }} of 3 items selected"}

Select first item to compare

Select second item to compare

Select third item to compare