Skip to content


Product Line: Palo Alto Networks PA-3200 Series
Product Type: Firewall
Original price $0.00 - Original price $1,670.00
Original price
$0.00 - $1,670.00
Current price $1,670.00
Title: Used

Orders typically ship within 1-3 Business days, if you need an item to ship sooner please contact us.

Product Description

The PA-3220 Palo Alto firewall delivers a firewall throughput of 5 Gbps, threat prevention throughput of 2.2 Gbps, and IPsec VPN throughput of 2.5 Gbps, designed to secure medium to large-sized networks. It supports up to 1,000,000 simultaneous sessions, with a capacity to initiate up to 58,000 new sessions per second, and can be expanded from 1 to 6 virtual systems. The device provides a comprehensive range of connectivity options, including (12) 10/100/1000 Ethernet ports, (4) 1G SFP, and (4) 1G/10G SFP/SFP+ interfaces, and comes equipped with a 240GB SSD for storage, all within a 2U rack-mountable form factor.

Key Feature for the PA-3220

  • What is the firewall throughput capability of the PA-3220?
    The firewall throughput capability of the PA-3220 is 5 Gbps.
  • How many virtual systems can the device support?
    The device supports 1 virtual system by default, with the capability to expand up to 6.
  • What types of VPN throughput does the PA-3220 offer and its capacity?
    The PA-3220 offers IPsec VPN throughput with a capacity of 2.5 Gbps.
  • Can you detail the storage capacity and power supply specs of the PA-3220?
    The PA-3220 has a storage capacity of 240GB SSD and uses a redundant 650-watt AC or DC power supply, with average and maximum power consumption of 180/240 watts respectively.
  • What are the management I/O ports available on the PA-3220?
    The management I/O ports include (1) 10/100/1000 out-of-band management port, (2) 10/100/1000 high availability ports, (1) 10G SFP+ high availability port, (1) RJ-45 console port, and (1) Micro USB port.
  • Describe the physical specifications of the PA-3220 for rack mounting.
    The PA-3220 is rack mountable with dimensions suitable for a 2U, 19” standard rack, measuring 3.5” in height, 20.53” in depth, and 17.34” in width.
  • What is the Threat Prevention throughput of this device?
    The Threat Prevention throughput of the device is 2.2 Gbps.
  • How does the PA-3220 handle VLANs?
    The PA-3220 supports 802.1q VLAN tags, capable of handling 4,094 VLANs per device and per interface.
  • What are the IPsec VPN key exchange methods supported by the PA-3220?
    The PA-3220 supports manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) for IPsec VPN key exchange.
  • Can you provide information on the routing capabilities of the PA-3220?
    The routing capabilities include OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, and static routing.

Product Review

The Palo Alto PA-3220 firewall offers a solid throughput performance with 5 Gbps firewall throughput and 2.2 Gbps Threat Prevention throughput, catering well to medium-sized enterprise environments. However, its Threat Prevention throughput might be a limiting factor for organizations with high traffic needs requiring more intensive inspection. The hardware configuration is versatile, supporting a mix of up to 12 10/100/1000 Ethernet ports and 8 1G/10G SFP/SFP+ ports, but the base model's limitation to a single virtual system, expandable to only six, may not suffice for businesses looking for more extensive virtualization capabilities.


The Palo Alto PA-3220 is designed to cater to businesses seeking advanced security measures and efficient network management. It stands out with a firewall throughput of 5 Gbps and a threat prevention throughput of 2.2 Gbps, ensuring rapid data processing and robust security against various threats. Additionally, its IPsec VPN throughput of 2.5 Gbps facilitates secure remote connections, making it an ideal solution for organizations with a dispersed workforce. A key feature of the PA-3220 is its capacity to handle up to 1,000,000 sessions simultaneously, with the ability to establish 58,000 new sessions per second. This capability ensures that the device can support high volumes of traffic without degradation in performance. The system supports a base of one virtual system, with the potential to expand up to six, providing flexibility and scalability to meet the evolving needs of businesses. In terms of connectivity, the PA-3220 offers a comprehensive range of I/O options: - Twelve 10/100/1000 Ethernet ports - Four 1G SFP ports - Four 1G/10G SFP/SFP+ ports For management and redundancy, it includes one out-of-band management port, two high availability ports, and one high availability port with 10G SFP+, alongside an RJ-45 console port and a Micro USB port. The device is equipped with a 240GB SSD for storage, ensuring fast access to logs and configurations. It operates on a redundant 650-watt AC or DC power supply, with average and maximum power consumption of 180W and 240W, respectively, and a maximum BTU/hr of 819. Designed for reliability, the PA-3220 supports AC power supply voltages ranging from 100-240VAC at 50-60 Hz and DC power supply voltages from -48 to -60VDC. Its current consumption rates are optimized for efficiency, ensuring that the device operates within the power constraints of most IT environments. The PA-3220 is rack-mountable, fitting a standard 2U space in a 19-inch rack, with dimensions that accommodate easy integration into existing setups. It weighs 29 lbs standalone, and 41.5 lbs when shipped, reflecting its solid build quality. Operating temperatures range from 32° to 122° F, with a non-operating temperature tolerance from -4° to 158° F. Humidity tolerance is set between 10% to 90%, and it can operate at altitudes up to 10,000 feet, ensuring performance across various environmental conditions. The device also features a front-to-back airflow system, optimizing cooling for sustained operation. The PA-3220 supports a variety of network modes and configurations, including Layer 2, Layer 3, Tap, and Virtual Wire (transparent mode), offering flexibility in deployment. For secure communications, it facilitates both manual key and IKEv1/IKEv2 key exchanges for IPSec VPN, with support for pre-shared key and certificate-based authentication. It also supports up to 4,094 802.1q VLAN tags per device and per interface, providing extensive network segmentation options. Routing capabilities include OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, and static routing, enabling efficient data traffic management across complex network architectures. This blend of performance, security, and flexibility makes the Palo Alto PA-3220 a comprehensive solution for modern network security requirements.


Item Number and Manufacturer Palo Alto PA-3220
Firewall Data Processing Rate 5 Gigabits per second
Threat Management Speed 2.2 Gigabits per second
IPsec VPN Data Rate 2.5 Gigabits per second
Session Capacity 1 Million
Session Establishment Rate 58,000 per second
Virtual System Capacity (Initial/Maximum) 1/6
Interfaces 12x 10/100/1000 Ethernet, 4x 1G SFP, 4x 1G/10G SFP/SFP+
Management Interfaces 1x 10/100/1000 Ethernet OOB, 2x 10/100/1000 HA, 1x 10G SFP+ HA, 1x RJ-45 Console, 1x Micro USB
Storage 240 GB Solid State Drive
Power Requirement (Average/Peak) Redundant 650W AC/DC (180/240 Watts)
Heat Dissipation 819 BTU per hour
Power Input Specifications AC: 100-240VAC, 50-60Hz; DC: -48V to -60V
Electrical Current Consumption AC: 2.3A@100V, 1.0A@240V; DC: 4.7A@-48V, 3.8A@-60V
Form Factor and Size 2U rack-mount, 3.5"H x 20.53"D x 17.34"W
Device Weight (Without/With Packaging) 29 lbs / 41.5 lbs
Operational Temperature Range 32°F to 122°F (0°C to 50°C)
Storage Temperature Range -4°F to 158°F (-20°C to 70°C)
Humidity Range 10% to 90% non-condensing
Maximum Operating Elevation 10,000 feet (3,048 meters)
Cooling System Airflow Direction Front to Back
Supported Interface Configurations Layer 2, Layer 3, Tap, Virtual Wire
IPSec VPN Specifications Manual Key, IKEv1, IKEv2 with Pre-Shared Key or Certificate Authentication
Supported VLANs Up to 4,094 VLANs per device/interface
Routing Protocols OSPF v2/v3, BGP (both with Restart Capability), RIP, Static Routes

Compare products

{"one"=>"Select 2 or 3 items to compare", "other"=>"{{ count }} of 3 items selected"}

Select first item to compare

Select second item to compare

Select third item to compare