Skip to content


Product Line: Network Security Appliance
Product Type: Firewall
Sold out
Original price $0.00 - Original price $0.00
Original price
$0.00 - $0.00
Current price $0.00
Title: Surplus

Orders typically ship within 1-3 Business days, if you need an item to ship sooner please contact us.

Product Description

The PA-220 Palo Alto delivers a firewall throughput of 550/560 Mbps for HTTP/appmix and a Threat Prevention throughput of 270/300 Mbps, with an IPsec VPN throughput at 570 Mbps. It supports a maximum of 64,000 sessions, with a capability to handle up to 4,200 new sessions per second, and offers a variety of I/O options including eight 10/100/1000 ports and dedicated management ports. Designed for versatility and efficiency, it features a 32 GB eMMC storage, dual redundant 40 W power supply options, and supports a wide range of network configurations including L2, L3, tap, and virtual wire modes, alongside 802.1Q VLAN tagging and multiple NAT modes for comprehensive network management and security.

Key Feature for the PA220

  • What is the firewall throughput for HTTP and appmix?
    The firewall throughput is 550 Mbps for HTTP and 560 Mbps for appmix.
  • Can you detail the Threat Prevention throughput capabilities?
    Threat Prevention throughput reaches 270 Mbps for HTTP and 300 Mbps for appmix.
  • What is the maximum IPsec VPN throughput?
    IPsec VPN throughput can achieve up to 570 Mbps.
  • How many maximum sessions does the device support?
    The device supports up to 64,000 maximum sessions.
  • What are the new sessions per second capability?
    It can handle 4,200 new sessions per second.
  • Can you outline the I/O ports available on the device?
    The device includes eight 10/100/1000 I/O ports, one out-of-band management port, one RJ-45 console port, and one USB port, along with a Micro USB console port.
  • What is the storage capacity of the device?
    The device comes with 32 GB eMMC storage capacity.
  • What are the power supply specifications?
    Optional dual redundant power supplies are available with an average/max power consumption of 21 W / 25 W.
  • What are the device's physical dimensions and weight?
    The device measures 1.62” H x 6.29” D x 8.07” W and weighs 3.0 lbs standalone, 5.4 lbs as shipped.
  • What high availability modes does the device support?
    It supports active/active and active/passive high availability modes with path and interface monitoring for failure detection.

Product Review

The Palo Alto PA-220 offers a solid balance between performance and security features, achieving firewall throughput rates of 550/560 Mbps and threat prevention throughput of 270/300 Mbps, making it suitable for small to mid-sized enterprise environments. However, its maximum sessions cap at 64,000 and new sessions per second at 4,200, which might limit high-volume traffic scenarios. The unit provides versatile connectivity options with eight 10/100/1000 Ethernet ports for data, dedicated management interfaces, and support for high availability configurations, but the limited storage capacity of 32 GB eMMC and the optional dual redundant power supply could be potential drawbacks for environments requiring extensive logging or uninterrupted power.


The Palo Alto PA-220 firewall is designed to secure small enterprise branch offices and retail locations, delivering a wide range of networking features in a compact form factor. This device provides comprehensive security features while maintaining high throughput levels, making it an efficient solution for businesses looking to protect their network infrastructure. With a firewall throughput of 550 Mbps for HTTP traffic and 560 Mbps for application mix traffic, the PA-220 ensures efficient data processing and minimal latency for business-critical applications. Its threat prevention capabilities are notable, with throughput reaching 270 Mbps for HTTP and 300 Mbps for mixed application traffic, offering solid protection against a wide array of cyber threats. The device supports IPsec VPN connections with a throughput of 570 Mbps, allowing secure and reliable remote access for employees. It can handle up to 64,000 concurrent sessions, with the capability to establish 4,200 new sessions per second, supporting dynamic and high-volume network environments. Key hardware specifications include: - Eight 10/100/1000 Ethernet ports for versatile connectivity options. - Dedicated management interfaces, including a 10/100/1000 out-of-band management port, an RJ-45 console port, a USB port, and a micro USB console port, facilitating easy device management and setup. - A 32 GB eMMC storage capacity, providing sufficient space for logs and software updates. The Palo Alto PA-220 operates on an optional dual redundant 40 W power supply, with average and maximum power consumption of 21 W and 25 W, respectively. This efficient power usage is critical for maintaining operational cost-effectiveness. The device’s input voltage ranges from 100–240 VAC, supporting 50–60Hz frequency, and it has a maximum current consumption of 1.75 A at 12 VDC for the firewall and 1.5A on the AC side of the power supply. In terms of physical specifications, the PA-220 measures 1.62 inches in height, 6.29 inches in depth, and 8.07 inches in width. It weighs 3.0 lbs as a standalone device and 5.4 lbs when shipped. This compact size and weight make it suitable for environments where space is a premium. The PA-220 supports high availability configurations, including active/active and active/passive modes, with failure detection capabilities such as path and interface monitoring. This ensures continuous operation and network reliability. It operates within a temperature range of 32°F to 104°F and can be stored in temperatures ranging from -4°F to 158°F, accommodating various environmental conditions. For networking, the PA-220 offers: - Layer 2, Layer 3, tap, and virtual wire (transparent mode) interface modes. - Support for 802.1Q VLAN tags, with the capacity to handle up to 4,094 tags per device and per interface. - Various Network Address Translation (NAT) modes for IPv4, including static IP, dynamic IP, and dynamic IP and port (port address translation). - SD-WAN functionality for dynamic path selection, enhancing network efficiency and reliability. Overall, the Palo Alto PA-220 is a compact, feature-rich firewall appliance that provides secure connectivity and advanced threat protection for small enterprise environments.


Part Number Palo Alto PA-220
Manufacturer Palo Alto Networks
Data Throughput for Firewalls (HTTP/application mix) 550 Mbps/560 Mbps
Throughput for Threat Prevention (HTTP/application mix) 270 Mbps/300 Mbps
Throughput for IPsec VPN 570 Mbps
Session Count Maximum 64,000
Session Creation Rate 4,200 per second
Input/Output Ports Eight 10/100/1000 ports
Management Input/Output Ports One 10/100/1000 out-of-band, One RJ-45, One USB, One Micro USB
Storage 32 GB eMMC
Power Supply (Average/Peak Consumption) Optional dual 40 W (21 W / 25 W)
Input Voltage (Frequency) 100–240 VAC (50–60Hz)
Maximum Current Firewall: 1.75 A @ 12 VDC, Power supply: 1.5A AC side
Height 1.62 inches
Depth 6.29 inches
Width 8.07 inches
Weight Device: 3.0 lbs, With Packaging: 5.4 lbs
High Availability Modes: Active/Active, Active/Passive, Monitoring: Path, Interface
Operating Temperature Range 32°F to 104°F
Storage Temperature Range -4°F to 158°F
Interface Operation Modes L2, L3, Tap, Virtual Wire
VLAN Support Up to 4,094 VLANs per device/interface
Network Address Translation (NAT) Types Static IP, Dynamic IP, PAT (Port Address Translation)
SD-WAN Capabilities Supports dynamic path selection

Compare products

{"one"=>"Select 2 or 3 items to compare", "other"=>"{{ count }} of 3 items selected"}

Select first item to compare

Select second item to compare

Select third item to compare