Call a Specialist Today! 844-294-0778

Call a Specialist Today! 844-294-0778

Palo Alto Networks Enterprise Firewall PA-3250
Next-Generation Firewall Appliance in a Ruggedized Form Factor

Palo Alto Networks Enterprise Firewall PA-3250

Compare Products

Palo Alto Networks PA-3250 Hardware

PA-3250 Series Hardware
  • Palo Alto Networks PA-3250 with redundant AC power supplies
    #PAN-PA-3250
    List Price: $26,300.00
    Our Price: $24,985.00

Click here to jump to more pricing!

Overview:

The Palo Alto Networks® PA-3200 Series next-generation firewalls are designed for data center and internet gateway deployments. This series is comprised of the PA-3250, PA-3250, and PA-3260 firewalls. These models provide flexibility in performance and redundancy to help you meet your deployment requirements. All models in this series provide next-generation security features to help you secure your organization through advanced visibility and control of applications, users, and content.

First Supported Software Release: PAN-OS® 8.1

Features:

  • 6.3 Gbps firewall throughput
    (App-ID enabled1)
  • 3 Gbps Threat Prevention throughput2
  • 3.2 Gbps IPsec VPN throughput
  • 2,000,000 sessions
  • 94,000 new sessions per second3
  • 6,000 IPsec VPN tunnels/tunnel interfaces
  • 2,048 SSL VPN Users
  • 10 virtual routers
  • 1/6 virtual systems (base/max4)
  • 60 security zones
  • 5,000 max number of policies

Front Panel:

Item
Component
Description
1
Ethernet ports 1 through 12
Twelve RJ-45 10Mbps/100Mpbs/1Gbps ports for network traffic. The link speed and link duplex are auto-negotiate only.
2
SFP ports 13 through 20
These ports vary depending on your firewall model:
  • PA-3250 firewall—Ports 13 through 16 are SFP (1Gbps) and ports 17 through 20 are SFP or SFP+ (10Gbps) based on the installed transceiver.
  • PA-3250 and PA-3260 firewalls—Ports 13 through 20 are SFP (1Gbps) or SFP+ (10Gbps) based on the installed transceiver.
3
QSFP+ ports 21 through 24
(PA-3260 only) Four QSFP+ (40Gbps) ports as defined by the IEEE 802.3ba standard.
4
HSCI port
One SFP+ (10Gbps) port (supports only an SFP+ transceiver or passive SFP+ cable).
Use this port to connect two PA-3200 Series firewalls in a high availability (HA) configuration as follows:
  • In an active/passive configuration, this port is for HA2 (data link).
  • In an active/active configuration, you can configure this port for HA2 and HA3. HA3 is used for packet forwarding for asymmetrically routed sessions that require Layer 7 inspection for App-ID and Content-ID.
The HSCI ports must be connected directly between the two firewalls in the HA configuration (without a switch or router between them). When directly connecting the HSCI ports between two PA-3200 Series firewalls that are physically located near each other, Palo Alto Networks recommends that you use a passive SFP+ cable.
For installations where the two firewalls are not near each other and you cannot use a passive SFP+ cable, use a standard SFP+ transceiver and the appropriate cable length.
5
HA1-A and HA1-B ports
Two RJ-45 10Mbps/100Mbps/1000Mbps ports for high availability (HA) control.
If the firewall dataplane restarts due to a failure or manual restart, the HA1-B link will also restart. If the dataplane restarts and only HA1-B is connected, a split brain condition occurs. The HA1-A link will not restart when the dataplane restarts. Because of this behavior, we recommend that you connect both HA1-A and HA1-B to provide redundancy for the control link and to avoid split brain issues.
6
MGT port
Use this Ethernet 10Mbps/100Mbps/1000Mbps port to access the management web interface and perform administrative tasks. The firewall also uses this port for management services, such as retrieving licenses and updating threat and application signatures.
7
CONSOLE port (RJ-45)
Use this port to connect a management computer to the firewall using a 9-pin serial-to-RJ-45 cable and terminal emulation software.
The console connection provides access to firewall boot messages, the Maintenance Recovery Tool (MRT), and the command line interface (CLI).
If your management computer does not have a serial port, use a USB-to-serial converter.
Use the following settings to configure your terminal emulation software to connect to the console port:
  • Data rate: 9600
  • Data bits: 8
  • Parity: None
  • Stop bits: 1
  • Flow control: None
8
USB port
A USB port that accepts a USB flash drive with a bootstrap bundle (PAN-OS configuration).
Bootstrapping speeds up the process of configuring and licensing the firewall to make it operational on the network with or without internet access.
9
CONSOLE port (Micro USB)
Use this port to connect a management computer to the firewall using a standard Type-A USB-to-micro USB cable.
The console connection provides access to firewall boot messages, the Maintenance Recovery Tool (MRT), and the command line interface (CLI).
Refer to the Micro USB Console Port page for more information and to download the Windows driver or to learn how to connect from a Mac or Linux computer.
10
LED status indicators
Eight LEDs that indicate the status of the firewall hardware components (see Interpret the PA-3200 Series Status LEDs ).

Back Panel:

Item
Component
Description
1
System drive
One 240GB solid-state drive (SSD) used to store the PAN-OS system files, system logs, and network traffic logs.
2
Exhaust fan tray
Provides ventilation and cooling for the firewall.
3
Ground studs
Use the two-post ground stud to connect the firewall to earth ground. The firewall ships with a 6AWG two-post ground lug (attached to the ground studs) but does not include a ground cable.
4
PS1 and PS2
power supplies
Use the power supply inputs (either AC or DC depending on the installed power supply type) to connect power to the firewall. The second power supply is for redundancy. When facing the back of the firewall, PS1 is on the left and PS2 is on the right.

Documentation:

Download the Palo Alto Networks PA-3250 Specification Datasheet (PDF).

Pricing Notes:

Palo Alto Networks PA-3250 Hardware

PA-3250 Series Hardware
  • Palo Alto Networks PA-3250 with redundant AC power supplies
    #PAN-PA-3250
    List Price: $26,300.00
    Our Price: $24,985.00
DNS Security Subscriptions
  • DNS Security subscription year 1, PA-3250
    #PAN-PA-3250-DNS
    Request a Quote for Pricing!
  • DNS Security subscription renewal, PA-3250
    #PAN-PA-3250-DNS-R
    Request a Quote for Pricing!
  • DNS Security subscription 3-year prepaid, PA-3250
    #PAN-PA-3250-DNS-3YR
    Request a Quote for Pricing!
  • DNS Security subscription 3-year prepaid renewal, PA-3250
    #PAN-PA-3250-DNS-3YR-R
    Request a Quote for Pricing!
  • DNS Security subscription 5-year prepaid, PA-3250
    #PAN-PA-3250-DNS-5YR
    Request a Quote for Pricing!
  • DNS Security subscription 5-year prepaid renewal, PA-3250
    #PAN-PA-3250-DNS-5YR-R
    Request a Quote for Pricing!
DNS Security Subscriptions for device in an HA pair
  • DNS Security subscription for device in an HA pair year 1, PA-3250
    #PAN-PA-3250-DNS-HA2
    Request a Quote for Pricing!
  • DNS Security subscription for device in an HA pair renewal, PA-3250
    #PAN-PA-3250-DNS-HA2-R
    Request a Quote for Pricing!
  • DNS Security subscription 3 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-DNS-3YR-HA2
    Request a Quote for Pricing!
  • DNS Security subscription 3 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-DNS-3YR-HA2-R
    Request a Quote for Pricing!
  • DNS Security subscription 5 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-DNS-5YR-HA2
    Request a Quote for Pricing!
  • DNS Security subscription 5 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-DNS-5YR-HA2-R
    Request a Quote for Pricing!
GlobalProtect Subscriptions
  • GlobalProtect subscription year 1, PA-3250
    #PAN-PA-3250-GP
    Request a Quote for Pricing!
  • GlobalProtect subscription renewal, PA-3250
    #PAN-PA-3250-GP-R
    Request a Quote for Pricing!
  • GlobalProtect subscription 3-year prepaid, PA-3250
    #PAN-PA-3250-GP-3YR
    Request a Quote for Pricing!
  • GlobalProtect subscription 3-year prepaid renewal, PA-3250
    #PAN-PA-3250-GP-3YR-R
    Request a Quote for Pricing!
  • GlobalProtect subscription 5-year prepaid, PA-3250
    #PAN-PA-3250-GP-5YR
    Request a Quote for Pricing!
  • GlobalProtect subscription 5-year prepaid renewal, PA-3250
    #PAN-PA-3250-GP-5YR-R
    Request a Quote for Pricing!
GlobalProtect Subscriptions for device in an HA pair
  • GlobalProtect subscription for device in an HA pair year 1, PA-3250
    #PAN-PA-3250-GP-HA2
    Request a Quote for Pricing!
  • GlobalProtect subscription for device in an HA pair renewal, PA-3250
    #PAN-PA-3250-GP-HA2-R
    Request a Quote for Pricing!
  • GlobalProtect subscription 3 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-GP-3YR-HA2
    Request a Quote for Pricing!
  • GlobalProtect subscription 3 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-GP-3YR-HA2-R
    Request a Quote for Pricing!
  • GlobalProtect subscription 5 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-GP-5YR-HA2
    Request a Quote for Pricing!
  • GlobalProtect subscription 5 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-GP-5YR-HA2-R
    Request a Quote for Pricing!
Threat Prevention Subscriptions
  • Threat prevention subscription year 1, PA-3250
    #PAN-PA-3250-TP
    Request a Quote for Pricing!
  • Threat prevention subscription renewal, PA-3250
    #PAN-PA-3250-TP-R
    Request a Quote for Pricing!
  • Threat prevention subscription 3-year prepaid, PA-3250
    #PAN-PA-3250-TP-3YR
    Request a Quote for Pricing!
  • Threat prevention subscription 3-year prepaid renewal, PA-3250
    #PAN-PA-3250-TP-3YR-R
    Request a Quote for Pricing!
  • Threat prevention subscription 5-year prepaid, PA-3250
    #PAN-PA-3250-TP-5YR
    Request a Quote for Pricing!
  • Threat prevention subscription 5-year prepaid renewal, PA-3250
    #PAN-PA-3250-TP-5YR-R
    Request a Quote for Pricing!
Threat Prevention Subscriptions for device in an HA pair
  • Threat prevention subscription for device in an HA pair year 1, PA-3250
    #PAN-PA-3250-TP-HA2
    Request a Quote for Pricing!
  • Threat prevention subscription for device in an HA pair renewal, PA-3250
    #PAN-PA-3250-TP-HA2-R
    Request a Quote for Pricing!
  • Threat prevention subscription 3 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-TP-3YR-HA2
    Request a Quote for Pricing!
  • Threat prevention subscription 3 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-TP-3YR-HA2-R
    Request a Quote for Pricing!
  • Threat prevention subscription 5 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-TP-5YR-HA2
    Request a Quote for Pricing!
  • Threat prevention subscription 5 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-TP-5YR-HA2-R
    Request a Quote for Pricing!
URL Filtering Subscriptions
  • BrightCloud URL filtering subscription renewal, PA-3250
    #PAN-PA-3250-URL2-R
    Request a Quote for Pricing!
  • PANDB URL filtering subscription year 1, PA-3250
    #PAN-PA-3250-URL4
    Request a Quote for Pricing!
  • PANDB URL filtering subscription renewal, PA-3250
    #PAN-PA-3250-URL4-R
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 3-year prepaid, PA-3250
    #PAN-PA-3250-URL4-3YR
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 3-year prepaid renewal, PA-3250
    #PAN-PA-3250-URL4-3YR-R
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 5-year prepaid, PA-3250
    #PAN-PA-3250-URL4-5YR
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 5-year prepaid renewal, PA-3250
    #PAN-PA-3250-URL4-5YR-R
    Request a Quote for Pricing!
URL Filtering Subscriptions for device in an HA pair
  • BrightCloud URL filtering subscription for device in an HA pair renewal, PA-3250
    #PAN-PA-3250-URL2-HA2-R
    Request a Quote for Pricing!
  • PANDB URL filtering subscription for device in an HA pair year 1, PA-3250
    #PAN-PA-3250-URL4-HA2
    Request a Quote for Pricing!
  • PANDB URL filtering subscription for device in an HA pair renewal, PA-3250
    #PAN-PA-3250-URL4-HA2-R
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 3 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-URL4-3YR-HA2
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 3 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-URL4-3YR-HA2-R
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 5 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-URL4-5YR-HA2
    Request a Quote for Pricing!
  • PANDB URL filtering subscription 5 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-URL4-5YR-HA2-R
    Request a Quote for Pricing!
WildFire Subscriptions
  • WildFire subscription year 1, PA-3250
    #PAN-PA-3250-WF
    Request a Quote for Pricing!
  • WildFire subscription renewal, PA-3250
    #PAN-PA-3250-WF-R
    Request a Quote for Pricing!
  • WildFire subscription 3-year prepaid, PA-3250
    #PAN-PA-3250-WF-3YR
    Request a Quote for Pricing!
  • WildFire subscription 3-year prepaid renewal, PA-3250
    #PAN-PA-3250-WF-3YR-R
    Request a Quote for Pricing!
  • WildFire subscription 5-year prepaid, PA-3250
    #PAN-PA-3250-WF-5YR
    Request a Quote for Pricing!
  • WildFire subscription 5-year prepaid renewal, PA-3250
    #PAN-PA-3250-WF-5YR-R
    Request a Quote for Pricing!
WildFire Subscriptions for device in an HA pair
  • WildFire subscription for device in an HA pair year 1, PA-3250
    #PAN-PA-3250-WF-HA2
    Request a Quote for Pricing!
  • WildFire subscription for device in an HA pair renewal, PA-3250
    #PAN-PA-3250-WF-HA2-R
    Request a Quote for Pricing!
  • WildFire subscription 3 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-WF-3YR-HA2
    Request a Quote for Pricing!
  • WildFire subscription 3 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-WF-3YR-HA2-R
    Request a Quote for Pricing!
  • WildFire subscription 5 year prepaid for device in an HA pair, PA-3250
    #PAN-PA-3250-WF-5YR-HA2
    Request a Quote for Pricing!
  • WildFire subscription 5 year prepaid renewal for device in an HA pair, PA-3250
    #PAN-PA-3250-WF-5YR-HA2-R
    Request a Quote for Pricing!
4-hr Platinum Support
  • 4-hr Platinum Support , year 1, PA-3250
    #PAN-SVC-4HR-PLAT-3250
    Request a Quote for Pricing!
  • 4-hr Platinum Support renewal , 1 year, PA-3250
    #PAN-SVC-4HR-PLAT-3250-R
    Request a Quote for Pricing!
  • 4-hr Platinum Support 3-year prepaid , PA-3250
    #PAN-SVC-4HR-PLAT-3250-3YR
    Request a Quote for Pricing!
  • 4-hr Platinum Support 3-year prepaid renewal , PA-3250
    #PAN-SVC-4HR-PLAT-3250-3YR-R
    Request a Quote for Pricing!
  • 4-hr Platinum Support 5-year prepaid , PA-3250
    #PAN-SVC-4HR-PLAT-3250-5YR
    Request a Quote for Pricing!
  • 4-hr Platinum Support 5-year prepaid renewal , PA-3250
    #PAN-SVC-4HR-PLAT-3250-5YR-R
    Request a Quote for Pricing!
4-Hour Premium Support
  • 4-Hour Premium support year 1, PA-3250
    #PAN-SVC-4HR-3250
    Request a Quote for Pricing!
  • 4-Hour Premium support renewal, PA-3250
    #PAN-SVC-4HR-3250-R
    Request a Quote for Pricing!
  • 4-Hour Premium support 3-year prepaid, PA-3250
    #PAN-SVC-4HR-3250-3YR
    Request a Quote for Pricing!
  • 4-Hour Premium support 3-year prepaid renewal, PA-3250
    #PAN-SVC-4HR-3250-3YR-R
    Request a Quote for Pricing!
  • 4-Hour Premium support 5 year prepaid, PA-3250
    #PAN-SVC-4HR-3250-5YR
    Request a Quote for Pricing!
  • 4-Hour Premium support 5 year prepaid renewal, PA-3250
    #PAN-SVC-4HR-3250-5YR-R
    Request a Quote for Pricing!
Platinum Support
  • Platinum support , year 1, PA-3250
    #PAN-SVC-PLAT-3250
    Request a Quote for Pricing!
  • Platinum support renewal , 1 year, PA-3250
    #PAN-SVC-PLAT-3250-R
    Request a Quote for Pricing!
  • Platinum support 3-year prepaid , PA-3250
    #PAN-SVC-PLAT-3250-3YR
    Request a Quote for Pricing!
  • Platinum support 3-year prepaid renewal , PA-3250
    #PAN-SVC-PLAT-3250-3YR-R
    Request a Quote for Pricing!
  • Platinum support 5-year prepaid , PA-3250
    #PAN-SVC-PLAT-3250-5YR
    Request a Quote for Pricing!
  • Platinum support 5-year prepaid renewal , PA-3250
    #PAN-SVC-PLAT-3250-5YR-R
    Request a Quote for Pricing!
Premium Support
  • Premium support year 1, PA-3250
    #PAN-SVC-PREM-3250
    Request a Quote for Pricing!
  • Premium support renewal, PA-3250
    #PAN-SVC-PREM-3250-R
    Request a Quote for Pricing!
  • Premium support 3-year prepaid, PA-3250
    #PAN-SVC-PREM-3250-3YR
    Request a Quote for Pricing!
  • Premium support 3-year prepaid renewal, PA-3250
    #PAN-SVC-PREM-3250-3YR-R
    Request a Quote for Pricing!
  • Premium support 5 year prepaid, PA-3250
    #PAN-SVC-PREM-3250-5YR
    Request a Quote for Pricing!
  • Premium support 5 year prepaid renewal, PA-3250
    #PAN-SVC-PREM-3250-5YR-R
    Request a Quote for Pricing!
Standard Support
  • Standard support year 1, PA-3250
    #PAN-SVC-STND-3250
    Request a Quote for Pricing!
  • Standard support renewal, PA-3250
    #PAN-SVC-STND-3250-R
    Request a Quote for Pricing!
  • Standard support 3-year prepaid, PA-3250
    #PAN-SVC-STND-3250-3YR
    Request a Quote for Pricing!
  • Standard support 3-year prepaid renewal, PA-3250
    #PAN-SVC-STND-3250-3YR-R
    Request a Quote for Pricing!