topic Re: Replacement for 3200 Series FW in Next-Generation Firewall Discussions

Replacement for 3200 Series FW

Faisal_Sayed — Tue, 12 Sep 2023 08:00:04 GMT

Hi Everyone,

Can someone guide on the new replacement series of 3200 as it has come to end of sale.

Regards,

Re: Replacement for 3200 Series FW

TomYoung — Tue, 12 Sep 2023 11:25:13 GMT

Hi @Faisal_Sayed ,

The PA-3200 Series has been announced End-of-Sale, but it will not be End-of-Life until 5 years.

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates

If you want to plan ahead, you can look at the Product Selection page or download the spec sheet and compare numbers. The PA-3400 Series or the PA1400 Series are good candidates.

https://www.paloaltonetworks.com/products/product-comparison?chosen=pa-3410,pa-3220,pa-1410

https://www.paloaltonetworks.com/resources/datasheets/product-summary-specsheet

Thanks,

Tom

Re: Replacement for 3200 Series FW

Manu_P — Wed, 08 Nov 2023 14:08:01 GMT

Well, we replaced our pair of PA-3220 with a pair of PA-1420 at the end of July.

Unfortunately, there is a "but, ..."

As in PA-1400 series is still very fresh and its only PAN-OS option is the latest 11.0 version (11.1.0 was released less than a week ago and i would not count it yet)

And 11.0 is, well, rather crude - 11.0.3 was released days ago - and we already encountered some issues that are impacting us, like we're running 11.0.1-h2 which is rather stable but it doesnt allow PPTP traffic (you cant connect to a client/partner using pptp from behind the firewall)

This was fixed in 11.0.3 - which i said it's really really fresh and i'm still debating if we should install or not yet.

Upgrading to 11.0.2 will induce another bug - using GP with Azure SAML MFA auth will work only with some workarounds and ,except for the workaround, a fix is expected maybe in 11.0.4

So, even if maybe PA-1400 Series may be a suitable replacement and it is in a budget bracket more accessible than 3400 series, it may take at least 3-4 months for it to get 11.0.5 as preferred support version.

Or, depending of your usage scenario, maybe you will not encounter any issues with the new 11.0 PAN-OS.