topic Indicated Firewall in General Topics

Indicated Firewall

Cobra_Commander — Tue, 30 Apr 2013 19:03:20 GMT

I want to know wich Palo Alto model is the indicated for used in a company with 10,000 users filtered.

We want filtered, url, antivirus, spyware and vulnerability. The installation firewall is in level 3.

Regards.

Hugo

Re: Indicated Firewall

gswcowboy — Tue, 30 Apr 2013 19:44:24 GMT

Hi Hugo,

It would probably behoove you to contact Sales and/or your Sales SE as they might shed more light on capacity and features based on your environment. However, here's a previously posted link on Platform specs/matrix.

http://media.paloaltonetworks.com/documents/Summary_Specsheet-Nov12.pdf

Re: Indicated Firewall

scantwell — Tue, 30 Apr 2013 20:39:56 GMT

I would agree with rkalugdan to review the pdf file If 10k users were using just 1Mb of bandwidth (average) that would be 10Gbps which is a PA5060, assuming AppID and Threat Prevention were enabled on the FW.

Re: Indicated Firewall

Cobra_Commander — Tue, 30 Apr 2013 21:51:26 GMT

Thank you rkalugdan and scantwell, I will review the document.

Regards.

Hugo

Re: Indicated Firewall

mikand — Wed, 01 May 2013 21:02:16 GMT

Even if not all 10.000 employees would browse at the exact same moment the thing to watch out for is the SSL-capabilities (which if you ask me is a must nowadays).

If you just look at the bandwidth (assuming 1Gbps uplink) a PA-3050 or even 3020 "should" be enough - but if you can afford a PA-5060 then why not 🙂

Specially when the difference regarding concurrent SSL sessions are:

(SSL decrypt sessions)

PA-5060: 90.000

PA-5050: 45.000

PA-5020: 15.000

PA-3050: 15.360

PA-3020: 7.936