Indicated Firewall

[Cobra_Commander]

I want to know wich Palo Alto model is the indicated for used in a company with 10,000 users filtered.

We want filtered, url, antivirus, spyware and vulnerability. The installation firewall is in level 3.

Regards.

Hugo

[gswcowboy]

Hi Hugo,

It would probably behoove you to contact Sales and/or your Sales SE as they might shed more light on capacity and features based on your environment. However, here's a previously posted link on Platform specs/matrix.

http://media.paloaltonetworks.com/documents/Summary_Specsheet-Nov12.pdf

[scantwell]

I would agree with rkalugdan to review the pdf file If 10k users were using just 1Mb of bandwidth (average) that would be 10Gbps which is a PA5060, assuming AppID and Threat Prevention were enabled on the FW.

[Cobra_Commander]

Thank you rkalugdan and scantwell, I will review the document.

Regards.

Hugo

[mikand]

Even if not all 10.000 employees would browse at the exact same moment the thing to watch out for is the SSL-capabilities (which if you ask me is a must nowadays).

If you just look at the bandwidth (assuming 1Gbps uplink) a PA-3050 or even 3020 "should" be enough - but if you can afford a PA-5060 then why not 🙂

Specially when the difference regarding concurrent SSL sessions are:

(SSL decrypt sessions)

PA-5060: 90.000

PA-5050: 45.000

PA-5020: 15.000

PA-3050: 15.360

PA-3020: 7.936