Need an advice

[jesus_torres]

Hello team..

I need the best or a good advice to do the correct sizing for a PAN device, yo know I don't know if there is some sizing tool that can help me, or some document to read it and understand what is the best way to do the right sizning...

thank you..

[NGS_SOC]

Ask for a POC demo to a PAN local Partner and try to install the device they provide for a week capturing the majority of traversing traffic. Internal PAN command are able to calculate the throughput. Once you have this value follow the specsheets. For  a medium size network 3000 serie is the best choice, 5000 if you have big network.

Interface numbers and license are simple to evaluate.

Regards

[mikand]

Another thing to take into account is if you will be performing ssl-termination (highly likely if this box will face Internet) since the concurrent ssl decryptions varies between the models.

For PA-5000 series its (if I recall it correctly):

PA-5020: 15000

PA-5050: 45000

PA-5060: 90000

A way to "bypass" this, if you have two boxes, is to configure the two boxes independently and then use some loadbalancing before/after the PA-pair. So half of the clients goes through one box and the other half through the other.