PA-220 Size

[YOOG887]

dear all,

in my environment, we have 100 computers and 8 servers, one internet connection, maximum 10 or 15 users need VPN and we planning To buy PA-220 .

question: Does this device meets our needs? 

[MP18]

@YOOG887 

It all depends on what features you enable on the PA for example how many zones, virtual routers etc?

What is your traffic throughput, ssl decryption enable or not?

How many users connected at same time?

What those servers are used for?

Are they public facing?

Please look at below document 

https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resour...

[YOOG887]

thanks for your replay 

how many zones, virtual routers? 

maximum 3 for each one 

How many users connected at the same time?

around 100 users 

What those servers are used for?

the only local server domain controller, file server, backup server,  intevarous server and DHCP, and all those servers not published 

[OtakarKlier]

Hello,

Always size your Palo Alto's by throughput, e.g. internet speed. I always look at the smallest number and use it as my default. For your setup, I would say no, the PA220 is too small for your environment. Check out the PA-0820 or 850.

Hope that helps. 

[BPry]

@YOOG887,

Agree with @OtakarKlier, the PA-220 is likely too small to be used in your environment. I'd recommend reaching out to a VAR if this is your first PAN appliance and having them help you size this install correctly. The biggest factors that you need to take into account is the throughput as mentioned, but also the session per second count. While 95% of the time you can go solely off of throughput, there are instances where the number of sessions you are generating can cause issues if you size things incorrectly. 

[YOOG887]

that dear for your replay 

kindly can u tell me how can I contact with VAR? 

[YOOG887]

thanks dear 

[BPry · Accepted solution]

@YOOG887,

PAN actually has a LOCATOR website that will help you find partners in your area that will be able to assist you in actually sizing things properly. They'll work in conjunction with your regions sales team to actually put in you touch with a sales engineer and get you rolling on your first purchase.