PAN-PA-5220 Purchase

[ManinderNegi]

Dear All,

I am planning to purchase PA firewall 5220 for our Datacentre. and came across below model

I am not mistaken then I need to purchase PAN-PA-5220-DC i(f DC power supply) and PAN-PA-5220-AC ( If AC power supply)

However I am clueless for what purpose I need to purchase below modesl?

PAN-PA-5220-DC-OSS
PAN-PA-5220-AC-OSS
Palo Alto Networks PA 5220 Lab Unit with (PAN-PA-5220-AC-LAB)

[aleksandar.astardzhiev]

Hi @ManinderNegi 

OSS stands for On-Site-Spare. As the name suggest this is spare physical device that you can keep on-site for faster replacement in case your primary device fail. In case of RMA you replace the faulty device with spare one, transfer all the licenses yourself through the customer support portal. After that you can initiate RMA with Palo Alto to return the faulty device and wait for the new one without the fear of shipping delays etc.

More details can be found in the following KBs

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh3CAC

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltxCAC

In my humble opinion the OSS is useful if you have very critical service and you cannot tolerate any interruptions and you want to ensure you have stable HA cluster all the time.

I don't have any expirience with the LAB SKU, but from little I know this is just license bundle. Device comes with most of the subscriptions valid for one year and the support license give you access to TAC support, but with lower priority (since it is lab). I am guessing since it  is "lab" or non-prodution traffic the cost would be lower.