Upgrading to a PA-3200 series

[rlambright]

Is there any reason to choose the PA-3250 over the PA-3220?  Other then session specs.

[Remo]

• Thoughput (app-id, threat, ipsec)
• Decryption specs (concurrent decrypted sessions, certificate cache, inbound certificates)
• 10Gbit SFP+ ports
• Route table size
• Forwarding table size
• ARP table size
• NAT rule capacity (static, DIP, DIPP)
• Supported subinterface count for QoS
• IPSec VPN tunnel count
• IKE peer count
• Global protect connections (clientless and standard client VPN)

--> https://www.paloaltonetworks.com/products/product-comparison?chosen=pa-3220,pa-3250