CPU & memory utilization (PA-820 migrate to PA-455/PA-460)

[nuranisnadiah]

Hi team, 

There is one customer currently using PA-820 firewall and planning for replacement. We proposed them to go with PA-1410 but seems way exceeded client’s budget. They planned to go with either PA-455 or PA-460, since no fiber port required and the performance complies the requirement.

However, they need confirmation as below:

Does PA-455/PA-460 CPU & memory specs able to cater client’s current PA-820 firewall usage? They need an assurance from Palo Alto that these models will not result in any performance downgrade.

Kindly refer to below screenshot of the client’s Palo Alto PA-820 system resources (CPU & memory utilization):

Please let us know if you can provide this confirmation or if further clarification is needed.

Also, we tried to come out with simple calculation based on YoY 25% growth (with assumption session utilization start around 2799) as below:

Based on this calculation, PA-455/PA-460 are able to cater client’s current PA-820 firewall usage, correct? Since PA-455 support max concurrent sessions up to 300,000 and PA-460 supports up to 400,000. Can help confirm if we can use this to justify to client?

Thank you in advance!

[reaper]

if you want assurance from palo alto, it's probably better to reach out to a palo rep in your area (versus a public forum 😉 )

to your question, performance-wise the pa-820 can easily be replaced by the 450/460 and still have room for growth, the only 'advantage' the pa-820 has over the 440 and 450 is the size of it's routing table :  https://www.paloaltonetworks.com/products/product-comparison?chosen=pa-440,pa-450,pa-820