Palo Alto PA-3400 Series degraded specs vs 3200 Seires

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Palo Alto PA-3400 Series degraded specs vs 3200 Seires

L3 Networker

Dear Palo Alto Community

Is it just me, or did Palo Alto drop the ball on the new PA-3400 Series, while almost all specs gained an improvement over the old 3200 series. There is the value of Security-Zones that has me deeply confused/puzzled.

For the sticker price (whether it is list price or street price). Having a PA3410 with a max of 40 Security-Zones seems completely out of line. Especially compared to the rest of the new PA-x400 lineup.
If we look at the old PA-3200 they all have 200 Security-Zones supported and if we look at this comparison. There just seems to be a 0 missing with all PA-3400 firewalls. Now I know in most deployments 40 should be fine. But then again. We are talking a Firewall that can easily be used in deployments where 40 Zones can easily be reached. Not to forget that we always talk about an investment that needs to run for 5+ years in most cases.


I hope there is just a 0 missing in the spec sheets. 
Also according to the spec sheet the PA-3400 series does not have any DoS Protection profile support.

And it looks like the performance values for HTTP and appmix are swapped (not sure about that one)



Anybody else thinking there is something off?




There's no home like

I have the same issue max. of 40 security zones seems like this would be fixed in a future release.  It is causing me a lot of grief I was told by the account team in was way higher.  Turns out only 40 on the PA-3420.  I can not seem to get any real answers out of Palo support or account team.

L3 Networker

Yes I hope they can fix this in the future and at least give us the 200 form the 3200 Series.

Also the comparison tool and summary spec sheet are still not updated to show the new PA-1400 Firewalls
UPDATE: I stand corrected: the new PA-1400 and the new PA-415/445 are now in the comparison tool finally:,pa-3430,pa-3420,pa-1410,... 



It's great that we can order them already, but I'd appreciate if I'd now what I buy before I pull the trigger. Especially since we learned from the PA-3400 Series, we might get a cutback in specs compared to the previous models. So knowing what we are actually spending our money on becomes even more important.

There's no home like

Cyber Elite
Cyber Elite

Hello @AlexNC


today, the PAN-OS 10.2.3-h4 was released. It looks like this issue is getting addressed:


(PA-3410, PA-3420, and PA-3430 firewalls only) Increased the maximum number of security zones to 200.


Kind Regards


Help the community: Like helpful comments and mark solutions.

L3 Networker

Hi PavelK


Yes I've just read it this morning.
Guess their creative licensing department realised what a big stir fry they caused with their decision to reduce the number of security-zones from the top model downwards. 


Glad to see we are back to previous PA3200 specs when it comes to security-zones.

Now all they need to do is get off their subscription chaos bandwagon and come back to earth again.

There's no home like
  • 4 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!