| Specifications |
Palo Alto PA-3440 Firewall |
| Performance and Capacities |
| Firewall throughput (HTTP/appmix) (Throughput is measured with App-ID and logging enabled, with 64 KB HTTP/appmix transactions.) |
30.2/24 Gbps |
| Threat Prevention throughput (HTTP/appmix) (Threat Prevention throughput measured with App-ID, IPS, antivirus, antispyware, WildFire, DNS Security, file blocking, and logging enabled, utilizing 64 KB HTTP/appmix transactions) |
11.0/12.8 Gbps |
| IPsec VPN throughput ( IPsec VPN throughput is measured with 64 KB HTTP transactions, and logging enabled.) |
14.5 Gbps |
| Max concurrent sessions (Max concurrent sessions are measured utilizing HTTP transactions.) |
3M |
| New sessions per second (New sessions per second is measured with application override, utilizing 1 byte HTTP transactions.) |
268.000 |
| Virtual systems (base/max) (Adding virtual systems over base quantity requires a separately purchased license) |
(1/11) |
| Note: Results were measured on PAN-OS 11.0. |
| Networking Features |
| Interface Modes |
L2, L3, tap, virtual wire (transparent mode) |
| Routing |
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing
Policy-based forwarding
Point-to-Point Protocol over Ethernet (PPPoE)
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
Bidirectional Forwarding Detection (BFD) |
| IPsec and SSL VPN |
Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication)
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
GlobalProtect large-scale VPN for simplified configuration and management (Requires GlobalProtect License)
Secure access over IPsec and SSL VPN tunnels using GlobalProtect Gateway and Portals (Requires GlobalProtect License) |
| VLANs |
802.1Q VLAN tags per device/per interface: 4,094/4,094
Aggregate interfaces (802.3ad) intracard and/or intercard, and LACP |
| Network Address Translation |
NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation)
NAT64, NPTv6
Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription |
| High Availability |
Modes: active/active, active/passive, HA clustering
Failure detection: path monitoring, interface monitoring |
| Mobile Network Infrastructure |
5G Security
GTP Security
SCTP Security |
| Hardware Specifications |
| I/O |
PA-3440: 1G/2.5G/5G/10G (12), 1G/10G SFP/SFP+ (10), 25G SFP28 (4), 40G/100G QSFP/QSFP28 (2) |
| Management I/O |
100/1000 out-of-band management port (1)
100/1000 high availability (2), 10G SFP+ high availability (1)
RJ-45 console port (1), Micro USB (1) |
| Storage Capacity |
480 GB SSD |
| Power Supply (Avg/Max Power Consumption) |
| Redundant 450-watt AC (133W/190W) |
| Max BTU/hr |
650 |
| Input Voltage Frequency |
AC: 100–240 VAC (50–60Hz) |
| Max Current Consumption |
AC: 1.9 A @ 100 VAC, 0.8 A @ 240 VAC |
| Mean Time Between Failure (MTBF) |
22 years |
| Rack Mount Dimensions |
1U, 19” standard rack 14.15” x 17.15” x 1.70” |
| Weight (Standalone Device/As Shipped) |
15.5 lbs / 25 lbs |
| Safety |
cTUVus, CB |
| EMI |
FCC Class A, CE Class A, VCCI Class A |
| Environment |
Operating temperature: 32°F to 104°F, 0°C to 40°C
Nonoperating temperature: -4°F to 158°F, -20°C to 70°C
Humidity tolerance: 10% to 90%
Maximum altitude: 10,000 ft/3,048 m
Airflow: front to back |
