The Palo Alto Networks Enterprise Firewall PA-850 is an advanced ML-powered next-generation firewall (NGFW) designed to provide exceptional security and connectivity for midsized businesses and enterprise branch offices. As part of the PA-800 Series, it leverages PAN-OS to classify and secure network traffic based on applications, threats, and users, regardless of location or device type.
This innovative firewall embeds machine learning at its core to deliver proactive threat prevention, including blocking never-before-seen attacks and phishing attempts in real time. With support for full Layer 7 traffic inspection, it ensures complete visibility and control over all applications, including encrypted traffic, across all ports. The PA-850 integrates seamlessly with cloud-delivered security services to protect against malware, exploits, spyware, and DNS-based threats. Its flexible deployment options, including Zero Touch Provisioning (ZTP), simplify scalability and streamline large-scale implementations.
The PA-850 supports SD-WAN functionality, providing secure and reliable connectivity with reduced latency and packet loss for optimized user experiences. High availability modes, including active/active and active/passive configurations, ensure continuous operation and minimal downtime. Centralized management through Panorama enhances policy control and reduces administrative complexity.
With IoT device discovery and automated policy recommendations, the PA-850 adapts to evolving network environments and mitigates risks associated with unmanaged devices. Combining advanced features, ease of use, and unparalleled performance, the PA-850 is a future-proof solution for organizations seeking comprehensive security and connectivity in a rapidly evolving digital landscape.
Overview
The PA-850 is a member of the PA-800 series, a next-generation firewall (NGFW) designed for midsized businesses and enterprise branch offices. It is powered by PAN-OS, which classifies traffic based on applications, threats, and users, ensuring robust security and policy enforcement.
- Embeds Machine Learning (ML) for advanced, inline attack prevention.
- Simplifies management and deployment with centralized control via Panorama.
- Integrates cloud-delivered security to protect against a wide range of threats.
- Designed for scalability and high availability with active/active and active/passive modes.
Features
- ML-Powered Security
- Provides inline, signatureless prevention of file-based attacks and phishing attempts.
- Uses cloud-based ML to deliver zero-delay updates for threat protection.
- Traffic Classification
- Identifies applications across all ports and protocols, including encrypted traffic (TLS/SSL).
- Creates custom App-IDs for proprietary or new applications.
- Zero Trust and User-Based Security
- Enforces policies based on user identity and activity.
- Supports Dynamic User Groups (DUGs) for flexible, behavior-driven security actions.
- Advanced Threat Prevention
- Blocks known and unknown threats through Threat Prevention, WildFire, and DNS Security.
- Inspects encrypted traffic to detect hidden threats.
- SD-WAN Integration
- Ensures secure and optimized connectivity with minimal latency.
Networking Features
- Interface Modes
- Operates in L2, L3, Tap, and Virtual Wire (transparent) modes.
- Supports up to 4,094 VLAN tags per interface.
- Routing Capabilities
- OSPFv2/v3, BGP, RIP, and static routing with policy-based forwarding.
- High Availability
- Active/active and active/passive modes with path and interface monitoring.
- VPN Functionality
- Supports IKEv1/IKEv2 protocols and multiple encryption/authentication methods.
- NAT Features
- Includes static IP, dynamic IP, and NAT64 capabilities.
Security & Connectivity Features
- Threat Prevention
- Inspects all traffic for malware, exploits, and spyware.
- Includes intrusion prevention system (IPS) signatures.
- URL Filtering
- Blocks access to malicious or inappropriate websites.
- IoT Security
- Discovers unmanaged devices and enforces policies automatically.
- Cloud Identity Engine
- Enables identity-based security across all locations and devices.
Technical Specifications
- Performance
- Firewall throughput: Up to 3.6 Gbps.
- Threat prevention throughput: Up to 2.1 Gbps.
- IPsec VPN throughput: 1.5 Gbps.
- Hardware
- Interfaces: 8 x 1G, 2 x SFP.
- Dimensions: 1.75″ x 17.25″ x 16″.
- Weight: 14.6 lbs.
- Environmental
- Operating temperature: 32°F to 122°F (0°C to 50°C).
- Power consumption: 150W typical, 230W maximum.
- Deployment Options
- On-premises or cloud-based environments.
- Zero Touch Provisioning (ZTP) support for streamlined setups.
Use Cases
By Industry
- Healthcare:
- Protect patient data and IoT devices such as medical equipment.
- Retail:
- Secure point-of-sale systems and customer data.
- Finance:
- Prevent phishing and secure sensitive financial transactions.
By Application
- SaaS Control:
- Monitor and secure SaaS application usage with detailed reporting.
- Remote Work:
- Ensure consistent policies for employees working from any location.
Other Use Cases
- IoT Device Security:
- Identify and mitigate risks from unmanaged IoT devices.
- Branch Connectivity:
- Use SD-WAN for secure, optimized branch office connections.
Advantages of the PA-850
- Inline ML Capabilities: Proactively stops emerging threats.
- Comprehensive Visibility: Monitors all traffic, including encrypted connections.
- Cloud-Integrated Security: Rapid response to threats using cloud-based analysis.
- Scalability: Suitable for midsized businesses to large branch offices.
- Ease of Management: Centralized control and automation reduce administrative overhead.
Documentation
- Download the Palo Alto Networks Firewall Overview Datasheet
- Download the Palo Alto Networks PA-800 Series Specification Datasheet
Conclusion
- The PA-850 is a powerful, ML-driven firewall tailored for midsized enterprises and branch offices.
- It ensures robust security by integrating cloud-based threat prevention and user-focused policies.
- Its high availability, SD-WAN support, and ZTP simplify deployment and management.
- The PA-850 excels in diverse applications, including IoT security and remote workforce protection.
- With advanced capabilities, it offers a future-proof solution for modern networking challenges.