Castleforce IT Security Team

Palo Alto Networks Next-Generation Firewalls control applications, users, and content

Palo Alto Networks PA-4000 Series

The Palo Alto Networks PA-4000 Series is comprised of three high performance platforms, the PA-4020, the PA-4050 and the PA-4060, all of which are targeted at high speed Internet gateway and datacenter deployments. The PA-4000 Series manages multi-Gbps traffic flows using dedicated processing and memory for networking, security, threat prevention and management.

Enquire about this product

5 Virusn5 SpywarenX Spamn5 Web/IMn5 IPS/Patch MgmtnX Data/System Mgmtn

Palo Alto Networks Enterprise Firewall PA-4060

Palo Alto Networks' Next-Generation firewall's high speed backplane smoothes the pathway between processors and the separation of data and control plane ensures that management access is always available, irrespective of the traffic load.

Next-generation firewall unique identification technologies

Application Identification (App-ID)

App-ID is a patent-pending traffic classification technology that identifies more than 950 applications, irrespective of port, protocol, SSL encryption or evasive characteristic.

Palo-Alto-Networks-App-ID

  • Facilitate more complete understanding of the business value and associated risk of the applications traversing the network.
  • Enable creation and enforcement of appropriate application usage policies.
  • Bring application visibility and control back to the firewall where it belongs.

App ID Tech Brief Datasheet

User Identification (User-ID)

User-ID enables policy control over applications and content based on the employee and group identity through seamless integration with enterprise directory services including Active Directory, LDAP and eDirectory.

Palo Alto Networks User ID

  • Perform analysis on application, threat and web surfing activity based on individual users and groups of users, as opposed to just IP addresses.
  • Identify Citrix and Microsoft Terminal Services users and apply policy controls over their respective application usage.
  • Build policies to positively enable application usage for specific groups such as marketing, IT, and sales.

User ID Tech Brief Datasheet

Content Identification (Content-ID)

Content-ID enables customers to apply policies to inspect and control content traversing the network.

Palo Alto Networks Content ID

  • Block viruses, spyware, and application vulnerability exploits in a single pass.
  • Limit unauthorized transfer of files and sensitive data such as CC# or SSN.
  • Implement policy control over non-work related web surfing.
  • Single pass software architecture maximizes performance by scanning traffic only once, regardless of which Content-ID features are enabled.

Content ID Tech Brief Datasheet

Contact Castleforce about Palo Alto Networks 

PA-4000 Series Datasheet Datasheet

Palo Alto Networks range

PA-500 FW Throughput 250Mbps, IPS Throughput 100Mbps

PA-2020 Series FW Throughput 500Mbps, IPS Throughput 200Mbps

PA-2060 Series FW Throughput 1Gbps, IPS Throughput 500Mbps

Compliance Standards

Castleforce can help you reach GCSx CoCo

GCSX No 8 Firewalls

GCSX No 19 Content Analysis

Castleforce can help you reach PCI DSS

Requirement 1: Install and maintain a firewall configuration to protect cardholder data

Castleforce can help you reach ISO27001

A-10-6 Network security management

Data Sheets & White Papers

Choosing Enterprise Firewalls Datasheet

Gartner - Magic Quadrant for Enterprise Network Firewalls Datasheet

Support Options

Palo Alto Support Program Datasheet


Palo Alto Firewalls Training

The following Partner Authorised Training Center Classes will take students through the process of installing, configuring, managing and troubleshooting.

Training Schedule

Courses are running in May, June and July 2012

FW Installation Configuration and Management Datasheet

FW Advanced Troubleshooting Datasheet


Palo Alto Networks Product Demo