App-ID Technology
Identifies applications regardless of port, protocol, evasive technique, or encryption — classifying over 3,000 applications for granular policy control.
Compact Desktop NGFW — Legacy Model Still Widely Deployed
The Palo Alto PA-220 is a fanless desktop next-generation firewall delivering 500 Mbps firewall throughput, 8 × Gigabit Ethernet ports, and the full PAN-OS feature set — ideal for small branches.
Get Pricing — Speak to Our Team
Competitive pricing · Response within 4 hours
Identifies applications regardless of port, protocol, evasive technique, or encryption — classifying over 3,000 applications for granular policy control.
Ties network activity to specific users and inspects all content for threats — enabling identity-based policies and full threat prevention on a single platform.
Zero moving parts — completely silent operation makes the PA-220 suitable for open-plan offices, retail environments, and quiet branch locations.
Supports IPSec VPN (50 Mbps) and SSL VPN for secure site-to-site and remote access connectivity using GlobalProtect.
Centrally managed via Palo Alto Panorama or the local web UI — enabling consistent policy deployment across all locations.
Combines IPS, anti-malware, anti-spyware, and URL filtering in a single pass — blocking known and unknown threats without sacrificing performance.
The Palo Alto PA-220 (PAN-PA-220) is a compact, fanless desktop next-generation firewall designed for small branch offices, retail locations, and remote sites requiring enterprise-grade security in a small footprint. While now end-of-sale, the PA-220 remains widely deployed and is actively supported under PAN-OS.
Running Palo Alto's flagship PAN-OS operating system, the PA-220 delivers the same App-ID, User-ID, and Content-ID capabilities as the largest PA-7000 chassis — classifying all traffic by application, user, and content in a single pass. This enables precise security policies based on who is doing what, rather than just port-based rules.
With 500 Mbps of firewall throughput (App-ID enabled) and 200 Mbps of Threat Prevention throughput, the PA-220 provides full NGFW protection for offices of up to ~50 users. Eight GE RJ45 ports offer flexible LAN/WAN connectivity without the need for additional switches in small deployments.
Organisations currently operating the PA-220 should consider upgrading to the PA-440 or PA-450 for improved performance, modern hardware, and longer-term OS support. Servnet can advise on migration paths and trade-in options.
Delivers full NGFW protection with App-ID, IPS, and URL filtering for small branches of up to ~50 users.
Silent fanless operation makes the PA-220 ideal for quiet retail environments — protecting POS systems and guest Wi-Fi.
PA-220 users should plan upgrades to the PA-440 or PA-450 for continued performance and long-term OS support.
GlobalProtect IPSec VPN enables secure hub-and-spoke connectivity back to HQ or data centre.
Trusted UK IT reseller since 2003 — supplying businesses of all sizes with genuine, competitively priced technology.
Servnet is an authorised IT reseller with direct access to leading product lines at competitive pricing.
Our engineers will help you select the right product and advise on compatibility with your existing infrastructure.
Most products ship from UK stock. Express delivery available for urgent deployments.
All products are genuine, brand-new, with full manufacturer warranty and RMA support.
We can pre-configure your hardware before shipping — reducing on-site deployment time and cost.
Post-sale support from our certified engineers. We're here if anything goes wrong.