🏢
Enterprise Internet Gateway
The PA-3220 is purpose-designed as an enterprise internet gateway firewall — handling all inbound and outbound traffic inspection including SSL/TLS decryption, IPS, and URL filtering at line rate.
UK’s trusted IT infrastructure partner since 2003
4G bps
Firewall throughput
2.2G bps
Threat Prevention
1M Sess
Max sessions
46K /sec
New connections
✅ Authorised Reseller
📦 Free UK Delivery
🔒 Full Warranty
📞 24/7 Support
Download Official Datasheet
PDF · Official manufacturer document
Palo AltoSKU: PAN-PA-3220
Palo Alto Networks PA-3220 Next-Generation Firewall (PAN-PA-3220)
The Most Widely Deployed Palo Alto Enterprise NGFW
The Palo Alto PA-3220 delivers 4 Gbps ML-Powered NGFW throughput with 2.2 Gbps Threat Prevention and 12 × GE RJ45 + 8 × SFP/SFP+ ports — trusted by thousands of enterprises globally as their primary internet gateway firewall.
- 4 Gbps firewall throughput (App-ID enabled)
- 2.2 Gbps Threat Prevention throughput
- 2.4 Gbps IPSec VPN throughput
- 1,000,000 concurrent sessions
- 12 × GE RJ45 + 4 × 1G SFP + 4 × 1G/10G SFP/SFP+
- 2U rackmount with redundant PSU
- Dedicated hardware acceleration
Get Pricing — Speak to Our Team
Request a Quote
Competitive pricing · Response within 4 hours
Key Features
Everything you need in one device
🤖
ML-Powered Threat Prevention
Inline machine learning prevents zero-day and evasive threats without signature updates — ensuring protection against novel attacks that bypass traditional NGFW defences.
🔌
High-Speed Connectivity
12 × GE RJ45 + 4 × 1G SFP + 4 × 1G/10G SFP/SFP+ in a 2U chassis — supporting dedicated management, HA, and high-speed transit interfaces for complex enterprise architectures.
🔐
Scalable VPN
2.4 Gbps IPSec VPN throughput with up to 2,048 site-to-site tunnels — making the PA-3220 suitable as a VPN hub for enterprise deployments.
👁️
Advanced Visibility
App-ID classifies every flow; User-ID maps traffic to Active Directory users; WildFire analyses all unknown files — providing comprehensive visibility into every aspect of enterprise network traffic.
⚙️
Dedicated Processing
Separate hardware planes for networking, security, and management ensure that heavy threat prevention loads do not impact firewall throughput or management responsiveness.
About the Palo Alto PA-3220
The Palo Alto PA-3220 (PAN-PA-3220) is the entry-level model in the PA-3200 Series, widely regarded as the most commonly deployed Palo Alto enterprise firewall globally. Delivering 4 Gbps of ML-Powered NGFW throughput and 2.2 Gbps of Threat Prevention in a 2U chassis, the PA-3220 is the go-to internet gateway firewall for medium to large enterprises.
The PA-3220 is powered by dedicated hardware — separate networking, security, and management processing planes — ensuring that running full threat prevention, SSL/TLS decryption, and WildFire analysis simultaneously does not degrade performance. This architecture allows the PA-3220 to maintain consistent throughput even under the heaviest security inspection loads.
With support for 1,000,000 concurrent sessions and 46,000 new connections per second, the PA-3220 handles enterprise internet gateways serving thousands of concurrent users. Its 12 × GE RJ45, 4 × 1G SFP, and 4 × 1G/10G SFP/SFP+ ports accommodate complex enterprise network topologies with dedicated transit, HA, and management interfaces.
Note: The PA-3220 is end-of-sale, succeeded by the PA-3410 in Palo Alto's current lineup. However, it remains the most widely deployed Palo Alto enterprise firewall and is fully supported under PAN-OS. Servnet can supply PA-3220 hardware, support renewals, and advise on upgrade paths.
Technical Specifications
📄 Download Datasheet (PDF)Use Cases
Ideal for a wide range of deployments
🌐
Enterprise Internet Gateway
Handles full internet gateway security for enterprises of 1,000+ users with App-ID, IPS, URL filtering, and SSL decryption at 4 Gbps.
🔐
VPN Hub
2.4 Gbps IPSec VPN and 2,048 tunnel capacity enables the PA-3220 to act as a VPN hub for distributed enterprise sites.
☁️
Hybrid Cloud Gateway
Secures traffic between on-premises networks and cloud workloads — providing consistent App-ID policies across physical and virtual environments.
🔄
Upgrade to PA-3410
The current-generation PA-3410 (14 Gbps) delivers 3.5× the throughput of the PA-3220. Servnet can advise on migration and trade-in.
FAQ
Frequently Asked Questions
Why Servnet
Why buy from Servnet?
Trusted UK IT reseller since 2003 — supplying businesses of all sizes with genuine, competitively priced technology.
🏆
Authorised UK Reseller
Servnet is an authorised IT reseller with direct access to leading product lines at competitive pricing.
💬
Expert Pre-Sales Advice
Our engineers will help you select the right product and advise on compatibility with your existing infrastructure.
🚚
Fast UK Delivery
Most products ship from UK stock. Express delivery available for urgent deployments.
🔒
Genuine, Warranted Kit
All products are genuine, brand-new, with full manufacturer warranty and RMA support.
📋
Configuration Services
We can pre-configure your hardware before shipping — reducing on-site deployment time and cost.
📞
24/7 Support
Post-sale support from our certified engineers. We're here if anything goes wrong.
