Palo Alto PA-220R Network Security/Firewall Appliance

Palo Alto Networks PA-220R is a ruggedized ML-Powered Next-Generation Firewall (NGFW) that brings next-generation capabilities to industrial applications in harsh environments.

The PA-220R ruggedized appliance secures industrial and defense networks in a range of harsh environments, such as utility substations, power plants, manufacturing plants, oil and gas facilities, building management systems, and healthcare networks.

The controlling element of the PA-220R is PAN-OS®, the same software that runs all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, inclusive of applications, threats, and content, and then ties that traffic to the user regardless of location or device type. The application, content, and user-in other words, the elements that run your business-then serve as the basis of your security policies, resulting in improved security posture and reduced incident response time.

Key Security and Connectivity Features | ML-Powered Next-Generation Firewall

• Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack prevention for file-based attacks while identifying and immediately stopping never-before-seen phishing attempts.

• Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW.

• Uses behavioral analysis to detect Internet of Things (IoT) devices and make policy recommendations; cloud-delivered and natively integrated service on the NGFW.

• Automates policy recommendations that save time and reduce the chance of human error.

Classifies All Applications, on All Ports, All the Time

• Employs App-ID? tags for industrial protocols and applications, such as Modbus, DNP3, IEC 60870- 5-104, Siemens S7, OSIsoft PI®, and more.

• Identifies the applications traversing your network irrespective of port, protocol, evasive techniques, or encryption (TLS/SSL).

• Automatically discovers and controls new applications to keep pace with the SaaS explosion with SaaS Security subscription.

• Uses the application, not the port, as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect, and apply traffic-shaping.

• Offers the ability to create custom App-IDs for proprietary applications or request App-ID development for new applications from Palo Alto Networks.

• Identifies all payload data within the application (e.g., files and data patterns) to block malicious files and thwart data exfiltration attempts.

• Creates standard and customized application usage reports, including software-as-a-service (SaaS) reports that provide insight into all sanctioned and unsanctioned SaaS traffic on your network.