Palo Alto Networks' next-generation firewalls enable enterprises
to see and control applications, users, and content - not just
ports, IP addresses, and packets - using three unique
identification technologies: App-ID, User-ID, and Content-ID. These
identification technologies enable enterprises to create
business-relevant security policies - safely enabling organizations
to adopt new applications, instead of the traditional
"all-or-nothing" approach offered by traditional port-blocking
firewalls.
Palo Alto Networks' next-generation firewalls are based on our
Single-Pass Parallel Processing (SP3) Architecture, enabling low
latency, multi-Gbps performance -while delivering greater
functionality than any other type of security device.

Model families include the PA-4000 Series and the PA-2000
Series, along with the newly released PA-500 and range from 250Mbps
to 10Gbps in throughput capacity. Palo Alto Networks
next-generation firewalls are built on a strong networking
foundation, offer a familiar policy management interface and offer
unprecedented features.