Call a Specialist Today! 844-294-0778
End-of-Life — Renewals Only
The PA-3260 has reached end-of-life and is available for renewals only. The designated replacement is the PA-3420, featuring hardware-accelerated TLS 1.3 decryption and ML-powered security services for data center and internet gateway deployments.
View the PA-3420 Contact a specialist
The PA-3260 is the high-end platform of the PA-3200 Series, with additional interfaces and redundant power for data center deployments. This model is no longer sold as new and is available for renewals only.
Designated replacement
Next-generation firewall with hardware-accelerated TLS 1.3 decryption and ML-powered security, delivering 19.9 Gbps firewall throughput in a 1RU form factor.
View PA-3420Related end-of-life model
Entry-level PA-3200 model for data center and internet gateway deployments, also available for renewals only.
View PA-3220 EOL detailsRelated end-of-life model
Mid-tier PA-3200 model for data center and internet gateway deployments, also available for renewals only.
View PA-3250 EOL detailsUpgrade path
As encrypted traffic grows, the PA-3200 series struggles to inspect SSL/TLS without performance degradation. The PA-3400 Series has dedicated hardware acceleration for TLS 1.3 decryption.
The PA-3200 series relies on software-based SSL decryption. The PA-3400 Series includes dedicated hardware for TLS 1.3, delivering up to 3x faster decryption throughput.
PA-3400 Series delivers substantially higher firewall and threat prevention throughput, removing performance bottlenecks at the network edge.
PA-3400 platforms run the latest Precision AI and ML-powered security services for inline deep learning threat prevention.
PA-3400 Series provides greater performance density in a standard 1RU rackmount form factor.
A direct specification comparison between the end-of-life PA-3260 and its designated replacement, the PA-3420.
| Specification | PA-3260 (Legacy) | PA-3420 (Current) | Improvement |
|---|---|---|---|
| Firewall throughput | 8.8 Gbps | 19.9 Gbps | 2.3x faster |
| Threat prevention | 4.0 Gbps | 11.0 Gbps | 2.8x faster |
| SSL/TLS decryption | Software-based | Hardware-accelerated | 3x faster |
| Security approach | Signature-based | ML-powered inline | Advanced detection |
| Form factor | 1RU | 1RU | Same rack footprint |
Trade-in programs may be available for existing PA-3260 deployments. Contact a specialist for details.
View PA-3420 details Compare all modelsReference specifications for the end-of-life PA-3260 platform.
| Firewall throughput | 8.8 Gbps |
| Threat prevention throughput | 4.0 Gbps |
| IPSec VPN throughput | 3.0 Gbps |
| Max sessions | 1,000,000 |
| New sessions per second | 120,000 |
Reference datasheets for the PA-3260 and the current PA-Series platforms.
Original hardware specifications and performance data for the legacy PA-3260 platform.
Download PDFComprehensive overview of Palo Alto Networks next-generation firewall capabilities and security features.
Download PDFRecommended products
Threat protection, web filtering, data loss prevention, and IoT security available as subscriptions for all PA-Series platforms.
Learn moreUnified management and operations across NGFW and SASE deployments with predictive analytics and AI-powered policy analysis.
Learn moreComplete listing of end-of-life Palo Alto Networks hardware with designated replacements and upgrade paths.
View all legacy productsDiscuss upgrade options, evaluate trade-in programs, and plan the transition from PA-3260 to the current PA-3400 Series.