Firewall Throughput: Not separately published by Palo Alto; official ION 3200 spec lists encrypted throughput of 1.5 Gbps (DC) and 1 Gbps (Branch) at 1400-byte packets
Threat Prevention Throughput: Not published for ION 3200H; one reseller cites 520 Mbps for an unspecified configuration (unverified)
IPsec VPN Throughput: 1.5 Gbps DC / 1 Gbps Branch (encrypted, 1400-byte packets); 600 Mbps DC / 500 Mbps Branch at 600-byte packets
Max Sessions: 80,000 (single third-party reference, unverified)
New Sessions/sec: 6,000 (single third-party reference, unverified)
Interfaces: 8x GbE total incl. 2x RJ-45/SFP combo; bypass (fail-open) pair; 1x console; 2x USB 3.0. Port counts conflict between sources, verify against chassis labels
Form Factor: Hardened fanless appliance; desktop, wall, DIN or 1RU rack (rack kit sold separately); 9.38 x 15.35 x 1.74 in; -40 to 70 C operating range
Curation Review
✔ Pros:Hardened fanless design rated for -40 to 70 C, suited to harsh or remote sites; Integrated SD-WAN and firewall functions on one appliance; Managed through Prisma SD-WAN cloud controller with centralized policy; TPM module and high-availability support; Redundant DC power input (12-48 V) and bypass ports for resilience; 5G variant (PAN-ION-3200H-C5G-WW) available for worldwide cellular backup
✘ Cons:Low throughput (about 1-1.5 Gbps encrypted) compared with current branch and SD-WAN hardware; Threat prevention and session figures are not clearly published by the vendor and rely on third-party listings; Subscription licensing and support contracts are required on top of hardware cost; Rack mounting requires a separately purchased kit; Conflicting port and spec data across resellers and documentation; Stock is limited and some listings show out of stock
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels