This is an old revision of the document!

PA-400

2 x PAN-PA-440
2 x PAN-PA-440-BND-PRO (or PAN-PA-440-BND-ENT)
2 x PAN-PA-440-GP-HA2 (if GP is required. Remember to make it PAN-PA-440-GP is HA is not required. )
2 x PA-440 backline support
2 x PAN-PWR-50W-AC
1 x PAN-PA-400-RACKTRAY

PAN-PA-440-BND-PRO - Professional Subscription Bundle (Threat Prevention, Advanced URL Filtering, Wildfire, DNS Security and SDWAN)
PAN-PA-440-BND-ENT - Enterprise Subscription Bundle (Threat Prevention, Advanced URL Filtering, Wildfire, DNS Security, SD-WAN, IOT Security and SaaS Security Inline)

PA-3410 Bundles

PAN-PA-3410-BND-INTEDGE Secure Internet Edge (Adv TP, Adv URL, WF, DNS)
PAN-PA-3410-BND-NETSEG-CAMPUS Secure Network Segmentation for Campus Bundle (Adv TP, WF, IOT DRDLe)
PAN-PA-3410-BND-NETSEG-DC PA-3410, Secure Network Segmentation for Data Center Bundle (Adv TP, WF, DNS)

PAN-PA-3400-ACC Replacement accessory kit for PA-3400 Series. This kit is included in the system.
PAN-PA-3400-BOX-SET PA-3400 series shipping boxes - 5 cartons
PAN-PA-3400-PKG-SET PA-3400 packaging set - 1 each of ESD unit bag, foam set, insert tray, and shipping box
PAN-PA-3400-RACK4 Palo Alto Networks PA-3400 Series 4 post rack mount kit
PAN-PA-3400-SSD-480-IMG PA-3400 Series spare hard drive - 480GB Solid State Drive (SSD)

Other

PAN-PA-440-BND-LAB4 (Threat prevention, DNS, Advanced URL filtering, GlobalProtect, WildFire, SD-WAN, Standard support)
PAN-PA-440-BND-NFR4 (Threat prevention, DNS, Advanced URL filtering, GlobalProtect, WildFire, SD-WAN, Standard support)
PAN-PA-440-LAB (hardware)
PAN-PA-440-NFR (hardware)
PAN-PA-440-OSS (hardware) On Site Spare

Hardware for PA-440 is as follows. The first is “production”. The others cost about 1/3 of the production cost. Spare is cheaper than OSS. Lab, NFR and OOS are basically the same cost.

SKU	Description
PAN-PA-440	Palo Alto Networks PA-440
PAN-PA-440-LAB	Palo Alto Networks PA-440 Lab Unit
PAN-PA-440-NFR	Palo Alto Networks PA-440 NFR Unit
PAN-PA-440-OSS	On-Site Spare Palo Alto Networks PA-440
PAN-PA-440-SPR	Palo Alto Networks PA-440 Spare Unit

Support is as follows. 4 hour support is the same at Platinum support. Premium support is roughly 20% cheaper than Platinum/4-hour support. Standard support is roughly 50% cheaper than Platinum/4-hour support but I've never seen this sold. NFR support is about 80% cheaper than Platinum-4hour support.

SKU	Description
PAN-SVC-4HR-440	4-Hour Premium Support
PAN-SVC-B4HR-440	Partner enabled 4-Hour premium support
PAN-SVC-PLAT-440	Platinum Support
PAN-SVC-PREM-440	Premium support
PAN-SVC-STND-440	Standard support
PAN-SVC-BKLN-440	Partner enabled premium support
PAN-SVC-NFR-440	NFR system standard support

HA subscription are about 7% cheaper than non HA subscriptions.

PA-440 Bundles

SKU	Description	Suscriptions
PAN-PA-440-BND-PRO	Professional Subscription Bundle	Advanced Threat Prevention, Advanced URL Filtering, Wildfire, DNS Security, SDWAN
PAN-PA-440-BND-ENT	Enterprise Subscription Bundle	Advanced Threat Prevention, Advanced URL Filtering, Wildfire, DNS Security, SD-WAN, IOT Security and SaaS Security Inline

Subscriptions are as follows:

PAN-PA-440-ATP	Advanced Threat Prevention subscription
PAN-PA-440-ADVURL	Advanced URL Filtering subscription
PAN-PA-440-AIOPS-NGFW	AIOps for NGFW subscription
PAN-PA-440-DLP	DLP subscription
PAN-PA-440-DNS	DNS security subscription
PAN-PA-440-GP	GlobalProtect subscription
PAN-PA-440-IOT	IoT subscription
PAN-PA-440-IOT-DRDL	IoT subscription, does not require data lake
PAN-PA-440-SAAS-INLINE	SaaS Inline subscription
PAN-PA-440-SDWAN	SD-WAN subscription
PAN-PA-440-TP	Threat prevention subscription
PAN-PA-440-WF	WildFire subscription

Subscription Pattern is

PAN-PA-440-GP
PAN-PA-3410-DNS-HA2