All the models of PAN even the virtual ones perform this function. You will need the Threat Prevent license if you want automatic updates. The PA-800 series next-generation firewalls prevent cyber threats and safely enable applications. The #paloalto-800 series provides advanced visibility and control of applications, users, and content at high throughput speeds.
The Palo Alto Networks® PA-800 Series next-generation firewalls are designed for data center and also internet gateway deployments. This series is comprised of PA-820 and PA-850 firewalls. These models provide flexibility in performance and redundancy to help you meet your deployment requirements. All models in this series provide next-generation security features to help you secure your organization through advanced visibility and control of applications, users, and content for PA-850.
For more details and pricing of PA-850 and PA-820 click here