Palo Alto Networks PA-54R-POE
A fanless, ruggedized NGFW with 1GbE and 802.3bt PoE++ but no cellular modem, built to secure field sites such as utility substations, outside cabinets and oil-and-gas facilities by converging routing, switching, SD-WAN and firewall into one box.
Performance
- Firewall throughput (appmix)
- 3.0 Gbps
- Threat prevention throughput (appmix)
- 1.6 Gbps
- IPsec VPN throughput
- 1.2 Gbps
- Max concurrent sessions
- 200,000
- New sessions/sec
- 5,000
- Virtual systems (base/max)
- 1 / 5
Interfaces
- Data ports
- 12 × 1GbE RJ-45, 2 × 1G SFP
- Out-of-band management
- 2 × 1G/10G SFP+
- Log
- 2 × 10G SFP+
- Console
- RJ-45 (1), USB-C
- Bootstrap
- USB 3.2 Gen1 Type-A
- Digital I/O
- 6 ruggedized dry-contact inputs/outputs
- Cellular
- Not supported on this model
- VIMS
- Vehicle Ignition Management System supported (auto power-supply unit in a future release)
Switching
- Layer 2 switching
- On all data ports; 802.1Q VLAN trunking, 4,094 VLANs per device/interface
- Loop prevention
- Multiple Spanning Tree Protocol
- Storm control
- Unknown unicast, multicast and broadcast storm control
- Link aggregation
- 802.3ad LACP
Routing
- Protocols
- OSPFv2/v3, multiprotocol BGP with graceful restart, RIP, static routing, policy-based forwarding
- Multicast
- PIM-SM, PIM-SSM, IGMP v2/v3/v6
- SD-WAN
- Active/active and active/standby WAN across copper and fiber links; path quality measurement (jitter/loss/latency), dynamic path selection and bandwidth-based path change
Security services
- App-ID
- Layer 7 decoding/control of IT and OT/SCADA protocols including Modbus, DNP3, IEC-104, Siemens S7, PROFINET, BACnet, EtherNet/IP
- Threat prevention
- Advanced Threat Prevention, WildFire, antivirus, antispyware, URL/DNS security via cloud subscriptions
- Segmentation
- Proxy ARP and DHCP-response overwrite for microsegmenting flat Layer 2 OT networks
VPN
- Key exchange
- Manual key, IKEv1 (not with NGFW clustering), IKEv2 (pre-shared key and certificate-based); post-quantum PPK
- Encryption
- 3DES, AES (128/192/256-bit)
- Authentication
- MD5, SHA-1, SHA-256, SHA-384, SHA-512
- Remote access
- GlobalProtect gateway/portal (license required); Prisma Browser for browser-native RDP/SSH/VNC
Power
- Max / average consumption
- 225.1 W / 29.7 W
- Max current draw
- 18.0 A @ 12 VDC
- Input voltage
- 12–48 VDC; 100–240 VAC (50–60 Hz) optional
- Max heat output
- 767.7 BTU/hr
Storage
- Onboard storage
- 128 GB
- TPM
- TPM 2.0
Management
- Platforms
- Strata Cloud Manager (cloud-connected) or Panorama (on-premises / air-gapped)
- Zero-touch provisioning
- Automatic secure handshake and config pull via serial or QR-code registration
Physical
- Dimensions
- 5.8 × 7.2 × 5.5 in (H×W×D)
- Mounting
- 3RU, 19" standard rack; 2-post rack mount tray and wall mount kits available
- Weight
- 7.5 lb product / 10.3 lb shipping
Environmental
- Operating temperature
- -40°C to 70°C
- Nonoperating temperature
- -40°C to 70°C
- Cooling
- Fanless, passive convection, no moving parts
- Humidity
- 10%–90%
- Max altitude
- 10,000 ft / 3,048 m
- Ingress protection
- IP-40
- MTBF
- 300,000 hrs @ 25°C
- Safety / EMI
- UL 62368-1 / CSA C22.2 No. 62368-1, IEC/EN 62368-1, cTUVus and CB; FCC Class A, CE Class A, VCCI Class A