Palo Alto Networks PA-5510
The entry point of the quantum-optimized PA-5500 Series, a 2U rack NGFW built on Palo Alto's FE400/FE100X ASICs for mid-tier enterprise perimeters and high-speed internet gateways.
Performance
- Firewall throughput (appmix)
- 65 Gbps
- Threat prevention throughput (appmix)
- 45 Gbps
- IPsec VPN throughput
- 34 Gbps
- Max concurrent sessions
- 7 million
- New sessions/sec
- 600,000
- Virtual systems (base/max)
- 10 / 20
Interfaces
- Data ports
- 10GE Cu mGig (10), 10G SFP+ (12), 10G/25G SFP28 (8), 40G/100G QSFP28 (6)
- Out-of-band management
- 1G/10G SFP+ (1)
- Console
- RJ-45 (1), USB-C (1)
- Bootstrap
- USB-C
- HSCI (HA sync)
- 40G/100G QSFP28 (2)
- Log
- 10G SFP+ (1)
- Interface modes
- L2, L3, tap, virtual wire (transparent mode)
Switching
- VLANs
- 802.1Q VLAN tags, 4,094 per device/interface
- Link aggregation
- 802.3ad aggregate interfaces with LACP
Routing
- Protocols
- OSPFv2/v3, multiprotocol BGP with graceful restart, RIP, static routing, policy-based forwarding
- Dynamic addressing
- PPPoE and DHCP client (IPv4/IPv6); DHCPv4 server and relay; DHCPv6 client with prefix delegation; SLAAC server
- Multicast
- PIM-SM, PIM-SSM, IGMPv2, IGMPv3
- High availability
- BFD and multihop BFD; NGFW clustering active/active with dual-active data plane and single control plane, MC-LAG aggregate interfaces; HA active/passive
- NAT
- Static IP, dynamic IP, and port (PAT); NAT64; NPTv6; dynamic IP reservation, tunable dynamic IP, port oversubscription
- SD-WAN
- Path quality measurement (jitter, packet loss, latency), bandwidth monitoring, Multi-VR/LR support over the SD-WAN overlay, Prisma Access Hub (hybrid SASE), ADEM support
- IPv6
- Dual-stack and IPv6-only networks; IPv6 geolocation, OSPFv3, multiprotocol BGP, NAT64, NPTv6
Security services
- Mobile network infrastructure
- 5G identifier-based visibility, traffic correlation and security enforcement (5G security)
VPN
- Key exchange
- Manual key, IKEv1, IKEv2 (pre-shared key and certificate-based); post-quantum PPK
- Encryption
- 3DES, AES (128-bit, 192-bit, 256-bit)
- Authentication
- MD5, SHA-1, SHA-256, SHA-384, SHA-512
- Remote access
- GlobalProtect gateway/portal, GlobalProtect Large Scale VPN (license required); post-quantum cryptography (PQC) support
Power
- Power supplies
- 1+1 redundant, AC or DC
- Output
- AC: 1,200 W/power supply; DC: 1,200 W/power supply
- Input voltage
- AC: 100–120 VAC / 200–240 VAC (50–60 Hz); DC: -48 VDC to -60 VDC
- Max current draw
- AC: 12 A @ 120 VAC or 7 A @ 240 VAC; DC: 30 A @ -60 VDC
Storage
- Onboard storage
- 960 GB RAID1 SSD pair for system and log storage, cold-swap
- Optional storage
- 3.84 TB RAID1 SSD pair for system and log storage, cold-swap
Management
- Platforms
- Strata Cloud Manager (cloud-delivered) or Panorama (on-premises)
Physical
- Dimensions
- 2U, 19" standard rack — 3.4" H x 18.7" D x 17.3" W
- Weight
- 36.9 lb (standalone device)
Environmental
- Operating temperature
- 32°F to 122°F (0°C to 50°C)
- Nonoperating temperature
- -4°F to 158°F (-20°C to 70°C)
- Humidity
- 10%–90%
- Max altitude
- 10,000 ft / 3,048 m
- Airflow
- Front to back (port side to power supply side)
- Safety / EMI
- cTUVus, CB; FCC Class A, CE Class A, VCCI Class A