Palo Alto Networks PA-Series firewalls: every current model

Palo Alto Networks PA-Series firewalls run PAN-OS. They identify traffic by application, user and content rather than by port number, and the same policy model runs from the small-site PA-400 and PA-500 units to the PA-7500 chassis.

App-ID, User-ID and Content-ID are part of PAN-OS on every model.
Security subscriptions such as Advanced Threat Prevention, Advanced URL Filtering and Advanced WildFire are licensed separately.
Panorama and Strata Cloud Manager manage many firewalls from one place.

Get a price on any Palo Alto Networks firewall

Tell us the model, or your line speed and number of users, and we will call you back with a quote.

52 Palo Alto Networks models, by series

Each model page has the full published specifications and a price request. In the tables, "threat protection" is Palo Alto Networks's threat prevention throughput figure.

PA-400 series (9)

Small-site firewalls, including 5G and PoE models.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-410	1.4 Gbps	800 Mbps	500 Mbps	64,000	Desktop	Get price
Palo Alto Networks PA-415	1.5 Gbps	800 Mbps	500 Mbps	64,000	Desktop	Get price
Palo Alto Networks PA-415-5G	1.5 Gbps	800 Mbps	500 Mbps	64,000	Desktop	Get price
Palo Alto Networks PA-440	2.4 Gbps	1.2 Gbps	1.1 Gbps	200,000	Desktop	Get price
Palo Alto Networks PA-445	2.7 Gbps	1.25 Gbps	1.1 Gbps	200,000	Desktop	Get price
Palo Alto Networks PA-455-5G	3.2 Gbps	1.8 Gbps	1.6 Gbps	300,000	Desktop	Get price
Palo Alto Networks PA-450	3.3 Gbps	2.1 Gbps	1.7 Gbps	300,000	Desktop	Get price
Palo Alto Networks PA-455	3.6 Gbps	2.3 Gbps	1.8 Gbps	300,000	Desktop	Get price
Palo Alto Networks PA-460	4.2 Gbps	3.0 Gbps	2.3 Gbps	400,000	Desktop	Get price

PA-500 series (9)

The newer small-site and branch range, from the PA-501 to the PA-560.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-501	800 Mbps	500 Mbps	240 Mbps	30,000	Desktop	Get price
Palo Alto Networks PA-505	1.2 Gbps	800 Mbps	400 Mbps	62,000	Desktop	Get price
Palo Alto Networks PA-510	1.8 Gbps	1.2 Gbps	0.8 Gbps	98,000	Desktop	Get price
Palo Alto Networks PA-520	2.8 Gbps	1.8 Gbps	1.5 Gbps	148,000	Desktop	Get price
Palo Alto Networks PA-540	3.8 Gbps	2.2 Gbps	2.0 Gbps	248,000	Desktop	Get price
Palo Alto Networks PA-545-POE	5.0 Gbps	3.0 Gbps	3.0 Gbps	298,000	Rackmount	Get price
Palo Alto Networks PA-550	6.5 Gbps	4.5 Gbps	4.0 Gbps	398,000	Desktop	Get price
Palo Alto Networks PA-555-POE	7.5 Gbps	5.0 Gbps	4.5 Gbps	448,000	Rackmount	Get price
Palo Alto Networks PA-560	8.5 Gbps	6.0 Gbps	5.5 Gbps	598,000	Desktop	Get price

PA-400R ruggedized series (5)

Ruggedized units for industrial and outdoor sites.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-410R	1.4 Gbps	650 Mbps	650 Mbps	64,000	Rugged	Get price
Palo Alto Networks PA-410R-5G	1.4 Gbps	650 Mbps	650 Mbps	64,000	Rugged	Get price
Palo Alto Networks PA-450R	3.2 Gbps	1.7 Gbps	1.3 Gbps	200,000	Rugged	Get price
Palo Alto Networks PA-450R-5G	3.2 Gbps	1.7 Gbps	1.3 Gbps	200,000	Rugged	Get price
Palo Alto Networks PA-455R-5G	3.2 Gbps	1.8 Gbps	1.3 Gbps	200,000	Rugged	Get price

PA-50R ruggedized series (4)

Compact ruggedized firewalls with 5G options.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-52R-5G	2.0 Gbps	1.0 Gbps	0.8 Gbps	64,000	Rugged	Get price
Palo Alto Networks PA-54R-POE	3.0 Gbps	1.6 Gbps	1.2 Gbps	200,000	Rugged	Get price
Palo Alto Networks PA-54R-POE-D-5G	3.0 Gbps	1.6 Gbps	1.2 Gbps	200,000	Rugged	Get price
Palo Alto Networks PA-56R-POE-5G	4.0 Gbps	2.4 Gbps	1.9 Gbps	200,000	Rugged	Get price

PA-1400 series (2)

1U firewalls for branches and mid-size sites.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-1410	8.5 Gbps	4.5 Gbps	4.1 Gbps	945,000	Rackmount	Get price
Palo Alto Networks PA-1420	9.5 Gbps	6.2 Gbps	5.6 Gbps	1.4 million	Rackmount	Get price

PA-1500 series (3)

1U firewalls with multi-gigabit and PoE ports.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-1510-POE	15 Gbps	9 Gbps	7 Gbps	1,095,000	Rackmount	Get price
Palo Alto Networks PA-1520-POE	25 Gbps	18 Gbps	14 Gbps	1,495,000	Rackmount	Get price
Palo Alto Networks PA-1530-POE	35 Gbps	27 Gbps	18 Gbps	1,750,000	Rackmount	Get price

PA-3400 series (4)

Firewalls for campuses and internet edge.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-3410	14 Gbps	7.5 Gbps	6.6 Gbps	1.4 million	Rackmount	Get price
Palo Alto Networks PA-3420	19 Gbps	10 Gbps	9.9 Gbps	2.2 million	Rackmount	Get price
Palo Alto Networks PA-3430	29 Gbps	15 Gbps	12 Gbps	2.5 million	Rackmount	Get price
Palo Alto Networks PA-3440	35 Gbps	20 Gbps	14.5 Gbps	3 million	Rackmount	Get price

PA-3500 series (4)

The newer campus and edge range, with 100G interfaces.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-3510	30 Gbps	15 Gbps	13 Gbps	2 million	Rackmount	Get price
Palo Alto Networks PA-3520	35 Gbps	20 Gbps	15 Gbps	4 million	Rackmount	Get price
Palo Alto Networks PA-3530	45 Gbps	25 Gbps	22 Gbps	5 million	Rackmount	Get price
Palo Alto Networks PA-3540	55 Gbps	35 Gbps	36 Gbps	6 million	Rackmount	Get price

PA-5400 series (6)

Data-centre firewalls, including the modular PA-5450.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-5410	52 Gbps	35 Gbps	20 Gbps	5 million	Rackmount	Get price
Palo Alto Networks PA-5420	70 Gbps	50 Gbps	28 Gbps	7 million	Rackmount	Get price
Palo Alto Networks PA-5430	80 Gbps	60 Gbps	42 Gbps	9 million	Rackmount	Get price
Palo Alto Networks PA-5440	85 Gbps	70 Gbps	58 Gbps	20 million	Rackmount	Get price
Palo Alto Networks PA-5445	90 Gbps	76 Gbps	64 Gbps	48 million	Rackmount	Get price
Palo Alto Networks PA-5450	200 Gbps	189 Gbps	85 Gbps	100 million	Chassis	Get price

PA-5500 series (5)

The newer data-centre range, with 400G interfaces on the larger models.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-5540	150 Gbps	90 Gbps	80 Gbps	39 million	Rackmount	Get price
Palo Alto Networks PA-5550	175 Gbps	120 Gbps	100 Gbps	49 million	Rackmount	Get price
Palo Alto Networks PA-5560	240 Gbps	180 Gbps	125 Gbps	74 million	Rackmount	Get price
Palo Alto Networks PA-5570	300 Gbps	240 Gbps	150 Gbps	89 million	Rackmount	Get price
Palo Alto Networks PA-5580	375 Gbps	300 Gbps	170 Gbps	99 million	Rackmount	Get price

PA-7500 (1)

Modular chassis for the largest data centres and service providers.

Model	Firewall throughput	Threat protection	IPsec VPN	Max sessions	Form
Palo Alto Networks PA-7500	1.5 Tbps	1.44 Tbps	407 Gbps	440 million	Chassis	Get price

Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care.

Palo Alto Networks questions

What is the difference between the PA-400 and PA-500 series?

Both are for small sites and branches. The PA-500 series is the newer generation, and Palo Alto Networks sells both at present. The tables on this page show the published figures side by side.

Which subscriptions does a PA-Series firewall need?

The firewall identifies applications and users without a subscription. Blocking threats, filtering web categories and analysing unknown files each need their own subscription. We quote the hardware with the subscriptions you choose.

What does R mean in a Palo Alto model name?

R means ruggedized: the unit is built for heat, dust and vibration that an office model would not survive, and can be mounted on a DIN rail or in a small cabinet.