Palo Alto PA-3500 Series — Enterprise Campus & Internet Gateway NGFW
Fifth-generation (Quantum-Optimized) firewall series for enterprise campus and high-speed internet gateways. 4 models (PA-3510 / 3520 / 3530 / 3540), 30–55 Gbps firewall and 15–35 Gbps Threat Prevention (appmix, PAN-OS 12.2). 10G multi-gig copper, 25G SFP28 and 40G/100G QSFP28 interfaces, 1+1 redundant power.
From the same family
Specifications
- Type
- Quantum-Optimized NGFW (enterprise campus / internet gateway)
- Manufacturer
- Palo Alto Networks
- Models
- PA-3510, PA-3520, PA-3530, PA-3540
- Firewall throughput (appmix)
- 30 / 35 / 45 / 55 Gbps
- Threat Prevention (appmix)
- 15 / 20 / 25 / 35 Gbps
- IPsec VPN
- 13 / 15 / 22 / 36 Gbps
- Max concurrent sessions
- 2M / 4M / 5M / 6M
- New sessions per second
- 325,000 / 350,000 / 500,000 / 550,000
- Virtual systems (base / max)
- 5/15 · 5/15 · 5/20 · 5/20
- Power
- 1+1 redundant, 1,200 W; 1,066 W max
- Policy classification
- App-ID + User-ID + Content-ID
- Management
- PAN-OS + Panorama / Strata Cloud Manager (SCM)
- Cloud-delivered security services (CDSS)
- Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security
Key features
- 4 models: PA-3510 / PA-3520 / PA-3530 / PA-3540 — the fifth-generation counterpart of the PA-3400 Series.
- Firewall throughput (appmix): 30 / 35 / 45 / 55 Gbps; Threat Prevention: 15 / 20 / 25 / 35 Gbps (PAN-OS 12.2).
- IPsec VPN: 13 / 15 / 22 / 36 Gbps; concurrent sessions 2 / 4 / 5 / 6 million.
- Interfaces: 8 × 10G multi-gig copper, 8–12 × 1G/10G SFP+, 6 × 10G/25G SFP28, 2–4 × 40G/100G QSFP28.
- HSCI (2 × 40G/100G) and a dedicated 10G log port; active/passive and active/active HA.
- 960 GB SSD for system and log storage; TPM 2.0 secure boot.
- 1+1 redundant power supplies (AC 100–240 V or -48/-60 VDC).
- Decryption and VPN with post-quantum cryptography.
- Promark: sizing, installation, HA and policy design, migration from PA-3200 / PA-3400.
Typical applications
Hospital campus internet edge and clinical/administrative segmentation.
Government internet edge and DMZ — 25G/100G uplinks.
Energy company headquarters network and central termination of site links.
Refresh of PA-3200 / PA-3400 deployments.
Related Solutions
Related Products
Palo Alto PA-3400 Series — Enterprise Campus NGFW
ML-Powered next-generation firewall series for enterprise campus and internet-gateway deployments. 1RU form factor, 4 models (PA-3410 / 3420 / 3430 / 3440), Threat Prevention 7.5 → 20 Gbps (appmix). Uninterrupted operation with active/passive and active/active HA pairs.
DetailsPalo Alto PA-5500 Series — Data Center & High-Speed Internet Gateway NGFW
Fifth-generation (Quantum-Optimized) firewall series for data centers, high-speed internet gateways and service-provider networks. 8 models: PA-5510–5530 (2U, enterprise perimeter) and PA-5540–5580 (3U, large data center). 65–375 Gbps firewall and 45–300 Gbps Threat Prevention (appmix, PAN-OS 12.2); 100G/400G QSFP-DD interfaces, NGFW clustering.
DetailsFifth-generation (Quantum-Optimized) firewall series for enterprise campus and high-speed internet gateways. 4 models (PA-3510 / 3520 / 3530 / 3540), 30–55 Gbps firewall and 15–35 Gbps Threat Prevention (appmix, PAN-OS 12.2). 10G multi-gig copper, 25G SFP28 and 40G/100G QSFP28 interfaces, 1+1 redundant power.