# Palo Alto PA-500 Series — Branch & Mid-size NGFW

URL: https://www.promark.tr/en/products/paloalto-pa-500
Category: Firewall & Network Security
Family: [Palo Alto Networks NGFW](https://www.promark.tr/en/products/paloalto-ngfw)

Precision AI-powered next-generation firewall series for branch offices and mid-size enterprises. Single-pass architecture, real-time threat prevention, post-quantum cryptography. 10 models (PA-501 / 505 / 510 / 520 / 520-5G / 540 / 545-POE / 550 / 555-POE / 560), 0.8–8.5 Gbps firewall and 0.5–6.0 Gbps threat prevention (appmix).

## Key features

- Precision AI real-time threat prevention — zero-day attack protection.
- Single-pass parallel processing architecture — all security services in one pass per packet.
- App-ID + User-ID + Content-ID — policy enforcement by application, user, and content.
- Post-quantum cryptography support — ready for future quantum attacks.
- 10-model series: PA-501 / 505 / 510 / 520 / 520-5G / 540 / 545-POE / 550 / 555-POE / 560.
- PA-520-5G — embedded 5G cellular module, 8 × 1G RJ45 + 2 × 1G SFP (backup or primary WAN).
- Firewall throughput (app-mix): 0.8 Gbps (PA-501) → 8.5 Gbps (PA-560).
- Threat prevention throughput: 0.5 → 6.0 Gbps.
- IPsec VPN throughput: 0.24 → 5.5 Gbps.
- PA-520: 8 × RJ-45 ports, 1.8 Gbps threat performance.
- PA-540: 8 × RJ-45 + 2 × SFP, 2.2 Gbps threat performance.
- PA-545-POE / PA-555-POE — PoE-output variants.
- ZTP (Zero Touch Provisioning) — remote deployment and onboarding.
- Cloud-delivered security services — Threat Prevention, URL Filtering, WildFire, DNS Security, GlobalProtect.
- PAN-OS operating system — Strata management, Strata Cloud Manager (SCM) for centralized policy.

## Specifications

- **Type:** Next-Generation Firewall (NGFW)
- **Manufacturer:** Palo Alto Networks
- **Series:** PA-500 (new generation, 2025+) — branch and mid-range
- **Models:** PA-501, PA-505, PA-510, PA-520, PA-520-5G, PA-540, PA-545-POE, PA-550, PA-555-POE, PA-560
- **Firewall throughput (app-mix):** 0.8 Gbps (PA-501) — 8.5 Gbps (PA-560)
- **Threat prevention:** 0.5 Gbps (PA-501) — 6.0 Gbps (PA-560)
- **IPsec VPN:** 0.24 Gbps (PA-501) — 5.5 Gbps (PA-560)
- **Architecture:** Single-pass parallel processing
- **AI / ML:** Precision AI threat prevention
- **Cryptography:** Post-quantum ready
- **Policy classification:** App-ID + User-ID + Content-ID
- **ZTP (Zero Touch):** Yes (remote deployment)
- **PoE variants:** PA-545-POE, PA-555-POE
- **Management:** PAN-OS + Strata Cloud Manager (SCM)
- **Cloud security services:** Threat Prevention, URL Filtering, WildFire, DNS Security, GlobalProtect
- **Previous gen:** PA-220 (EoS 31.01.2023) — migration path per Palo Alto EOL page: PA-400 / PA-500 Series

## Use cases

- Branch-office NGFW — WAN edge + IPsec VPN to HQ.
- Mid-size enterprise HQ NGFW — internet edge + DMZ.
- Contact center / hospital — AI threat prevention for critical traffic.
- SD-WAN edge — PA-545-POE includes AP + IP phone powering.
- Multi-site distributed enterprise — ZTP ready-to-deploy + Strata Cloud Manager centralized policy.

## For a quote and BOM

https://www.promark.tr/en/contact · +90 312 544 0915 · destek@promark.tr