Palo Alto PA-5500 Series — Data Center & High-Speed Internet Gateway NGFW
Fifth-generation (Quantum-Optimized) firewall series for data centers, high-speed internet gateways and service-provider networks. 8 models: PA-5510–5530 (2U, enterprise perimeter) and PA-5540–5580 (3U, large data center). 65–375 Gbps firewall and 45–300 Gbps Threat Prevention (appmix, PAN-OS 12.2); 100G/400G QSFP-DD interfaces, NGFW clustering.
From the same family
Specifications
- Type
- Quantum-Optimized NGFW (data center / internet gateway / service provider)
- Manufacturer
- Palo Alto Networks
- Models
- PA-5510, PA-5520, PA-5530, PA-5540, PA-5550, PA-5560, PA-5570, PA-5580
- Firewall throughput (appmix)
- 65 / 75 / 100 / 150 / 175 / 240 / 300 / 375 Gbps
- Threat Prevention (appmix)
- 45 / 55 / 65 / 90 / 120 / 180 / 240 / 300 Gbps
- IPsec VPN
- 34 / 36 / 38 / 80 / 100 / 125 / 150 / 170 Gbps
- Max concurrent sessions
- 7M / 12M / 14M / 39M / 49M / 74M / 89M / 99M
- New sessions per second
- 600K / 971K / 1.01M / 1.33M / 1.67M / 2.5M / 3M / 3.3M
- Virtual systems (base / max)
- 10/20 · 15/65 · 25/125 · 25/225 (PA-5540–5580)
- Form factor
- PA-5510–5530: 2U · PA-5540–5580: 3U (19" rack)
- High availability
- NGFW clustering (active/active) + active/passive HA
- Policy classification
- App-ID + User-ID + Content-ID
- Management
- PAN-OS + Panorama / Strata Cloud Manager (SCM)
- Cloud-delivered security services (CDSS)
- Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security, Advanced IP Defense
Key features
- 8 models: PA-5510 / 5520 / 5530 (2U) and PA-5540 / 5550 / 5560 / 5570 / 5580 (3U) — successor to PA-5200 and PA-5450.
- Firewall throughput (appmix): 65 Gbps (PA-5510) → 375 Gbps (PA-5580); Threat Prevention: 45 → 300 Gbps (PAN-OS 12.2).
- IPsec VPN: 34 → 170 Gbps; concurrent sessions 7 million → 99 million; new sessions 600,000 → 3.3 million per second.
- Interfaces: PA-5510–5530 with 10 × 10G multi-gig, 12 × SFP+, 8 × SFP28, 6 × 40G/100G QSFP28; PA-5540–5580 with 4–8 × 100G/400G QSFP-DD, 12–16 × 40G/100G QSFP28, 8–16 × 10G/25G SFP28.
- NGFW clustering (active/active) and active/passive HA; dedicated HSCI and log ports.
- Post-quantum cryptography: TLS decryption, site-to-site VPN and GlobalProtect with ML-KEM, ML-DSA, SLH-DSA; an extra PCIe slot for future PQC capabilities.
- Redundant power: 1+1 on PA-5510–5530, 2+2 (220 V) on PA-5540–5580, DC option.
- RAID1 SSD pair (960 GB or 3.84 TB) for system and log storage.
- Promark: capacity planning, data-center topology, clustering/HA design and migration.
Typical applications
Enterprise data center — segmentation between server zones and encrypted-traffic inspection.
High-speed internet gateway — enterprise or campus edge with 100G/400G uplinks.
Service provider and government backbone — high session capacity, 5G identifier-based visibility.
Refresh of PA-5200 / PA-5450 / PA-7000 deployments.
Related Solutions
Control rooms, field teams, alarm procedures and high availability.
DetailsCrisis coordination, escalation, collaboration and secure communications.
DetailsOpenScape Alarm Response (OScAR) + OpenScape Xpert scenarios.
DetailsRelated Products
Palo Alto PA-3500 Series — Enterprise Campus & Internet Gateway NGFW
Fifth-generation (Quantum-Optimized) firewall series for enterprise campus and high-speed internet gateways. 4 models (PA-3510 / 3520 / 3530 / 3540), 30–55 Gbps firewall and 15–35 Gbps Threat Prevention (appmix, PAN-OS 12.2). 10G multi-gig copper, 25G SFP28 and 40G/100G QSFP28 interfaces, 1+1 redundant power.
DetailsPalo Alto PA-3400 Series — Enterprise Campus NGFW
ML-Powered next-generation firewall series for enterprise campus and internet-gateway deployments. 1RU form factor, 4 models (PA-3410 / 3420 / 3430 / 3440), Threat Prevention 7.5 → 20 Gbps (appmix). Uninterrupted operation with active/passive and active/active HA pairs.
DetailsFifth-generation (Quantum-Optimized) firewall series for data centers, high-speed internet gateways and service-provider networks. 8 models: PA-5510–5530 (2U, enterprise perimeter) and PA-5540–5580 (3U, large data center). 65–375 Gbps firewall and 45–300 Gbps Threat Prevention (appmix, PAN-OS 12.2); 100G/400G QSFP-DD interfaces, NGFW clustering.