Palo Alto Networks | HW Architecture
Palo Alto Networks Logo Link
Home Introduction to PA-Series PA-7000 Series PA-5450 Series PA-5400 Series PA-5200 Series PA-3400 Series PA-3200 Series PA-1400 Series PA-800 Series PA-400 Series PA-220R Panorama™ - Network Security Management Detailed Specs on PA-Series
Menu Button

PA-Series ML-Powered Next-Generation Firewalls

HARDWARE ARCHITECTURES
PA-5450 Photo

Introducing PA-Series

About PA-Series
Take a closer look at the hardware architecture of each PA-Series Next-Generation Firewall family by selecting from the “Select” menu above or one of the PA-Series buttons below.

PA-Series ML-Powered Next-Generation Firewalls

Line Left
Icon NGFW
Line Right
PA 7000 PA-7000 Series
PA 5450 PA-5450
PA 5400 PA-5400 Series
PA 5200 PA-5200 Series
PA 3400 PA-3400 Series
PA 3200 PA-3200 Series
PA 1400 PA-1400 Series
PA 800 PA-800 Series
PA 400 PA-400 Series
PA 220 PA-220R
Panorama IconPanorama Icon

Network Security Management

Panorama™

PA-7000 Series

About PA-7000 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

12-core

RAM

SW RAID

ssd1

ssd2

Management Ports

Data Plane

100G-NPC

offload engine

fpga

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

RAM

CPU

CPU Text

Network Processing

flow control | route lookup | MAC lookup | QoS | NAT

RAM

ASIC

Data Interfaces

Bottom Ports
Bottom Ports

DPC-A

offload engine

2 x
FPGA

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

RAM

CPU

CPU Text

PA-5450

About PA-5450
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

16-core

RAM

SW RAID

ssd1

ssd2

Management Ports

Data Plane

PAN-PA-5400-NC-A

Network Processing

flow control | route lookup | MAC lookup | QoS | NAT

RAM

ASIC

Data Interfaces

Bottom Ports
Bottom Ports

PA-5400-DPC-A

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

RAM

CPU

CPU Text

PA-5400 Series

About PA-5400
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

PA-5410

CPU

5 (of 24) cores

PA-5420

CPU

6 (of 32) cores

PA-5430

CPU

10 (of 48) cores

PA-5440

CPU

12 (of 64) cores

STORAGE

STORAGE

Management Ports

Data Plane

offload engine

fpga

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

PA-5410

CPU

19 (of 24) cores

PA-5420

CPU

26 (of 32) cores

PA-5430

CPU

38 (of 48) cores

PA-5440

CPU

52 (of 64) cores

PA-5410
PA-5420

RAM

PA-5430

PA-5440

RAM

RAM

switch

Data Interfaces

Bottom Ports
Bottom Ports

PA-5200 Series

About PA-5200 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

PA-5220

CPU

8-core

PA-5250
PA-5260
PA-5280

CPU

12-core

RAM

STORAGE

Management Ports

Data Plane

offload engine

fpga

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

PA-5220

CPU

40-core

PA-5250

CPU

2 x 48-core

PA-5260
PA-5280

CPU

3 x 48-core

RAM

Network Processing

flow control | route lookup | MAC lookup | QoS | NAT

RAM

ASIC

Data Interfaces

Bottom Ports
Bottom Ports

PA-3400 Series

About PA-3400 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

PA-3410

CPU

3 (of 12) cores

PA-3420

CPU

3 (of 16) cores

PA-3430

CPU

4 (of 20) cores

PA-3440

CPU

5 (of 24) cores

STORAGE

Management Ports

Data Plane

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

PA-3410

CPU

9(of 12) cores
Integrated
Crypto
Assistant

PA-3420

CPU

13(of 16) cores
Integrated
Crypto
Assistant

PA-3430

CPU

9(of 12) cores
Integrated
Crypto
Assistant

PA-3440

CPU

9(of 12) cores
Integrated
Crypto
Assistant

RAM

SWITCH

Data Interfaces

Bottom Ports
Bottom Ports

PA-3200 Series

About PA-3200 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

4-core

RAM

STORAGE

Management Ports

Data Plane

Signature Matching

RAM

FPGA

Security Processing

APP-ID | User-ID | URL match | policy match app decoding | SSL/IPSec | decompression

PA-3220

CPU

10-core

PA-3250

CPU

12-core

PA-3260

CPU

16-core

RAM

Network Processing

flow control | route lookup | MAC lookup | QoS | NAT

RAM

FPGA

Data Interfaces

Bottom Ports
Bottom Ports

PA-1400 Series

About PA-1400 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

PA-1410

CPU

1(of 4) Cores

PA-1420

CPU

2(of 6) Cores

RAM

STORAGE

Data Plane

Security, Signature
and Network Processing

APP-ID | User-ID | URL match | policy match | app decoding
SSL/IPSec | decompression | flow control | route lookup
MAC lookup | QoS | NAT

PA-1410

CPU

3(of 4) cores

PA-1420

CPU

4(of 6) cores

RAM

Data Interfaces

PA-800 Series

About PA-800 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

3 (of 7/8) cores

RAM

STORAGE

Management Ports

Data Plane

Security, Signature
and Network Processing

APP-ID | User-ID | URL match | policy match | app decoding
SSL/IPSec | decompression | flow control | route lookup
MAC lookup | QoS | NAT

PA-820

CPU

4 (of 7) cores

PA-850

CPU

5 (of 8) cores

RAM

Data Interfaces

Bottom Ports
Bottom Ports

PA-400 Series

About PA-400 Series
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

PA-440/445
PA-410/415

CPU

1 (of 4) cores

PA-450

CPU

2 (of 6) cores

PA-460

CPU

2 (of 8) cores

PA-410/445

storage

RAM

PA-460
PA-450
PA-440/445

2x-storage

2x-RAM

Management Ports

Data Plane

Security, Signature
and Network Processing

APP-ID | User-ID | URL match | policy match | app decoding | SSL/IPSec | decompression | flow control | route lookup | MAC lookup | QoS | NAT

PA-440/445
PA-410/415

CPU

3 (of 4) cores

PA-450

CPU

4 (of 6) cores

PA-460

CPU

6 (of 8) cores

PA-410/415

RAM

PA-460
PA-450
PA-440/445

2x-RAM

Data Interfaces

Bottom Ports
Bottom Ports

PA-220R

About 220R
Visit Webpage
Download Datasheet
Home

MANAGEMENT

configuration | logging | reporting

CPU

2 (of 4) Cores

RAM

STORAGE

Management Ports

Data Plane

Security, Signature
and Network Processing

APP-ID | User-ID | URL match | policy match | app decoding | SSL/IPSec | decompression
flow control | route lookup | MAC lookup | QoS | NAT

RAM

CPU

2 (of 4) Cores

Data Interfaces

Bottom Ports
Bottom Ports

Panorama™
Network Security Management

About Panorama™
Visit Webpage
Download Datasheet
Home

M-700

MANAGEMENT

configuration | logging | reporting

CPU

40 core

RAM

512 GB

Storage

12 Bays
I/O: 100/1000/10000 (2), DB9 console serial port (1), USB port (1), 10 GigE ports (2)
Panorama Mode: 36,500 logs/second
Log Collector Mode: 73,000 logs/second
48 Terabytes Storage Max

M-600

MANAGEMENT

configuration | logging | reporting

CPU

28 core

RAM

256 GB

Storage

12 Bays
I/O: 10/100/1000 (4), DB9 console serial port (1), USB port (1)
Panorama Mode: 25,000 logs/second
Log Collector Mode: 50,000 logs/second
48 Terabytes Storage Max

M-300

MANAGEMENT

configuration | logging | reporting

CPU

12 core

RAM

256 GB

Storage

4 Bays
I/O: 100/1000/10000 (2), DB9 console serial port (1), USB port (1)
Panorama Mode: 16,500 logs/second
Log Collector Mode: 33,000 logs/second
16 Terabytes Storage Max

M-200

MANAGEMENT

configuration | logging | reporting

CPU

8 core

RAM

128 GB

Storage

4 Bays
I/O: 10/100/1000 (4), DB9 console serial port (1), USB port (1)
Panorama Mode: 10,000 logs/second
Log Collector Mode: 28,000 logs/second
16 Terabytes Storage Max

Get Detailed Specs

Home

PA-Series ML-Powered Next-Generation Firewalls

Line Left
NGFW Icon
Line Righ

Comparison Info?

Looking for more information? To compare and review detailed specification of all appliances from the PA-Series family of next-generation firewalls, go to:

More Info?

To learn more about comprehensive security that’s natively integrated with our Next-Generation Firewalls, go to:
COMPARE FIREWALLS
SECURITY SUBSCRIPTIONS

About PA-7000 Series

Palo Alto Networks PA-7000 Series ML-Powered Next-Generation Firewalls offer superior security within high-performance, business-critical environments, including large data centers and high-bandwidth network perimeters.

Designed to handle growing throughput needs for application-, user-, and device-generated data, these systems offer amazing performance, prevention capabilities to stop the most advanced cyber attacks, and high-throughput decryption to stop threats hiding under the veil of encryption. Built to maximize security-processing resource utilization and automatically scale as new computing power becomes available, the PA-7000 Series offers simplicity defined by a single-system approach to management and licensing. Palo Alto Networks PA-7000 Series ML-Powered Next-Generation Firewalls offer superior security within high-performance, business-critical environments, including large data centers and high-bandwidth network perimeters.

About PA-5200 Series

Palo Alto Networks PA-5200 Series ML-Powered Next-Generation Firewalls—comprising the PA-5280, PA-5260, PA-5250, and PA-5220—are ideal for high-speed data center, internet gateway, and service provider deployments. Pop Up 2: The PA-5200 Series delivers up to 67 Gbps of throughput, using dedicated processing and memory, for the key functional areas of networking, security, threat prevention, and management.

About PA-3200 Series

Palo Alto Networks PA-3200 Series ML-Powered Next-Generation Firewalls—comprising the PA-3260, PA-3250, and PA-3220—are targeted at high-speed internet gateway deployments. PA-3200 Series appliances secure all traffic, including encrypted traffic, using dedicated processing and memory for networking, security, threat prevention, and management.

About PA-800 Series

Palo Alto Networks PA-800 Series ML-Powered Next-Generation Firewalls, comprising the PA-820 and PA-850, are designed to provide secure connectivity for organizations’ branch offices as well as midsize businesses. Enables you to safely implement SD-WAN and delivers an exceptional end user experience by minimizing latency, jitter, and packet loss.

About PA-220R

Protect even the smallest parts of your business with the PA-220R ML-Powered Next-Generation Firewall appliance. With an App-ID throughput of 580 Mpbs, this small appliance secures your network by preventing a broad range of cyber threats while safely enabling SD-WAN.

The PA-220R ruggedized appliance brings next-generation capabilities to industrial applications in harsh environments.

About PA-Series

PA-Series constitute the full range of our ML-Powered Next-Generation Firewall physical appliances that are easy to deploy into your organization’s network and purposefully designed for simplicity, automation, and integration. No matter where you need protection, our PA-Series ML-Powered Next-Generation Firewalls are architected to provide consistent protection to your entire network – from your headquarters and office campus, branch offices and data center to your mobile and remote workforce.

Panorama™ - Network Security Management

IT/Network Security teams are stretched thin with having to manage increasingly complex security tools and multiple management consoles. Security deployments can overload teams with complex security rules and data from multiple sources.

Panorama™ provides a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations. It reduces complexity by simplifying the configuration, deployment, and management of your security posture. Receive centralized visibility and comprehensive insights into your network traffic, logs, and threats. Reduce administrative workload by helping manage updates, automating threat responses, and utilize API-based integrations with third-party systems.

The Palo Alto Networks® M700, M-600, M-300 and M-200 appliances are multi-function appliances that you can configure to function in Panorama™ Management mode, Panorama Management-only mode, Panorama Log Collector mode, or PAN-DB Private Cloud mode (M-700 and M-600).

About PA-5450

Palo Alto Networks PA-5450 ML-Powered Next-Generation Firewalls offer innovative scalability and modularity in a smaller 5U form-factor for modern Data Centers and large campus deployments.

Designed to handle growing throughput needs for application-, user-, and device-generated data, these systems offer amazing performance, prevention capabilities to stop the most advanced cyber attacks, and high-throughput decryption to stop threats hiding under the veil of encryption. Built to maximize security-processing resource utilization and automatically scale as new computing power becomes available, the PA-5450 offers simplicity defined by a single-system approach to management and licensing.

About PA-400 Series

Palo Alto Networks PA-400 Series ML-Powered Next-Generation Firewalls, comprising the PA-460, PA-450, PA-445, PA-440, PA-415 and PA-410, are designed to provide secure connectivity for distributed enterprise branch offices. The PA-400 series delivers ease of centralized management and provisioning with Panorama and Zero Touch Provisioning. Enables you to safely implement SD-WAN and delivers an exceptional end user experience by minimizing latency, jitter, and packet loss.

About PA-5400

PPalo Alto Networks PA-5400 Series ML-Powered NGFWs—comprising the PA-5440, PA-5430, PA-5420, and PA-5410—are ideal for high-speed data center, internet gateway, and service provider deployments. The PA-5400 Series appliances secure all traffic, including encrypted traffic.

About PA-3400

Palo Alto Networks PA-3400 Series ML-Powered NGFWs—comprising the PA-3440, PA-3430, PA-3420, and PA-3410—target high-speed internet gateway deployments. The PA-3400 Series appliances secure all traffic, including encrypted traffic.

About PA-1400

Palo Alto Networks PA-1400 Series ML-Powered NGFWs—comprising the PA-1420, and PA-1410—is ideal for protecting large branch locations and small enterprise campuses, with support for Power over Ethernet (PoE), virtual systems (VSYS), high-speed 5G copper ports (mGig ports) and fiber ports.
twitter link facebook link linkedin link
Return to Palo Alto Networks Main Site
© 2023 Palo Alto Networks, Inc. All rights reserved.