Palo Alto Networks PA-5280
| SKU | PAN-PA-5280-AC |
|---|---|
| Performance and Capacities | |
| Firewall throughput (HTTP/appmix) | 54.2 / 60.0 Gbps |
| Threat Prevention throughput (HTTP/appmix) | 27.1 / 33.8 Gbps |
| IPsec VPN throughput | 28 Gbps |
| Max sessions | 65M |
| New sessions per second | 586,000 |
| Virtual systems (base/max) | 25/225 |
| Hardware Specifications | |
| I/O | 100/1000/10G Cu (4), 1G/10G SFP/ SFP+ (16), 40G/100G QSFP28 (4) |
| Management I/O | 10/100/1000 (2) 40G/100G QSFP28 HA (1) 10/100/1000 out-of-band management (1) RJ45 console port (1) |
| Storage Capacity | 240 GB SSD, RAID1, system storage 2 TB HDD, RAID1, log storage |
| Power Supply (Avg/Max Power Consumption) | 571 / 685 W |
| Max BTU/hr | 2,340 |
| Power Supplies (Base/Max) | 1:1 fully redundant (2/2) |
| AC Input Voltage (Input Frequency) | 100–240 VAC (50–60 Hz) |
| AC Power Supply Output | 1,200 watts/power supply |
| Max Current Consumption | AC: 8.5 A @ 100 VAC, 3.6 A @ 240 VAC |
| Max Inrush Current | AC: 50 A @ 230 VAC, 50 A @ 120 VAC |
| Mean Time Between Failure (MTBF) | 9.12 years |
| Rack Mount (Dimensions) | 3U, 19” standard rack 5.25” H x 20.5” D x 17.25” W |
| Weight (Standalone Device/As Shipped) | 46 lbs / 62 lbs |
| Safety | cTUVus, CB |
| EMI | FCC Class A, CE Class A, VCCI Class A |
| Environment | Operating temperature: 32° to 122° F, 0° to 50° C Non-operating temperature: -4° to 158° F, -20° to 70° C |
| Networking Features | |
|---|---|
| Interface Modes | L2, L3, tap, virtual wire (transparent mode) |
| Routing | OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3 Bidirectional Forwarding Detection (BFD) |
| SD-WAN | Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change |
| IPv6 | L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC |
| IPsec VPN | Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512 GlobalProtect large-scale VPN for simplified configuration and management |
| VLANs | 802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP |
| Network Address Translation | NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation) NAT64, NPTv6 Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription |
| High Availability | Modes: active/active, active/passive, HA clustering Failure detection: path monitoring, interface monitoring |
| Mobile Network Infrastructure | GTP Security SCTP Security |
