Palo Alto Networks · Firewalls

PA-560

PA-560: Highest density in the wired family, with 4 × 10 GbE uplinks and 24 data ports.

Category
Firewalls
Family
PA-500 Series
Firewall Palo Alto Networks PA-560, full appliance front view

Overview

The PA-560 combines 14 RJ-45 1 GbE ports, 2 RJ-45 1 GbE bypass ports, 4 SFP 1 GbE ports and 4 SFP/SFP+ 1/10 GbE ports. The manufacturer reports 6 Gb/s of Threat Prevention in an appmix test on PAN-OS 12.2. Selection must assess this result alongside concurrent sessions, the application profile and required inspection; it does not guarantee performance on every network. Highest density in the wired family, with 4 × 10 GbE uplinks and 24 data ports. Transceivers, subscriptions and support are specified for the project. Security subscriptions and optional features are not assumed to be included with the appliance. Validate the licence, version and configuration.

Key features

Technical specifications

Capacity
Firewall (appmix)8.5 Gb/s — App-ID and logging enabledApp-ID and logging enabled
Threat Prevention (appmix)6 Gb/s — App-ID, IPS, antivirus, antispyware, WildFire, file blocking and logging; full conditions in the datasheetApp-ID, IPS, antivirus, antispyware, WildFire, file blocking and logging; full conditions in the datasheet
IPsec VPN5.5 Gb/s — 64 KB HTTP transactions with logging64 KB HTTP transactions with logging
Maximum concurrent sessions598000 sessions — HTTP transactionsHTTP transactions
New sessions per second100000 sessions/s — Application Override and 1-byte HTTP transactionsApplication Override and 1-byte HTTP transactions
Platform
Data interfaces14 RJ-45 1 GbE ports, 2 RJ-45 1 GbE bypass ports, 4 SFP 1 GbE ports and 4 SFP/SFP+ 1/10 GbE ports. — Management ports not included; transceivers sold separately
Test PAN-OS version12.2 — Version used for the datasheet figures; not an upgrade recommendationVersion used for the datasheet figures; not an upgrade recommendation
Virtual systems (base/maximum)1/5 — An additional licence is required above the base count; validate cluster restrictions

Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.

Documents and references