Palo Alto Networks · Firewalls

PA-7500

PA-7500: Modular platform whose capacity depends on the number and combination of cards.

Category
Firewalls
Family
PA-7500
Modular Palo Alto Networks PA-7500 firewall with installed cards, front and top view

Overview

The PA-7500 is a modular chassis for environments that need to expand capacity through dedicated cards. The manufacturer’s 1,440 Gb/s Threat Prevention benchmark uses six PA-7500-DPC-A and two PA-7500-NPC-A cards on PAN-OS 11.1; the result does not represent a minimum configuration. The number of NPCs and DPCs, power, cooling and resilience must be specified together. The MPC has two logging slots that are empty by default and supports an optional drive for local storage. External collection and retention are separate architectural decisions. Security subscriptions and optional features are not assumed to be included with the appliance. Validate the licence, version and configuration.

Key features

Technical specifications

Capacity
Firewall (appmix)1500 Gb/s — App-ID and logging enabled; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-AApp-ID and logging enabled; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-A
Threat Prevention (appmix)1440 Gb/s — App-ID, IPS, antivirus, antispyware, WildFire, file blocking and logging; full conditions in the datasheet; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-AApp-ID, IPS, antivirus, antispyware, WildFire, file blocking and logging; full conditions in the datasheet; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-A
IPsec VPN407 Gb/s — 64 KB HTTP transactions with logging; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-A64 KB HTTP transactions with logging; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-A
Maximum concurrent sessions440000000 sessions — HTTP transactions; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-AHTTP transactions; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-A
New sessions per second7200000 sessions/s — Application Override and 1-byte HTTP transactions; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-AApplication Override and 1-byte HTTP transactions; configuration: 6 PA-7500-DPC-A +2 PA-7500-NPC-A
Platform
Data interfacesInterfaces determined by NPC cards; chassis with 9 front slots and up to 2 rear SFCs. — Management ports not included; transceivers sold separately
Test PAN-OS version11.1 — Version used for the datasheet figures; not an upgrade recommendationVersion used for the datasheet figures; not an upgrade recommendation
Virtual systems (base/maximum)25/225 — An additional licence is required above the base count; validate cluster restrictions
Benchmark configuration6 PA-7500-DPC-A cards and 2 PA-7500-NPC-A cards; do not apply these figures to a minimally configured chassis.
LoggingMPC with 2 logging slots empty by default; an optional drive enables local storage.
Minimum configurationAt least 1 MPC, 1 NPC and 1 DPC.

Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.

Documents and references