Shopping security
[shortdesc] 300 Gbps firewall, 240 Gbps threat prevention, 150 Gbps IPsec, 89M sessions, 3U rack-mount, up to 8×400G QSFP-DD ports [/shortdesc]
[properties]
| Model | PA-5570-AC |
| Product Type | Next-Generation Firewall (NGFW |
| Firewall Throughput (appmix | 300 Gbps |
| Threat Prevention Throughput (appmix | 240 Gbps |
| IPsec VPN Throughput | 150 Gbps |
| Max Concurrent Sessions | 89M |
| New Sessions per Second | 3M |
| Virtual Systems (base/max | 25 / 225 |
| I/O | 10G/25G SFP28 (8; 40G/100G QSFP28 (12; 100G/400G QSFP-DD (8 |
| Management I/O | 1G/10G SFP+ OOB mgmt (2; RJ-45 console; USB-C console; USB 3.2 Gen1 Type-A (bootstrap; HSCI 100G/400G QSFP-DD (2; Log 10G SFP+ (2 |
| Storage Capacity | Optional 3.84 TB RAID1 SSD pair (cold swap |
| Power (Avg/Max | 2,100 W / 3,100 W |
| Max BTU/hr | 1638 |
| Power Supplies | 2+2 redundant (220 V & DC; 3+1 redundant (110 V |
| Input Voltage | AC 100–240 VAC (50–60 Hz; DC −40 VDC to −60 VDC |
| Power Supply Output | AC: 2,700 W (220 V or 1,200 W (110 V per PSU; DC: 2,200 W per PSU |
| Max Current Consumption | AC: 20.3 A @ 110 VAC; 9.3 A @ 240 VAC — DC: 43.7 A @ 54 VDC |
| MTBF | 6.3 years |
| Rack Mount Dimensions | 3U, 19" rack (5.2" H × 29.8" D × 17.3" W with PSU inserted |
| Weight | 70 lb (standalone / 116 lb (as shipped |
| Safety | cTUVus, CB |
| EMI | FCC Class A; CE Class A; VCCI Class A |
| Environment | Operating 0–50 °C (32–122 °F; Non-operating −20–70 °C (−4–158 °F; Humidity 10–90%; Max altitude 3,048 m; Airflow front-to-back |
[/properties]
[specifications]
| Interface Modes | L2, L3, tap, virtual wire (transparent |
| Routing | Advanced routing engine; OSPFv2/v3, MP-BGP (graceful restart, RIP, static; policy-based forwarding; PPPoE & DHCP client (IPv4/IPv6; DHCPv4 server/relay; Multicast PIM-SM/SSM, IGMPv2/v3; BFD & multihop BFD |
| Advanced SD-WAN | Path quality measurement (jitter, loss, latency; bandwidth monitoring; manual/IKEv1*/IKEv2 key exchange; post-quantum PPK; Multi-VR/LR over overlay; Prisma Access Hub; ADEM support |
| IPv6 | Inspection in L2/L3/tap/virtual wire; dual-stack & IPv6-only; IPv6 geolocation, OSPFv3, MP-BGP, NAT64, NPTv6; DHCPv6 client with PD; SLAAC server |
| IPsec VPN | Manual, IKEv1*/IKEv2 (PSK & cert; Encryption 3DES, AES-128/192/256; Auth MD5, SHA-1/256/384/512; GlobalProtect Large Scale VPN; secure access over IPsec/SSL via GP gateways/portals† |
| VLANs / LAG | 802.1Q VLAN tags per device/interface: 4,094 / 4,094; 802.3ad aggregate interfaces & LACP |
| NAT | Static, dynamic IP, dynamic IP and port (PAT; NAT64, NPTv6; dynamic IP reservation & tunable oversubscription |
| High Availability & Clustering | NGFW clustering (active/active and HA active/passive‡; dual-active data plane with single control plane; MC-LAG support |
| Post-Quantum Crypto | PQC-ready; PQC SSL/TLS decryption, PQC VPN, Cipher Translation Proxy; supports ML-KEM, ML-DSA, SLH-DSA and experimental PQCs; PCIe slot for future PQ capabilities |
| Decryption & Visibility | Policy-based SSL/TLS inspection (SSLv3, TLS 1.1/1.2/1.3; classical & PQ key exchanges (RSA, ECDHE, DHE; ML-KEM, HQC with metrics and controls |
| App-ID & ML | Full L7 identification and control; optional App-ID Cloud Engine; AI-enhanced recognition |
| Packet Processing | Single-pass architecture for predictable performance with security subscriptions |
| Management | Strata Cloud Manager for unified management, AI-assisted operations, and best-practice recommendations |
[/specifications]
[accesories]
| Included | 4× PAN-PA-5500-PWR-2700-AC; 5× PAN-PA-FAN-2RU-A; 1× PAN-PA-5500-ACC-A accessory kit; 1× PAN-PA-3RU-RACK-A; 2× PAN-SFP-CG |
| Optional – Spares | PAN-PA-5500-SSD-3.84TB-PAIR (spare; PAN-PA-5500-ACC-A (spare kit: includes 4× PAN-PWR-C19-US-120V cable, 1× USB cable, 1× Cat6 cable; PAN-PA-5500-ACC-B (spare kit: includes 4× PAN-PWR-DC-CBL-C, 1× USB cable, 1× Cat6 cable |
[/accesories]
The Palo Alto Networks PA-5570 delivers data center–grade protection without sacrificing performance. Built on single-pass architecture and powered by Precision AI, it inspects traffic at Layer 7 while maintaining predictable throughput for demanding east–west and internet edge workloads.
The PA-5570 brings high throughput, advanced visibility, and resilient operations to enterprise cores and service provider edges.
Process networking, policy lookup, application decoding, and content inspection in a single pass to reduce latency and keep performance consistent—even with full security services enabled. The PA-5570 is rated for 300 Gbps firewall throughput and 240 Gbps Threat Prevention throughput (AppMix.
Move toward quantum-safe operations with PAN-OS 12.1 support for PQC SSL/TLS decryption and PQC site-to-site VPN using NIST algorithms like ML-KEM and ML-DSA, plus additional experimental schemes. A PCIe slot is provided for future PQ capabilities.
Achieve horizontal scale and high resilience via NGFW clustering (active/active data plane and traditional HA. Clustering optimizes resources while maintaining a highly available posture for mission-critical networks.
App-ID and full Layer 7 inspection accurately identify applications on any port or encryption method; User-ID and identity integrations enforce consistent, least-privilege policies across users and locations.
Administer policies and operations through Strata Cloud Manager and Strata Copilot to detect anomalies, optimize policy sets, and proactively resolve issues across NGFW, SASE, and security services.
Upgrade to the PA-5570 for quantum-ready, AI-driven protection at true data-center speeds.
Ships within 48 hours · Estimated delivery Jul 19 - Jul 24
US$40
Get nowSign up to your membership to get coupons up to
15%
Get nowOpportunity to enjoy order discount up to 15% off
Top-Converting Item to Boost Your Average Order