paloalto product

Palo Alto Networks
 
FeaturePA-7080PA-7050PA-7000-20GQXM-NPCPA-7000-20GXM-NPCPA-7000-20GQ-NPCPA-7000-20G-NPCPAN-PA-7000-100G-NPC-APA-5280PA-5260PA-5250
Performance*
App-ID firewall throughput720 Gbps430 Gbps20 Gbps20 Gbps20 Gbps20 Gbps72 Gbps67 Gbps67 Gbps40 Gbps
Threat prevention throughput350 Gbps210 Gbps12 Gbps12 Gbps12 Gbps12 Gbps35 Gbps33 Gbps33 Gbps23 Gbps
IPSec VPN throughput240 Gbps144 Gbps8 Gbps8 Gbps8 Gbps8 Gbps24 Gbps24 Gbps24 Gbps16 Gbps
Connections per second4,800,0002,900,000100,000100,000100,000100,000480,000390,000390,000284,000
Sessions
Max sessions (IPv4 or IPv6)80M/320M** Maximum sessions supported with high capacity NPC cards48M/192M** Maximum sessions supported with high capacity NPC cards8,000,0008,000,0003,200,0003,200,00032,000,00064,000,00032,000,0008,000,000
Policies
Security rules65,00065,00065,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis65,00065,00065,000
Security rule schedules256256256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256256256
NAT rules16,00016,00016,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,00016,0008,000
Decryption rules5,0005,0005,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis5,0005,0005,000
App override rules4,0004,0004,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,0004,0004,000
Tunnel content inspection rules8,5008,5008,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,5008,5008,500
Policy based forwarding rules2,0002,0002,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,0002,0002,000
Captive portal rules8,0008,0008,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,0008,0008,000
DoS protection rules2,0002,0002,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,0002,0002,000
Security Zones
Max security zones17,00017,0004,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis17,00017,00017,000
Objects (addresses and services)
Address objects160,000160,000160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis160,000160,000160,000
Address groups80,00080,00080,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis80,00080,00080,000
Members per address group2,5002,5002,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,5002,5002,500
Service objects12,00012,00012,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis12,00012,00012,000
Service groups6,0006,0006,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,0006,0006,000
Members per service group2,5002,5002,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,5002,5002,500
FQDN address objects6,1446,1446,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,1446,1446,144
Max DAG IP addresses** System wide capacity100000/500000** Capacity based on SMC model capacity100000/500000** Capacity based on SMC model capacity100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500,000500,000500,000
Tags per IP address646464** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis646464
Security Profiles
Security profiles750750750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis750750750
App-ID
Custom App-ID signatures6,0006,0006,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,0006,0006,000
Shared custom App-IDs512512512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512512512
Custom App-IDs (virtual system specific)6,4166,4166,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis6,4166,4166,416
User-ID
User-IP mappings (management plane)524,288524,288512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis524,288512,000512,000512,000
User-IP mappings (data plane)512,000512,000256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis512,000512,000512,000
Active and unique groups used in policy10,00010,00010,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis10,00010,00010,000
Number of User-ID agents100100100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100100100100
Monitored servers for User-ID100100100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100100100
Terminal server agents2,000/2,500** Capacity based on SMC model capacity2,000/2,500** Capacity based on SMC model capacity2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,5002,5002,500
SSL Decryption
Max SSL inbound certificates4,0004,0004,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,0002,0001,200
SSL certificate cache (forward proxy)8,192/32,000** Maximum cache entries supported with high capacity NPC cards8,192/32,000** Maximum cache entries supported with high capacity NPC cards8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,00032,00024,000
Max concurrent decryption sessions1,310,720/32M** Maximum sessions supported with high capacity NPC cards786,432/19.2M** Maximum sessions supported with high capacity NPC cards131,072131,072104,800104,8003.2M6,400,0003,200,000800,000
SSL Port MirrorYesYesNANANANANAYesYesYes
SSL Decryption BrokerYesYesNANANANANAYesYesYes
HSM SupportedYesYesNANANANANAYesYesYes
URL Filtering
Total entries for allow list, block list and custom categories100,000100,000100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100,000100,000100,000
Max custom categories2,8492,8492,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,8492,8492,849
Max custom categories (virtual system specific)500500500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500500500
Dataplane cache size for URL filtering250,000250,000250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis250,000250,000250,000250,000
Management plane dynamic cache size900,000900,000900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis900,000900,000900,000600,000
EDL
Max number of custom lists30303030303030303030
Max number of IPs per system150,000150,000150,000150,000150,000150,000150,000150,000150,000150,000
Max number of DNS Domains per system500,000500,0004,000,0004,000,000500,000500,0004,000,0004,000,0004,000,0004,000,000
Max number of URL per system100,000100,000250,000250,000100,000100,000250,000250,000250,000250,000
Shortest check interval (min)5555555555
Interfaces
Mgmt – out-of-band10/100/1000, RJ45 console10/100/1000, RJ45 consoleNANANANANA10/100/1000, RJ45 console10/100/1000, RJ45 console10/100/1000, RJ45 console
Mgmt – 10/100/1000 high availability22NANANANANANANANA
Mgmt – 40Gbps high availability22NANANANANA111
Mgmt – 10Gbps high availabilityNANANANANANANANANANA
Traffic – 10/100/100012072NA12NA12NANANANA
Traffic – 100/1000/10000NANANANANANANA444
Traffic – 1Gbps SFP8048NA8NA80/80/160/160/16
Traffic – 10Gbps SFP+120721241240/80/160/160/16
Traffic – 40Gbps QSFP20122NA2NA4×40/1004×40/1004×40/1004×40/100
802.1q tags per device4,0944,0944,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,0944,0944,094
802.1q tags per physical interface4,0944,0944,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,0944,0944,094
Max interfaces (logical and physical)4,096/5,120** Capacity based on SMC model capacity4,096/5,120** Capacity based on SMC model capacity4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis5,120** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis5,1205,1204,096
Maximum aggregate interfaces888** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassisN/A88
Virtual Routers
Virtual routers225225225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225225125
Virtual Wires
Virtual wires2,048/2,560** Capacity based on SMC model capacity2,048/2,560** Capacity based on SMC model capacity2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,560** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,0482,0482,048
Virtual Systems
Base virtual systems252525** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis252525
Max virtual systems** Additional licenses are required for virtual system capacities above the base virtual systems capacity225225225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225225125
Routing
IPv4 forwarding table size** Entries shared across virtual routers32,768/228,000** Capacity based on SMC model capacity32,768/228,000** Capacity based on SMC model capacity32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,768/228,000** Capacity based on SMC model capacity100,000100,000100,000
IPv6 forwarding table size** Entries shared across virtual routers32,768/228,000** Capacity based on SMC model capacity32,768/228,000** Capacity based on SMC model capacity32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,768/228,000** Capacity based on SMC model capacity100,000100,000100,000
System total forwarding table size65,536/456,000** Capacity based on SMC model capacity65,536/456,000** Capacity based on SMC model capacity64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis65,536/456,000** Capacity based on SMC model capacity200,000200,000200,000
Max route maps per virtual router505050** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis505050
Max routing peers (protocol dependent)500/1,000** Capacity based on SMC model capacity500/1,000** Capacity based on SMC model capacity500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,0001,0001,000
Static entries – DNS proxy1,0241,0241,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,0241,0241,024
Bidirectional Forwarding Detection (BFD) Sessions1,0241,0241,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,0241,0241,024
L2 Forwarding
ARP table size per device32,000/132,000** Capacity based on SMC model capacity32,000/132,000** Capacity based on SMC model capacity32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis128,000128,000128,000
IPv6 neighbor table size32,000/132,000** Capacity based on SMC model capacity32,000/132,000** Capacity based on SMC model capacity32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis128,000128,000128,000
MAC table size per device32,000/132,000** Capacity based on SMC model capacity32,000/132,000** Capacity based on SMC model capacity32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis128,000128,000128,000
Max ARP entries per broadcast domain32,000/132,000** Capacity based on SMC model capacity32,000/132,000** Capacity based on SMC model capacity32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis128,000128,000128,000
Max MAC entries per broadcast domain32,000/132,000** Capacity based on SMC model capacity32,000/132,000** Capacity based on SMC model capacity32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis128,000128,000128,000
NAT
Total NAT rule capacity16,00016,00016,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,00016,0008,000
Max NAT rules (static)** Configuring static NAT rules to full capacity requires that no other NAT rule types are used.16,00016,00016,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,00016,0008,000
Max NAT rules (DIP)** Configuring DIP NAT rules to full capacity requires that no other NAT rule types are used.16,00016,00016,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis16,00016,0008,000
Max NAT rules (DIPP)4,0004,0004,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,0008,0006,000
Max translated IPs (DIP)320,000320,000320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis320,000320,000160,000
Max translated IPs (DIPP)** DIPP translated IP capacity is proportional to the DIPP pool oversubscription value. The capacity shown here is based on an oversubscription value of 1x.4,0004,0004,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,0008,0006,000
Default DIPP pool oversubscription** Source IP and source port reuse across concurrent sessions888** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis888
Address Assignment
DHCP servers225225500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis500500500
DHCP relays** Maximum capacity represents total DHCP servers and DHCP relays compbined4,096** Total includes number of DHCP servers and DHCP relays4,096** Total includes number of DHCP servers and DHCP relays4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,096** Total includes number of DHCP servers and DHCP relays4,096** Total includes number of DHCP servers and DHCP relays4,096** Total includes number of DHCP servers and DHCP relays
Max number of assigned addresses64,00064,00064,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis64,00064,00064,000
High Availability
Devices supported22NANANANANA222
Max virtual addresses1,0241,0241,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,0964,0964,096
QoS
Number of QoS policies8,0008,0008,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,0004,0004,000
Physical interfaces supporting QoS323212** Limited by the capacity enforced per PA-7000 Series chassis12** Limited by the capacity enforced per PA-7000 Series chassis12** Limited by the capacity enforced per PA-7000 Series chassis12** Limited by the capacity enforced per PA-7000 Series chassis12** Limited by the capacity enforced per PA-7000 Series chassis121212
Clear text nodes per physical interface636363** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis636363
DSCP marking by policyYesYesYes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassisYes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassisYes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassisYes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassisYes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassisYesYesYes
Subinterfaces supported2,0482,0482,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,0482,0482,048
IPSec VPN
Site to site8000/12000** Standard memory NPC / XM or 100G NPC8,000/12000** Standard memory NPC / XM or 100G NPC12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis15,00015,00012,000
Max IKE Peers4,0004,0004,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis5,0005,0004,000
GlobalProtect Client VPN
Max tunnels (SSL, IPSec, and IKE with XAUTH)40000/60000** Capacity based on SMC model capacity40000/60000** Capacity based on SMC model capacity40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis40,000/60000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis60,00060,00030,000
GlobalProtect Clientless VPN
Max SSL tunnels10000/25000** Capacity based on SMC model capacity10000/25000** Capacity based on SMC model capacity25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis10,00010,0005,000
Multicast
Replication (egress interfaces)100/2000** Standard memory NPC / XM or 100G NPC100/2000** Standard memory NPC / XM or 100G NPC100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis100/2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis2,0002,0002,000
Routes4,0004,0004,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis4,0004,0004,000
Product Notes
NANANANAYesYesNANANANA
[/vc_column_text][/vc_column][/vc_row]