Feature | PA-7080 | PA-7050 | PA-7000-20GQXM-NPC | PA-7000-20GXM-NPC | PA-7000-20GQ-NPC | PA-7000-20G-NPC | PAN-PA-7000-100G-NPC-A | PA-5280 | PA-5260 | PA-5250 |
---|---|---|---|---|---|---|---|---|---|---|

Performance* | ||||||||||

App-ID firewall throughput | 720 Gbps | 430 Gbps | 20 Gbps | 20 Gbps | 20 Gbps | 20 Gbps | 72 Gbps | 67 Gbps | 67 Gbps | 40 Gbps |

Threat prevention throughput | 350 Gbps | 210 Gbps | 12 Gbps | 12 Gbps | 12 Gbps | 12 Gbps | 35 Gbps | 33 Gbps | 33 Gbps | 23 Gbps |

IPSec VPN throughput | 240 Gbps | 144 Gbps | 8 Gbps | 8 Gbps | 8 Gbps | 8 Gbps | 24 Gbps | 24 Gbps | 24 Gbps | 16 Gbps |

Connections per second | 4,800,000 | 2,900,000 | 100,000 | 100,000 | 100,000 | 100,000 | 480,000 | 390,000 | 390,000 | 284,000 |

Sessions | ||||||||||

Max sessions (IPv4 or IPv6) | 80M/320M** Maximum sessions supported with high capacity NPC cards | 48M/192M** Maximum sessions supported with high capacity NPC cards | 8,000,000 | 8,000,000 | 3,200,000 | 3,200,000 | 32,000,000 | 64,000,000 | 32,000,000 | 8,000,000 |

Policies | ||||||||||

Security rules | 65,000 | 65,000 | 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,000 | 65,000 | 65,000 | ||

Security rule schedules | 256 | 256 | 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256 | 256 | 256 | ||

NAT rules | 16,000 | 16,000 | 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 16,000 | 16,000 | 8,000 | ||

Decryption rules | 5,000 | 5,000 | 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,000 | 5,000 | 5,000 | ||

App override rules | 4,000 | 4,000 | 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,000 | 4,000 | 4,000 | ||

Tunnel content inspection rules | 8,500 | 8,500 | 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,500 | 8,500 | 8,500 | ||

Policy based forwarding rules | 2,000 | 2,000 | 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000 | 2,000 | 2,000 | ||

Captive portal rules | 8,000 | 8,000 | 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,000 | 8,000 | 8,000 | ||

DoS protection rules | 2,000 | 2,000 | 2,000 | 2,000 | 2,000 | |||||

Security Zones | ||||||||||

Max security zones | 17,000 | 17,000 | 17,000 | 17,000 | 17,000 | |||||

Objects (addresses and services) | ||||||||||

Address objects | 160,000 | 160,000 | 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 160,000 | 160,000 | 160,000 | ||

Address groups | 80,000 | 80,000 | 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 80,000 | 80,000 | 80,000 | ||

Members per address group | 2,500 | 2,500 | 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,500 | 2,500 | 2,500 | ||

Service objects | 12,000 | 12,000 | 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 12,000 | 12,000 | 12,000 | ||

Service groups | 6,000 | 6,000 | 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,000 | 6,000 | 6,000 | ||

Members per service group | 2,500 | 2,500 | 2,500 | 2,500 | 2,500 | |||||

FQDN address objects | 6,144 | 6,144 | 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,144 | 6,144 | 6,144 | ||

Max DAG IP addresses** System wide capacity | 100000/500000** Capacity based on SMC model capacity | 100000/500000** Capacity based on SMC model capacity | 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500,000 | 500,000 | 500,000 | |

Tags per IP address | 64 | 64 | 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64 | 64 | 64 | ||

Security Profiles | ||||||||||

Security profiles | 750 | 750 | 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 750 | 750 | 750 | ||

App-ID | ||||||||||

Custom App-ID signatures | 6,000 | 6,000 | 6,000 | 6,000 | 6,000 | |||||

Shared custom App-IDs | 512 | 512 | 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512 | 512 | 512 | ||

Custom App-IDs (virtual system specific) | 6,416 | 6,416 | 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,416 | 6,416 | 6,416 | ||

User-ID | ||||||||||

User-IP mappings (management plane) | 524,288 | 524,288 | 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 524,288 | 512,000 | 512,000 | 512,000 | |

User-IP mappings (data plane) | 512,000 | 512,000 | 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512,000 | 512,000 | 512,000 | ||

Active and unique groups used in policy | 10,000 | 10,000 | 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 10,000 | 10,000 | 10,000 | ||

Number of User-ID agents | 100 | 100 | 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100 | 100 | 100 | 100 | |

Monitored servers for User-ID | 100 | 100 | 100 | 100 | 100 | |||||

Terminal server agents | 2,000/2,500** Capacity based on SMC model capacity | 2,000/2,500** Capacity based on SMC model capacity | 2,500 | 2,500 | 2,500 | |||||

SSL Decryption | ||||||||||

Max SSL inbound certificates | 4,000 | 4,000 | 2,000 | 2,000 | 1,200 | |||||

SSL certificate cache (forward proxy) | 8,192/32,000** Maximum cache entries supported with high capacity NPC cards | 8,192/32,000** Maximum cache entries supported with high capacity NPC cards | 8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,000 | 32,000 | 24,000 |

Max concurrent decryption sessions | 1,310,720/32M** Maximum sessions supported with high capacity NPC cards | 786,432/19.2M** Maximum sessions supported with high capacity NPC cards | 131,072 | 131,072 | 104,800 | 104,800 | 3.2M | 6,400,000 | 3,200,000 | 800,000 |

SSL Port Mirror | Yes | Yes | NA | NA | NA | NA | NA | Yes | Yes | Yes |

SSL Decryption Broker | Yes | Yes | NA | NA | NA | NA | NA | Yes | Yes | Yes |

HSM Supported | Yes | Yes | NA | NA | NA | NA | NA | Yes | Yes | Yes |

URL Filtering | ||||||||||

Total entries for allow list, block list and custom categories | 100,000 | 100,000 | 100,000 | 100,000 | 100,000 | |||||

Max custom categories | 2,849 | 2,849 | 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,849 | 2,849 | 2,849 | ||

Max custom categories (virtual system specific) | 500 | 500 | 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500 | 500 | 500 | ||

Dataplane cache size for URL filtering | 250,000 | 250,000 | 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 250,000 | 250,000 | 250,000 | 250,000 | |

Management plane dynamic cache size | 900,000 | 900,000 | 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 900,000 | 900,000 | 900,000 | 600,000 | |

EDL | ||||||||||

Max number of custom lists | 30 | 30 | 30 | 30 | 30 | 30 | 30 | 30 | 30 | 30 |

Max number of IPs per system | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 |

Max number of DNS Domains per system | 500,000 | 500,000 | 4,000,000 | 4,000,000 | 500,000 | 500,000 | 4,000,000 | 4,000,000 | 4,000,000 | 4,000,000 |

Max number of URL per system | 100,000 | 100,000 | 250,000 | 250,000 | 100,000 | 100,000 | 250,000 | 250,000 | 250,000 | 250,000 |

Shortest check interval (min) | 5 | 5 | 5 | 5 | 5 | 5 | 5 | 5 | 5 | 5 |

Interfaces | ||||||||||

Mgmt – out-of-band | 10/100/1000, RJ45 console | 10/100/1000, RJ45 console | NA | NA | NA | NA | NA | 10/100/1000, RJ45 console | 10/100/1000, RJ45 console | 10/100/1000, RJ45 console |

Mgmt – 10/100/1000 high availability | 2 | 2 | NA | NA | NA | NA | NA | NA | NA | NA |

Mgmt – 40Gbps high availability | 2 | 2 | NA | NA | NA | NA | NA | 1 | 1 | 1 |

Mgmt – 10Gbps high availability | NA | NA | NA | NA | NA | NA | NA | NA | NA | NA |

Traffic – 10/100/1000 | 120 | 72 | NA | 12 | NA | 12 | NA | NA | NA | NA |

Traffic – 100/1000/10000 | NA | NA | NA | NA | NA | NA | NA | 4 | 4 | 4 |

Traffic – 1Gbps SFP | 80 | 48 | NA | 8 | NA | 8 | 0/8 | 0/16 | 0/16 | 0/16 |

Traffic – 10Gbps SFP+ | 120 | 72 | 12 | 4 | 12 | 4 | 0/8 | 0/16 | 0/16 | 0/16 |

Traffic – 40Gbps QSFP | 20 | 12 | 2 | NA | 2 | NA | 4×40/100 | 4×40/100 | 4×40/100 | 4×40/100 |

802.1q tags per device | 4,094 | 4,094 | 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,094 | 4,094 | 4,094 | ||

802.1q tags per physical interface | 4,094 | 4,094 | 4,094 | 4,094 | 4,094 | |||||

Max interfaces (logical and physical) | 4,096/5,120** Capacity based on SMC model capacity | 4,096/5,120** Capacity based on SMC model capacity | 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,120** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,120 | 5,120 | 4,096 | |

Maximum aggregate interfaces | 8 | 8 | 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | N/A | 8 | 8 | ||

Virtual Routers | ||||||||||

Virtual routers | 225 | 225 | 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 225 | 225 | 125 | ||

Virtual Wires | ||||||||||

Virtual wires | 2,048/2,560** Capacity based on SMC model capacity | 2,048/2,560** Capacity based on SMC model capacity | 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,560** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,048 | 2,048 | 2,048 | |||

Virtual Systems | ||||||||||

Base virtual systems | 25 | 25 | 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 25 | 25 | 25 | ||

Max virtual systems** Additional licenses are required for virtual system capacities above the base virtual systems capacity | 225 | 225 | 225 | 225 | 125 | |||||

Routing | ||||||||||

IPv4 forwarding table size** Entries shared across virtual routers | 32,768/228,000** Capacity based on SMC model capacity | 32,768/228,000** Capacity based on SMC model capacity | 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,768/228,000** Capacity based on SMC model capacity | 100,000 | 100,000 | 100,000 | ||

IPv6 forwarding table size** Entries shared across virtual routers | 32,768/228,000** Capacity based on SMC model capacity | 32,768/228,000** Capacity based on SMC model capacity | 32,768/228,000** Capacity based on SMC model capacity | 100,000 | 100,000 | 100,000 | ||||

System total forwarding table size | 65,536/456,000** Capacity based on SMC model capacity | 65,536/456,000** Capacity based on SMC model capacity | 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,536/456,000** Capacity based on SMC model capacity | 200,000 | 200,000 | 200,000 | |

Max route maps per virtual router | 50 | 50 | 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 50 | 50 | 50 | ||

Max routing peers (protocol dependent) | 500/1,000** Capacity based on SMC model capacity | 500/1,000** Capacity based on SMC model capacity | 1,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,000 | 1,000 | 1,000 | ||||

Static entries – DNS proxy | 1,024 | 1,024 | 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,024 | 1,024 | 1,024 | ||

Bidirectional Forwarding Detection (BFD) Sessions | 1,024 | 1,024 | 1,024 | 1,024 | 1,024 | |||||

L2 Forwarding | ||||||||||

ARP table size per device | 32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 128,000 | 128,000 | 128,000 | ||||

IPv6 neighbor table size | 32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 128,000 | 128,000 | 128,000 | ||||

MAC table size per device | 32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 128,000 | 128,000 | 128,000 | ||||

Max ARP entries per broadcast domain | 32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 128,000 | 128,000 | 128,000 | |||||

Max MAC entries per broadcast domain | 32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 128,000 | 128,000 | 128,000 | |||||

NAT | ||||||||||

Total NAT rule capacity | 16,000 | 16,000 | 16,000 | 16,000 | 8,000 | |||||

Max NAT rules (static)** Configuring static NAT rules to full capacity requires that no other NAT rule types are used. | 16,000 | 16,000 | 16,000 | 16,000 | 8,000 | |||||

Max NAT rules (DIP)** Configuring DIP NAT rules to full capacity requires that no other NAT rule types are used. | 16,000 | 16,000 | 16,000 | 16,000 | 8,000 | |||||

Max NAT rules (DIPP) | 4,000 | 4,000 | 8,000 | 8,000 | 6,000 | |||||

Max translated IPs (DIP) | 320,000 | 320,000 | 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 320,000 | 320,000 | 160,000 | ||

Max translated IPs (DIPP)** DIPP translated IP capacity is proportional to the DIPP pool oversubscription value. The capacity shown here is based on an oversubscription value of 1x. | 4,000 | 4,000 | 8,000 | 8,000 | 6,000 | |||||

Default DIPP pool oversubscription** Source IP and source port reuse across concurrent sessions | 8 | 8 | 8 | 8 | 8 | |||||

Address Assignment | ||||||||||

DHCP servers | 225 | 225 | 500 | 500 | 500 | |||||

DHCP relays** Maximum capacity represents total DHCP servers and DHCP relays compbined | 4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | |||||

Max number of assigned addresses | 64,000 | 64,000 | 64,000 | 64,000 | 64,000 | |||||

High Availability | ||||||||||

Devices supported | 2 | 2 | NA | NA | NA | NA | NA | 2 | 2 | 2 |

Max virtual addresses | 1,024 | 1,024 | 4,096 | 4,096 | 4,096 | |||||

QoS | ||||||||||

Number of QoS policies | 8,000 | 8,000 | 4,000 | 4,000 | 4,000 | |||||

Physical interfaces supporting QoS | 32 | 32 | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12 | 12 | 12 |

Clear text nodes per physical interface | 63 | 63 | 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 63 | 63 | 63 | ||

DSCP marking by policy | Yes | Yes | Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | Yes | Yes | Yes | ||

Subinterfaces supported | 2,048 | 2,048 | 2,048 | 2,048 | 2,048 | |||||

IPSec VPN | ||||||||||

Site to site | 8000/12000** Standard memory NPC / XM or 100G NPC | 8,000/12000** Standard memory NPC / XM or 100G NPC | 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 15,000 | 15,000 | 12,000 | ||

Max IKE Peers | 4,000 | 4,000 | 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 5,000 | 5,000 | 4,000 | ||

GlobalProtect Client VPN | ||||||||||

Max tunnels (SSL, IPSec, and IKE with XAUTH) | 40000/60000** Capacity based on SMC model capacity | 40000/60000** Capacity based on SMC model capacity | 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 40,000/60000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 60,000 | 60,000 | 30,000 | |

GlobalProtect Clientless VPN | ||||||||||

Max SSL tunnels | 10000/25000** Capacity based on SMC model capacity | 10000/25000** Capacity based on SMC model capacity | 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 10,000 | 10,000 | 5,000 | ||

Multicast | ||||||||||

Replication (egress interfaces) | 100/2000** Standard memory NPC / XM or 100G NPC | 100/2000** Standard memory NPC / XM or 100G NPC | 100/2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000 | 2,000 | 2,000 | ||||

Routes | 4,000 | 4,000 | 4,000 | 4,000 | 4,000 | |||||

Product Notes | ||||||||||

NA | NA | NA | NA | Yes | Yes | NA | NA | NA | NA |