Feature | PA-7080 | PA-7050 | PA-7000-20GQXM-NPC | PA-7000-20GXM-NPC | PA-7000-20GQ-NPC | PA-7000-20G-NPC | PAN-PA-7000-100G-NPC-A | PA-5280 | PA-5260 | PA-5250 |
---|---|---|---|---|---|---|---|---|---|---|

Performance* | ||||||||||

App-ID firewall throughput |
720 Gbps | 430 Gbps | 20 Gbps | 20 Gbps | 20 Gbps | 20 Gbps | 72 Gbps | 67 Gbps | 67 Gbps | 40 Gbps |

Threat prevention throughput |
350 Gbps | 210 Gbps | 12 Gbps | 12 Gbps | 12 Gbps | 12 Gbps | 35 Gbps | 33 Gbps | 33 Gbps | 23 Gbps |

IPSec VPN throughput |
240 Gbps | 144 Gbps | 8 Gbps | 8 Gbps | 8 Gbps | 8 Gbps | 24 Gbps | 24 Gbps | 24 Gbps | 16 Gbps |

Connections per second |
4,800,000 | 2,900,000 | 100,000 | 100,000 | 100,000 | 100,000 | 480,000 | 390,000 | 390,000 | 284,000 |

Sessions | ||||||||||

Max sessions (IPv4 or IPv6) |
80M/320M** Maximum sessions supported with high capacity NPC cards | 48M/192M** Maximum sessions supported with high capacity NPC cards | 8,000,000 | 8,000,000 | 3,200,000 | 3,200,000 | 32,000,000 | 64,000,000 | 32,000,000 | 8,000,000 |

Policies | ||||||||||

Security rules |
65,000 | 65,000 | 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,000 | 65,000 | 65,000 | ||

Security rule schedules |
256 | 256 | 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256 | 256 | 256 | ||

NAT rules |
16,000 | 16,000 | 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 16,000 | 16,000 | 8,000 | ||

Decryption rules |
5,000 | 5,000 | 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,000 | 5,000 | 5,000 | ||

App override rules |
4,000 | 4,000 | 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,000 | 4,000 | 4,000 | ||

Tunnel content inspection rules |
8,500 | 8,500 | 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,500 | 8,500 | 8,500 | ||

Policy based forwarding rules |
2,000 | 2,000 | 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000 | 2,000 | 2,000 | ||

Captive portal rules |
8,000 | 8,000 | 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,000 | 8,000 | 8,000 | ||

DoS protection rules |
2,000 | 2,000 | 2,000 | 2,000 | 2,000 | |||||

Security Zones | ||||||||||

Max security zones |
17,000 | 17,000 | 17,000 | 17,000 | 17,000 | |||||

Objects (addresses and services) | ||||||||||

Address objects |
160,000 | 160,000 | 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 160,000 | 160,000 | 160,000 | ||

Address groups |
80,000 | 80,000 | 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 80,000 | 80,000 | 80,000 | ||

Members per address group |
2,500 | 2,500 | 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,500 | 2,500 | 2,500 | ||

Service objects |
12,000 | 12,000 | 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 12,000 | 12,000 | 12,000 | ||

Service groups |
6,000 | 6,000 | 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,000 | 6,000 | 6,000 | ||

Members per service group |
2,500 | 2,500 | 2,500 | 2,500 | 2,500 | |||||

FQDN address objects |
6,144 | 6,144 | 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,144 | 6,144 | 6,144 | ||

Max DAG IP addresses** System wide capacity |
100000/500000** Capacity based on SMC model capacity | 100000/500000** Capacity based on SMC model capacity | 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500,000 | 500,000 | 500,000 | |

Tags per IP address |
64 | 64 | 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64 | 64 | 64 | ||

Security Profiles | ||||||||||

Security profiles |
750 | 750 | 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 750 | 750 | 750 | ||

App-ID | ||||||||||

Custom App-ID signatures |
6,000 | 6,000 | 6,000 | 6,000 | 6,000 | |||||

Shared custom App-IDs |
512 | 512 | 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512 | 512 | 512 | ||

Custom App-IDs (virtual system specific) |
6,416 | 6,416 | 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 6,416 | 6,416 | 6,416 | ||

User-ID | ||||||||||

User-IP mappings (management plane) |
524,288 | 524,288 | 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 524,288 | 512,000 | 512,000 | 512,000 | |

User-IP mappings (data plane) |
512,000 | 512,000 | 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 512,000 | 512,000 | 512,000 | ||

Active and unique groups used in policy |
10,000 | 10,000 | 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 10,000 | 10,000 | 10,000 | ||

Number of User-ID agents |
100 | 100 | 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 100 | 100 | 100 | 100 | |

Monitored servers for User-ID |
100 | 100 | 100 | 100 | 100 | |||||

Terminal server agents |
2,000/2,500** Capacity based on SMC model capacity | 2,000/2,500** Capacity based on SMC model capacity | 2,500 | 2,500 | 2,500 | |||||

SSL Decryption | ||||||||||

Max SSL inbound certificates |
4,000 | 4,000 | 2,000 | 2,000 | 1,200 | |||||

SSL certificate cache (forward proxy) |
8,192/32,000** Maximum cache entries supported with high capacity NPC cards | 8,192/32,000** Maximum cache entries supported with high capacity NPC cards | 8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,000 | 32,000 | 24,000 |

Max concurrent decryption sessions |
1,310,720/32M** Maximum sessions supported with high capacity NPC cards | 786,432/19.2M** Maximum sessions supported with high capacity NPC cards | 131,072 | 131,072 | 104,800 | 104,800 | 3.2M | 6,400,000 | 3,200,000 | 800,000 |

SSL Port Mirror |
Yes | Yes | NA | NA | NA | NA | NA | Yes | Yes | Yes |

SSL Decryption Broker |
Yes | Yes | NA | NA | NA | NA | NA | Yes | Yes | Yes |

HSM Supported |
Yes | Yes | NA | NA | NA | NA | NA | Yes | Yes | Yes |

URL Filtering | ||||||||||

Total entries for allow list, block list and custom categories |
100,000 | 100,000 | 100,000 | 100,000 | 100,000 | |||||

Max custom categories |
2,849 | 2,849 | 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,849 | 2,849 | 2,849 | ||

Max custom categories (virtual system specific) |
500 | 500 | 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 500 | 500 | 500 | ||

Dataplane cache size for URL filtering |
250,000 | 250,000 | 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 250,000 | 250,000 | 250,000 | 250,000 | |

Management plane dynamic cache size |
900,000 | 900,000 | 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 900,000 | 900,000 | 900,000 | 600,000 | |

EDL | ||||||||||

Max number of custom lists |
30 | 30 | 30 | 30 | 30 | 30 | 30 | 30 | 30 | 30 |

Max number of IPs per system |
150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 | 150,000 |

Max number of DNS Domains per system |
500,000 | 500,000 | 4,000,000 | 4,000,000 | 500,000 | 500,000 | 4,000,000 | 4,000,000 | 4,000,000 | 4,000,000 |

Max number of URL per system |
100,000 | 100,000 | 250,000 | 250,000 | 100,000 | 100,000 | 250,000 | 250,000 | 250,000 | 250,000 |

Shortest check interval (min) |
5 | 5 | 5 | 5 | 5 | 5 | 5 | 5 | 5 | 5 |

Interfaces | ||||||||||

Mgmt – out-of-band |
10/100/1000, RJ45 console | 10/100/1000, RJ45 console | NA | NA | NA | NA | NA | 10/100/1000, RJ45 console | 10/100/1000, RJ45 console | 10/100/1000, RJ45 console |

Mgmt – 10/100/1000 high availability |
2 | 2 | NA | NA | NA | NA | NA | NA | NA | NA |

Mgmt – 40Gbps high availability |
2 | 2 | NA | NA | NA | NA | NA | 1 | 1 | 1 |

Mgmt – 10Gbps high availability |
NA | NA | NA | NA | NA | NA | NA | NA | NA | NA |

Traffic – 10/100/1000 |
120 | 72 | NA | 12 | NA | 12 | NA | NA | NA | NA |

Traffic – 100/1000/10000 |
NA | NA | NA | NA | NA | NA | NA | 4 | 4 | 4 |

Traffic – 1Gbps SFP |
80 | 48 | NA | 8 | NA | 8 | 0/8 | 0/16 | 0/16 | 0/16 |

Traffic – 10Gbps SFP+ |
120 | 72 | 12 | 4 | 12 | 4 | 0/8 | 0/16 | 0/16 | 0/16 |

Traffic – 40Gbps QSFP |
20 | 12 | 2 | NA | 2 | NA | 4×40/100 | 4×40/100 | 4×40/100 | 4×40/100 |

802.1q tags per device |
4,094 | 4,094 | 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,094 | 4,094 | 4,094 | ||

802.1q tags per physical interface |
4,094 | 4,094 | 4,094 | 4,094 | 4,094 | |||||

Max interfaces (logical and physical) |
4,096/5,120** Capacity based on SMC model capacity | 4,096/5,120** Capacity based on SMC model capacity | 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,120** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 5,120 | 5,120 | 4,096 | |

Maximum aggregate interfaces |
8 | 8 | 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | N/A | 8 | 8 | ||

Virtual Routers | ||||||||||

Virtual routers |
225 | 225 | 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 225 | 225 | 125 | ||

Virtual Wires | ||||||||||

Virtual wires |
2,048/2,560** Capacity based on SMC model capacity | 2,048/2,560** Capacity based on SMC model capacity | 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,560** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,048 | 2,048 | 2,048 | |||

Virtual Systems | ||||||||||

Base virtual systems |
25 | 25 | 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 25 | 25 | 25 | ||

Max virtual systems** Additional licenses are required for virtual system capacities above the base virtual systems capacity |
225 | 225 | 225 | 225 | 125 | |||||

Routing | ||||||||||

IPv4 forwarding table size** Entries shared across virtual routers |
32,768/228,000** Capacity based on SMC model capacity | 32,768/228,000** Capacity based on SMC model capacity | 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 32,768/228,000** Capacity based on SMC model capacity | 100,000 | 100,000 | 100,000 | ||

IPv6 forwarding table size** Entries shared across virtual routers |
32,768/228,000** Capacity based on SMC model capacity | 32,768/228,000** Capacity based on SMC model capacity | 32,768/228,000** Capacity based on SMC model capacity | 100,000 | 100,000 | 100,000 | ||||

System total forwarding table size |
65,536/456,000** Capacity based on SMC model capacity | 65,536/456,000** Capacity based on SMC model capacity | 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 65,536/456,000** Capacity based on SMC model capacity | 200,000 | 200,000 | 200,000 | |

Max route maps per virtual router |
50 | 50 | 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 50 | 50 | 50 | ||

Max routing peers (protocol dependent) |
500/1,000** Capacity based on SMC model capacity | 500/1,000** Capacity based on SMC model capacity | 1,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,000 | 1,000 | 1,000 | ||||

Static entries – DNS proxy |
1,024 | 1,024 | 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 1,024 | 1,024 | 1,024 | ||

Bidirectional Forwarding Detection (BFD) Sessions |
1,024 | 1,024 | 1,024 | 1,024 | 1,024 | |||||

L2 Forwarding | ||||||||||

ARP table size per device |
32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 128,000 | 128,000 | 128,000 | ||||

IPv6 neighbor table size |
32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 128,000 | 128,000 | 128,000 | ||||

MAC table size per device |
32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 128,000 | 128,000 | 128,000 | ||||

Max ARP entries per broadcast domain |
32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 128,000 | 128,000 | 128,000 | |||||

Max MAC entries per broadcast domain |
32,000/132,000** Capacity based on SMC model capacity | 32,000/132,000** Capacity based on SMC model capacity | 128,000 | 128,000 | 128,000 | |||||

NAT | ||||||||||

Total NAT rule capacity |
16,000 | 16,000 | 16,000 | 16,000 | 8,000 | |||||

Max NAT rules (static)** Configuring static NAT rules to full capacity requires that no other NAT rule types are used. |
16,000 | 16,000 | 16,000 | 16,000 | 8,000 | |||||

Max NAT rules (DIP)** Configuring DIP NAT rules to full capacity requires that no other NAT rule types are used. |
16,000 | 16,000 | 16,000 | 16,000 | 8,000 | |||||

Max NAT rules (DIPP) |
4,000 | 4,000 | 8,000 | 8,000 | 6,000 | |||||

Max translated IPs (DIP) |
320,000 | 320,000 | 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 320,000 | 320,000 | 160,000 | ||

Max translated IPs (DIPP)** DIPP translated IP capacity is proportional to the DIPP pool oversubscription value. The capacity shown here is based on an oversubscription value of 1x. |
4,000 | 4,000 | 8,000 | 8,000 | 6,000 | |||||

Default DIPP pool oversubscription** Source IP and source port reuse across concurrent sessions |
8 | 8 | 8 | 8 | 8 | |||||

Address Assignment | ||||||||||

DHCP servers |
225 | 225 | 500 | 500 | 500 | |||||

DHCP relays** Maximum capacity represents total DHCP servers and DHCP relays compbined |
4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | 4,096** Total includes number of DHCP servers and DHCP relays | |||||

Max number of assigned addresses |
64,000 | 64,000 | 64,000 | 64,000 | 64,000 | |||||

High Availability | ||||||||||

Devices supported |
2 | 2 | NA | NA | NA | NA | NA | 2 | 2 | 2 |

Max virtual addresses |
1,024 | 1,024 | 4,096 | 4,096 | 4,096 | |||||

QoS | ||||||||||

Number of QoS policies |
8,000 | 8,000 | 4,000 | 4,000 | 4,000 | |||||

Physical interfaces supporting QoS |
32 | 32 | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12** Limited by the capacity enforced per PA-7000 Series chassis | 12 | 12 | 12 |

Clear text nodes per physical interface |
63 | 63 | 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 63 | 63 | 63 | ||

DSCP marking by policy |
Yes | Yes | Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | Yes | Yes | Yes | ||

Subinterfaces supported |
2,048 | 2,048 | 2,048 | 2,048 | 2,048 | |||||

IPSec VPN | ||||||||||

Site to site |
8000/12000** Standard memory NPC / XM or 100G NPC | 8,000/12000** Standard memory NPC / XM or 100G NPC | 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 15,000 | 15,000 | 12,000 | ||

Max IKE Peers |
4,000 | 4,000 | 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 5,000 | 5,000 | 4,000 | ||

GlobalProtect Client VPN | ||||||||||

Max tunnels (SSL, IPSec, and IKE with XAUTH) |
40000/60000** Capacity based on SMC model capacity | 40000/60000** Capacity based on SMC model capacity | 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 40,000/60000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 60,000 | 60,000 | 30,000 | |

GlobalProtect Clientless VPN | ||||||||||

Max SSL tunnels |
10000/25000** Capacity based on SMC model capacity | 10000/25000** Capacity based on SMC model capacity | 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis | 10,000 | 10,000 | 5,000 | ||

Multicast | ||||||||||

Replication (egress interfaces) |
100/2000** Standard memory NPC / XM or 100G NPC | 100/2000** Standard memory NPC / XM or 100G NPC | 100/2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis | 2,000 | 2,000 | 2,000 | ||||

Routes |
4,000 | 4,000 | 4,000 | 4,000 | 4,000 | |||||

Product Notes | ||||||||||

NA | NA | NA | NA | Yes | Yes | NA | NA | NA | NA |