paloalto product

Palo Alto Networks
 
Feature PA-7080 PA-7050 PA-7000-20GQXM-NPC PA-7000-20GXM-NPC PA-7000-20GQ-NPC PA-7000-20G-NPC PAN-PA-7000-100G-NPC-A PA-5280 PA-5260 PA-5250
Performance*
App-ID firewall throughput 720 Gbps 430 Gbps 20 Gbps 20 Gbps 20 Gbps 20 Gbps 72 Gbps 67 Gbps 67 Gbps 40 Gbps
Threat prevention throughput 350 Gbps 210 Gbps 12 Gbps 12 Gbps 12 Gbps 12 Gbps 35 Gbps 33 Gbps 33 Gbps 23 Gbps
IPSec VPN throughput 240 Gbps 144 Gbps 8 Gbps 8 Gbps 8 Gbps 8 Gbps 24 Gbps 24 Gbps 24 Gbps 16 Gbps
Connections per second 4,800,000 2,900,000 100,000 100,000 100,000 100,000 480,000 390,000 390,000 284,000
Sessions
Max sessions (IPv4 or IPv6) 80M/320M** Maximum sessions supported with high capacity NPC cards 48M/192M** Maximum sessions supported with high capacity NPC cards 8,000,000 8,000,000 3,200,000 3,200,000 32,000,000 64,000,000 32,000,000 8,000,000
Policies
Security rules 65,000 65,000 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 65,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 65,000 65,000 65,000
Security rule schedules 256 256 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256 256 256
NAT rules 16,000 16,000 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000 16,000 8,000
Decryption rules 5,000 5,000 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 5,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 5,000 5,000 5,000
App override rules 4,000 4,000 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000 4,000 4,000
Tunnel content inspection rules 8,500 8,500 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,500 8,500 8,500
Policy based forwarding rules 2,000 2,000 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000 2,000 2,000
Captive portal rules 8,000 8,000 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000 8,000 8,000
DoS protection rules 2,000 2,000 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000 2,000 2,000
Security Zones
Max security zones 17,000 17,000 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 17,000 17,000 17,000
Objects (addresses and services)
Address objects 160,000 160,000 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 160,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 160,000 160,000 160,000
Address groups 80,000 80,000 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 80,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 80,000 80,000 80,000
Members per address group 2,500 2,500 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500 2,500 2,500
Service objects 12,000 12,000 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 12,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 12,000 12,000 12,000
Service groups 6,000 6,000 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000 6,000 6,000
Members per service group 2,500 2,500 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500 2,500 2,500
FQDN address objects 6,144 6,144 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,144** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,144 6,144 6,144
Max DAG IP addresses** System wide capacity 100000/500000** Capacity based on SMC model capacity 100000/500000** Capacity based on SMC model capacity 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500,000 500,000 500,000
Tags per IP address 64 64 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64 64 64
Security Profiles
Security profiles 750 750 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 750** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 750 750 750
App-ID
Custom App-ID signatures 6,000 6,000 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,000 6,000 6,000
Shared custom App-IDs 512 512 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512 512 512
Custom App-IDs (virtual system specific) 6,416 6,416 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,416** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 6,416 6,416 6,416
User-ID
User-IP mappings (management plane) 524,288 524,288 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 524,288 512,000 512,000 512,000
User-IP mappings (data plane) 512,000 512,000 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 256,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 512,000 512,000 512,000
Active and unique groups used in policy 10,000 10,000 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 10,000 10,000 10,000
Number of User-ID agents 100 100 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100 100 100 100
Monitored servers for User-ID 100 100 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100 100 100
Terminal server agents 2,000/2,500** Capacity based on SMC model capacity 2,000/2,500** Capacity based on SMC model capacity 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,500 2,500 2,500
SSL Decryption
Max SSL inbound certificates 4,000 4,000 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000 2,000 1,200
SSL certificate cache (forward proxy) 8,192/32,000** Maximum cache entries supported with high capacity NPC cards 8,192/32,000** Maximum cache entries supported with high capacity NPC cards 8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,192** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000 32,000 24,000
Max concurrent decryption sessions 1,310,720/32M** Maximum sessions supported with high capacity NPC cards 786,432/19.2M** Maximum sessions supported with high capacity NPC cards 131,072 131,072 104,800 104,800 3.2M 6,400,000 3,200,000 800,000
SSL Port Mirror Yes Yes NA NA NA NA NA Yes Yes Yes
SSL Decryption Broker Yes Yes NA NA NA NA NA Yes Yes Yes
HSM Supported Yes Yes NA NA NA NA NA Yes Yes Yes
URL Filtering
Total entries for allow list, block list and custom categories 100,000 100,000 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100,000 100,000 100,000
Max custom categories 2,849 2,849 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,849** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,849 2,849 2,849
Max custom categories (virtual system specific) 500 500 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500 500 500
Dataplane cache size for URL filtering 250,000 250,000 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 250,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 250,000 250,000 250,000 250,000
Management plane dynamic cache size 900,000 900,000 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 900,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 900,000 900,000 900,000 600,000
EDL
Max number of custom lists 30 30 30 30 30 30 30 30 30 30
Max number of IPs per system 150,000 150,000 150,000 150,000 150,000 150,000 150,000 150,000 150,000 150,000
Max number of DNS Domains per system 500,000 500,000 4,000,000 4,000,000 500,000 500,000 4,000,000 4,000,000 4,000,000 4,000,000
Max number of URL per system 100,000 100,000 250,000 250,000 100,000 100,000 250,000 250,000 250,000 250,000
Shortest check interval (min) 5 5 5 5 5 5 5 5 5 5
Interfaces
Mgmt – out-of-band 10/100/1000, RJ45 console 10/100/1000, RJ45 console NA NA NA NA NA 10/100/1000, RJ45 console 10/100/1000, RJ45 console 10/100/1000, RJ45 console
Mgmt – 10/100/1000 high availability 2 2 NA NA NA NA NA NA NA NA
Mgmt – 40Gbps high availability 2 2 NA NA NA NA NA 1 1 1
Mgmt – 10Gbps high availability NA NA NA NA NA NA NA NA NA NA
Traffic – 10/100/1000 120 72 NA 12 NA 12 NA NA NA NA
Traffic – 100/1000/10000 NA NA NA NA NA NA NA 4 4 4
Traffic – 1Gbps SFP 80 48 NA 8 NA 8 0/8 0/16 0/16 0/16
Traffic – 10Gbps SFP+ 120 72 12 4 12 4 0/8 0/16 0/16 0/16
Traffic – 40Gbps QSFP 20 12 2 NA 2 NA 4×40/100 4×40/100 4×40/100 4×40/100
802.1q tags per device 4,094 4,094 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094 4,094 4,094
802.1q tags per physical interface 4,094 4,094 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,094 4,094 4,094
Max interfaces (logical and physical) 4,096/5,120** Capacity based on SMC model capacity 4,096/5,120** Capacity based on SMC model capacity 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 5,120** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 5,120 5,120 4,096
Maximum aggregate interfaces 8 8 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis N/A 8 8
Virtual Routers
Virtual routers 225 225 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225 225 125
Virtual Wires
Virtual wires 2,048/2,560** Capacity based on SMC model capacity 2,048/2,560** Capacity based on SMC model capacity 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,560** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048 2,048 2,048
Virtual Systems
Base virtual systems 25 25 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 25** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 25 25 25
Max virtual systems** Additional licenses are required for virtual system capacities above the base virtual systems capacity 225 225 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225 225 125
Routing
IPv4 forwarding table size** Entries shared across virtual routers 32,768/228,000** Capacity based on SMC model capacity 32,768/228,000** Capacity based on SMC model capacity 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,768/228,000** Capacity based on SMC model capacity 100,000 100,000 100,000
IPv6 forwarding table size** Entries shared across virtual routers 32,768/228,000** Capacity based on SMC model capacity 32,768/228,000** Capacity based on SMC model capacity 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,768/228,000** Capacity based on SMC model capacity 100,000 100,000 100,000
System total forwarding table size 65,536/456,000** Capacity based on SMC model capacity 65,536/456,000** Capacity based on SMC model capacity 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 65,536/456,000** Capacity based on SMC model capacity 200,000 200,000 200,000
Max route maps per virtual router 50 50 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 50** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 50 50 50
Max routing peers (protocol dependent) 500/1,000** Capacity based on SMC model capacity 500/1,000** Capacity based on SMC model capacity 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,000 1,000 1,000
Static entries – DNS proxy 1,024 1,024 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024 1,024 1,024
Bidirectional Forwarding Detection (BFD) Sessions 1,024 1,024 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024 1,024 1,024
L2 Forwarding
ARP table size per device 32,000/132,000** Capacity based on SMC model capacity 32,000/132,000** Capacity based on SMC model capacity 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 128,000 128,000 128,000
IPv6 neighbor table size 32,000/132,000** Capacity based on SMC model capacity 32,000/132,000** Capacity based on SMC model capacity 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 128,000 128,000 128,000
MAC table size per device 32,000/132,000** Capacity based on SMC model capacity 32,000/132,000** Capacity based on SMC model capacity 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 128,000 128,000 128,000
Max ARP entries per broadcast domain 32,000/132,000** Capacity based on SMC model capacity 32,000/132,000** Capacity based on SMC model capacity 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 128,000 128,000 128,000
Max MAC entries per broadcast domain 32,000/132,000** Capacity based on SMC model capacity 32,000/132,000** Capacity based on SMC model capacity 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 32,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 132,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 128,000 128,000 128,000
NAT
Total NAT rule capacity 16,000 16,000 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000 16,000 8,000
Max NAT rules (static)** Configuring static NAT rules to full capacity requires that no other NAT rule types are used. 16,000 16,000 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000 16,000 8,000
Max NAT rules (DIP)** Configuring DIP NAT rules to full capacity requires that no other NAT rule types are used. 16,000 16,000 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 16,000 16,000 8,000
Max NAT rules (DIPP) 4,000 4,000 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000 8,000 6,000
Max translated IPs (DIP) 320,000 320,000 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 320,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 320,000 320,000 160,000
Max translated IPs (DIPP)** DIPP translated IP capacity is proportional to the DIPP pool oversubscription value. The capacity shown here is based on an oversubscription value of 1x. 4,000 4,000 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000 8,000 6,000
Default DIPP pool oversubscription** Source IP and source port reuse across concurrent sessions 8 8 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8 8 8
Address Assignment
DHCP servers 225 225 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 225** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 500 500 500
DHCP relays** Maximum capacity represents total DHCP servers and DHCP relays compbined 4,096** Total includes number of DHCP servers and DHCP relays 4,096** Total includes number of DHCP servers and DHCP relays 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096** Total includes number of DHCP servers and DHCP relays 4,096** Total includes number of DHCP servers and DHCP relays 4,096** Total includes number of DHCP servers and DHCP relays
Max number of assigned addresses 64,000 64,000 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 64,000 64,000 64,000
High Availability
Devices supported 2 2 NA NA NA NA NA 2 2 2
Max virtual addresses 1,024 1,024 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 1,024** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,096 4,096 4,096
QoS
Number of QoS policies 8,000 8,000 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000 4,000 4,000
Physical interfaces supporting QoS 32 32 12** Limited by the capacity enforced per PA-7000 Series chassis 12** Limited by the capacity enforced per PA-7000 Series chassis 12** Limited by the capacity enforced per PA-7000 Series chassis 12** Limited by the capacity enforced per PA-7000 Series chassis 12** Limited by the capacity enforced per PA-7000 Series chassis 12 12 12
Clear text nodes per physical interface 63 63 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 63** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 63 63 63
DSCP marking by policy Yes Yes Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis Yes** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis Yes Yes Yes
Subinterfaces supported 2,048 2,048 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,048 2,048 2,048
IPSec VPN
Site to site 8000/12000** Standard memory NPC / XM or 100G NPC 8,000/12000** Standard memory NPC / XM or 100G NPC 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 8,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 12,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 15,000 15,000 12,000
Max IKE Peers 4,000 4,000 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 5,000 5,000 4,000
GlobalProtect Client VPN
Max tunnels (SSL, IPSec, and IKE with XAUTH) 40000/60000** Capacity based on SMC model capacity 40000/60000** Capacity based on SMC model capacity 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 40,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 40,000/60000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 60,000 60,000 30,000
GlobalProtect Clientless VPN
Max SSL tunnels 10000/25000** Capacity based on SMC model capacity 10000/25000** Capacity based on SMC model capacity 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 10,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 25,000** This capacity is the same regardless of how many XM NPCs are installed in the PA-7000 Series chassis 10,000 10,000 5,000
Multicast
Replication (egress interfaces) 100/2000** Standard memory NPC / XM or 100G NPC 100/2000** Standard memory NPC / XM or 100G NPC 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 100/2,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 2,000 2,000 2,000
Routes 4,000 4,000 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000** This capacity is the same regardless of how many NPCs are installed in the PA-7000 Series chassis 4,000 4,000 4,000
Product Notes
NA NA NA NA Yes Yes NA NA NA NA
[/vc_column_text][/vc_column][/vc_row]