Palo Alto Networks PA-5450
ML-Powered NextGeneration Firewall (NGFW)

Palo Alto Networks Enterprise Firewall PA-5450

Looking for sizing recommendation? Take our Firewall Sizing Survey

Please Note: We cannot provide sizing recommendations for Palo Alto firewalls being deployed outside of the United States. Palo Alto firewalls are only available for
licensed businesses (not home users). Palo Alto firewalls cannot be sold outside of the United States excluding Canada. 1 Year minimum of Partner Enabled Backline Support is required for all new Palo Alto firewall purchases

Palo Alto Networks Products

PA-5450 Series Hardware

PA-5450 Base AC Hardware Bundle

#PAN-PA-5450-AC-SYS
Get a Quote!

Table 1: PA-5450 Performance and Capacities
	PA-5450 Configured System*	Single PA-5400-DPC-A
Firewall throughput (HTTP/appmix)	200/200 Gbps	72/68 Gbps
Threat Prevention throughput (HTTP/appmix)	125/150 Gbps	31/37 Gbps
IPsec VPN throughput	95 Gbps**	19 Gbps
Max sessions	100M	20M
New sessions per second	4M	830,000
Virtual systems (base/max)	25/225	—

Table 2: PA-5450 Networking Features
Interface Modes
L2, L3, tap, virtual wire (transparent mode)
Routing
OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing
Policy-based forwarding
Point-to-point protocol over Ethernet (PPPoE) and DHCP supported for dynamic address assignment
Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
Bidirectional Forwarding Detection (BFD)
SD-WAN
Path quality measurement (jitter, packet loss, latency)
Initial path selection (PBF)
Dynamic path change
IPv6
L2, L3, tap, virtual wire (transparent mode)
Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption
SLAAC
IPsec VPN
Key exchange: manual key, IKEv1 and IKEv2 (pre-shared key, certificate-based authentication)
Encryption: 3DES, AES (128-bit, 192-bit, 256-bit)
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
GlobalProtect large-scale VPN for simplified configuration and management

Table 2: PA-5450 Networking Features (cont.)
VLANs
802.1Q VLAN tags per device/per interface: 4,094/4,094
Aggregate interfaces (802.3ad), LACP
Network Address Translation
NAT modes (IPv4): static IP, dynamic IP, dynamic IP and port (port address translation)
NAT64, NPTv6
Additional NAT features: dynamic IP reservation, tunable dynamic IP and port oversubscription
High Availability
Modes: active/active, active/passive, HA clustering
Failure detection: path monitoring, interface monitoring
Mobile Network Infrastructure*
GTP Security
SCTP Security

Table 3: PA-5450 Hardware Specifications
PA-5400-NC-A Networking I/O
100/1000/10G Cu (4), 1G/10G SFP/ SFP+ (12), 40G/100G QSFP28 (2); minimum 1 NC and maximum 2 NCs per system; 2 NCs require 2 or more DPCs installed
PAN-PA-5400-MPC-A Management I/O
10/100/1000 (2), 40G/100G QSFP28 HA (2), 10/100/1000 out-of- band management (2), RJ45 console port (1), USB console port (1)
Storage Capacity
480 GB SSD, RAID1, system storage 4 TB SSD, log storage (optional)
Max BTU/hr
8,828
Power Supplies (Base/Max)
2/4
AC Input Voltage (Input Frequency)
100–120 VAC & 200–240 VAC (50–60 Hz)
AC Power Supply Output
2,200 watts/power supply
Max Current Consumption
AC: 100–120 VAC, ~14 A max. per input 200–240 VAC, ~12.5 A max. per input
DC: 48–60 VDC, 52 A max. per input

Table 3: PA-5450 Hardware Specifications (cont.)
Max Inrush Current
AC: 35 A @ 230 VAC, 35 A @ 120 VAC
DC: 50 A @ 72 VDC
Rack Mount (Dimensions)
5U, 19” standard rack 8.75” H x 30.25” D x 17.38” W
Maximum Time Between Failure (MTBF)
Configuration dependent; contact your Palo Alto Networks representative for MTBF details.
Safety
cTUVus, CB
EMI
FCC Class A, CE Class A, VCCI Class A, KCC Class A, BSMI Class A
Environment
Operating temperature: 32° to 122° F, 0° to 50° C
Non-operating temperature: -4° to 158° F, -20° to 70° C

Palo Alto Networks PA-5450 ML-Powered NextGeneration Firewall (NGFW)

Overview:

PA-5450 Architecture

Key Security and Connectivity Features:

ML-Powered Next-Generation Firewall

Identifies the applications traversing your network irrespective of port, protocol, evasive techniques, or encryption (TLS/SSL)

Enables SD-WAN functionality

Prevents malicious activity concealed in encrypted traffic

Delivers a unique approach to packet processing with Single-Pass Architecture

Enforces security for users at any location, on any device, while adapting policy based on user activity

Technical Specifications:

Documentation:

Palo Alto Networks PA-5450
ML-Powered NextGeneration Firewall (NGFW)