Call a Specialist Today! 844-294-0778
PA-5400 Series
High-performance data center and campus edge security
ML-powered next-generation firewalls delivering up to 200 Gbps firewall throughput in a compact 2RU form factor. Purpose-built for data center segmentation, internet edge, and service provider deployments.
Compare models Download datasheet
Consolidate data center security into a compact 2RU platform
The PA-5400 Series addresses throughput, session capacity, and rack efficiency requirements for data center and campus edge deployments. All models run PAN-OS with the same ML-powered security engine used across the entire PA-Series portfolio.
Up to 189 Gbps threat prevention
App-Mix throughput with all security services enabled. The PA-5445 delivers 2.5x the threat performance of the previous-generation PA-5260 in the same rack space.
40G and 100G QSFP28 connectivity
Built-in high-speed uplinks across all models eliminate the need for additional interface modules. Ready for 10G, 40G, and 100G backbone connections.
2RU rack footprint
Data center-grade security in two rack units. One PA-5400 replaces a stack of legacy firewalls, reducing power, cooling, and cabling complexity.
Compare PA-5400 models
Performance data reflects App-Mix real-world traffic conditions with all security services enabled. Select a model based on throughput tier, session capacity, and virtual system requirements.
| Feature | PA-5410 | PA-5420 | PA-5430 | PA-5440 | PA-5445 | PA-5450 |
|---|---|---|---|---|---|---|
| Best for | Campus edge | Internet gateway | Data center core | Multi-tenant DC | High-density DC | Hyperscale DC |
| Firewall throughput | 36 Gbps | 48 Gbps | 68 Gbps | 85 Gbps | 90 Gbps | 200 Gbps |
| Threat prevention | 22 Gbps | 30 Gbps | 44 Gbps | 70 Gbps | 76 Gbps | 189 Gbps |
| IPsec VPN throughput | 18 Gbps | 24 Gbps | 34 Gbps | 57 Gbps | 62 Gbps | 85 Gbps |
| Concurrent sessions | 8 million | 12 million | 15 million | 20 million | 48 million | 100 million |
| New sessions/sec | 270,000 | 340,000 | 370,000 | 390,000 | 449,000 | 3,600,000 |
| Virtual systems (max) | 25 | 50 | 75 | 125 | 150 | 225 |
| Form factor | 2RU fixed | 2RU fixed | 2RU fixed | 2RU fixed | 2RU fixed | 4RU modular |
| Pricing | Check price | Check price | Check price | Check price | Check price | Check price |
Performance values reflect App-Mix traffic conditions. Actual throughput may vary by environment and enabled features.
PA-5400 Series
Individual model details
Select a model for full specifications, pricing, and configuration options.
Built for the encrypted, 5G era
Legacy firewalls experience significant throughput degradation when SSL decryption is enabled. The PA-5400 Series uses hardware-accelerated TLS processing to maintain performance under full encrypted traffic inspection.
Hardware-accelerated TLS decryption
Dedicated processing inspects TLS 1.3 and HTTP/2 traffic without the throughput penalty of software-based decryption engines. No performance tax on encrypted traffic.
5G-native security
Purpose-built to secure 5G service provider and multi-access edge computing (MEC) environments with identifier-based visibility and enforcement at the network layer.
High-speed connectivity
All models include built-in 40G and 100G QSFP28 ports for direct connection to data center spine and core switches. No additional interface cards required.
Select the right PA-5400 model
Match the model to the deployment scenario. Each PA-5400 targets a specific throughput tier, session capacity, and virtual system requirement.
Documentation
PA-5400 Series datasheet
Full specifications, App-Mix performance data, and hardware port details for all PA-5400 fixed-form-factor models.
Download PDFFirewall overview
Comprehensive overview of PA-Series firewall capabilities, single-pass architecture, and security services.
Download PDFFull model comparison
Side-by-side comparison of all PA-Series models including throughput, sessions, interfaces, and dimensions.
Compare all modelsConnect with a PA-5400 Series specialist
Evaluate the right model for each data center and campus deployment, request evaluation units, and discuss configuration and deployment planning.