Palo Alto PA-7500 1.5 Tbps Throughput Next-Generation Firewall NGFW
The Palo Alto PA-7500 is a high-performance next-generation firewall designed for large-scale enterprise, data center, and high-capacity network security deployments. It delivers up to 1,500 Gbps firewall throughput and 1,440 Gbps Threat Prevention throughput, providing high-speed security inspection for demanding network environments.
The PA-7500 supports up to 440 million concurrent sessions and 7.2 million new sessions per second, with IPsec VPN throughput of up to 407 Gbps. Its networking capabilities include Layer 3, tap, and virtual wire interface modes, along with OSPF, BGP, RIP, static routing, policy-based forwarding, DHCP, multicast, and BFD support.
For advanced security and application control, the firewall supports App-ID, User-ID, Content-ID, WildFire, and SSL decryption. IPv6 networking, SLAAC, NAT64, NPTv6, multiple NAT modes, 802.1Q VLAN tagging, LACP, and aggregate interfaces provide flexibility for complex network architectures.
The PA-7500 supports IPsec and SSL VPN capabilities with IKEv1 and IKEv2, AES encryption, certificate-based authentication, and GlobalProtect gateway and portal functionality. Active-passive NGFW clustering provides high availability for resilient security deployments.
The 14U platform supports N+M power redundancy with up to 10 power supplies and load sharing. It supports both AC and DC power configurations and operates from 0°C to 40°C with 5% to 90% noncondensing humidity. Front-to-back airflow supports integration into compatible rack environments.
Main Features
- 1.5 Tbps firewall throughput
- 1.44 Tbps Threat Prevention throughput
- Up to 440 million concurrent sessions
- 7.2 million new sessions per second
- 407 Gbps IPsec VPN throughput
- App-ID, User-ID, Content-ID, WildFire, and SSL decryption
- OSPF, BGP, RIP, static routing, and policy-based forwarding
- Active-passive NGFW clustering
- 14U rack-mount platform with N+M power redundancy
Specifications:
| Performance and Capacities |
|
| Firewall throughput (appmix) |
1,500 Gbps |
| Threat Prevention throughput (appmix) |
1,440 Gbps |
| Max concurrent sessions |
440M |
| IPsec VPN throughput |
407Gbps |
| New sessions per second |
7.2M |
| Virtual systems (base/max) |
25/225 |
| Networking Features |
| Interface Modes |
|
| Interface Modes |
L3, tap, virtual wire (transparent mode) |
| Routing |
|
| OSPF |
OSPFv2/v3 with graceful restart |
| BGP |
BGP with graceful restart |
| RIP |
Supported |
| Static Routing |
Supported |
| Policy-Based Forwarding |
Supported |
| DHCP |
Supported for dynamic address assignment |
| Multicast |
PIM-SM, PIM-SSM, IGMP v1, v2, and v3 |
| Bidirectional Forwarding Detection |
BFD |
| IPv6 |
|
| IPv6 |
L3, tap, virtual wire (transparent mode) |
| Features |
App-ID, User-ID™, Content-ID™, WildFire, and SSL decryption |
| SLAAC |
Supported |
| IPsec and SSL VPN |
|
| Key Exchange |
Manual key, IKEv1*, IKEv2 (pre-shared key, certificate-based authentication) |
| Encryption |
3DES, AES (128-bit, 192-bit, 256-bit) |
| Authentication |
MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
| GlobalProtect® Large Scale VPN |
For simplified configuration and management† |
| GlobalProtect Gateway and Portals |
Secure access over IPsec and SSL VPN tunnels† |
| VLANs |
|
| 802.1Q VLAN Tags |
4,094/4,094 per device/per interface |
| Aggregate Interfaces |
802.3ad intracard and/or intercard, and LACP |
| Network Address Translation |
|
| NAT Modes (IPv4) |
Static IP, Dynamic IP, Dynamic IP and Port (port address translation) |
| NAT64 |
Supported |
| NPTv6 |
Supported |
| Additional NAT Features |
Dynamic IP reservation, tunable Dynamic IP and Port oversubscription |
| High Availability |
|
| NGFW Clustering |
Active-passive‡ |
| Security Hardware |
|
| Trusted Platform Module (TPM) |
Integrated with TPM for secure boot, hardware root of trust, and securing system secrets |
| BTU |
|
| Configuration |
SFCs (2), NPCs (2), DPCs (6), MPC (1) |
| Max BTU |
31142 (total power—fan power in BTU units) |
| Power Supply — Idle/Typical/Max Power Consumption |
|
| Configuration |
SFCs (2), NPCs (2), DPCs (6), MPC (1) |
| Power Consumption at 25°C / Sea Level |
6.3 KW / 8.2 KW / 10 KW |
| Power Consumption at 40°C / 2,000 ft Altitude |
7.3 KW / 9.2 KW / 11.5 KW |
| Power Supplies |
|
| Redundancy |
N+M Redundancy (up to 10 power supplies with load sharing) |
| AC Input Voltage |
100–240 VAC (50–60 Hz) |
| AC Rated Input Current |
20 A |
| AC Power Supply Output |
3600 W @ High Line (180V, 200/240V, 305V) per power supply; 1800 W @ Low Line (90V, 110/120V, 132V) per power supply |
| DC Input Voltage |
-48V DC |
| DC Rated Input Current |
83A @ -48V DC |
| DC Power Output |
3600 W/power supply |
| Max Current/Power Supply |
20A AC Power Supply, 83A DC Power Supply |
| Rack Mount Dimensions |
|
| Rack Mount Dimensions |
14U; 24.4" H × 31.0" D × 17.4" W |
| Safety |
cMETus, CB, Noise Level Compliant with NEBS |
| EMI |
FCC Class A, CE Class A, VCCI Class A |
| Certifications |
See Compliance page |
| Environment |
|
| Operating Temperature |
32°F–104°F, 0°C–40°C |
| Humidity Tolerance |
5% to 90% noncondensing |
| Airflow |
Front to back |
