Palo Alto Networks PA-5570-AC Next-Generation Firewall 300 Gbps

Eliminate Bottlenecks with AI-Driven Data Center Security

The Palo Alto Networks PA-5570 delivers data center–grade protection without sacrificing performance. Built on single-pass architecture and powered by Precision AI, it inspects traffic at Layer 7 while maintaining predictable throughput for demanding east–west and internet edge workloads.

Key Benefits & Features

The PA-5570 brings high throughput, advanced visibility, and resilient operations to enterprise cores and service provider edges.

300 Gbps AppMix Throughput with Single-Pass Processing

Process networking, policy lookup, application decoding, and content inspection in a single pass to reduce latency and keep performance consistent—even with full security services enabled. The PA-5570 is rated for 300 Gbps firewall throughput and 240 Gbps Threat Prevention throughput (AppMix).

PQC-Ready Decryption and VPN

Move toward quantum-safe operations with PAN-OS 12.1 support for PQC SSL/TLS decryption and PQC site-to-site VPN using NIST algorithms like ML-KEM and ML-DSA, plus additional experimental schemes. A PCIe slot is provided for future PQ capabilities.

High Availability with NGFW Clustering

Achieve horizontal scale and high resilience via NGFW clustering (active/active data plane) and traditional HA. Clustering optimizes resources while maintaining a highly available posture for mission-critical networks.

Deep Application and User Controls

App-ID and full Layer 7 inspection accurately identify applications on any port or encryption method; User-ID and identity integrations enforce consistent, least-privilege policies across users and locations.

Unified, AI-Powered Management

Administer policies and operations through Strata Cloud Manager and Strata Copilot to detect anomalies, optimize policy sets, and proactively resolve issues across NGFW, SASE, and security services.

Ideal Use Cases

• Enterprise data centers consolidating NGFW, decryption, and Threat Prevention at scale.
• Internet gateways requiring predictable high throughput and advanced policy controls.
• Service providers and large campuses standardizing on clustered, horizontally scalable firewalls.

Technical Specifications

• Firewall Throughput (AppMix): 300 Gbps
• Threat Prevention Throughput (AppMix): 240 Gbps
• IPsec VPN Throughput: 150 Gbps
• Max Concurrent Sessions: 89 million; New Sessions/sec: 3 million
• Virtual Systems (Base/Max): 25 / 225
• Ports: up to 8 × 100/400G QSFP-DD, 12 × 40/100G QSFP28, 8 × 10/25G SFP28
• Form Factor: 3U, 19″ rack; airflow front to back
• Management: Strata Cloud Manager; supports NGFW clustering and HA

Secure Your Core Now

Upgrade to the PA-5570 for quantum-ready, AI-driven protection at true data-center speeds.

Model	PA-5570-AC
Product Type	Next-Generation Firewall (NGFW)
Firewall Throughput (appmix)	300 Gbps
Threat Prevention Throughput (appmix)	240 Gbps
IPsec VPN Throughput	150 Gbps
Max Concurrent Sessions	89M
New Sessions per Second	3M
Virtual Systems (base/max)	25 / 225
I/O	10G/25G SFP28 (8); 40G/100G QSFP28 (12); 100G/400G QSFP-DD (8)
Management I/O	1G/10G SFP+ OOB mgmt (2); RJ-45 console; USB-C console; USB 3.2 Gen1 Type-A (bootstrap); HSCI 100G/400G QSFP-DD (2); Log 10G SFP+ (2)
Storage Capacity	Optional 3.84 TB RAID1 SSD pair (cold swap)
Power (Avg/Max)	2,100 W / 3,100 W
Max BTU/hr	1638
Power Supplies	2+2 redundant (220 V & DC); 3+1 redundant (110 V)
Input Voltage	AC 100–240 VAC (50–60 Hz); DC −40 VDC to −60 VDC
Power Supply Output	AC: 2,700 W (220 V) or 1,200 W (110 V) per PSU; DC: 2,200 W per PSU
Max Current Consumption	AC: 20.3 A @ 110 VAC; 9.3 A @ 240 VAC — DC: 43.7 A @ 54 VDC
MTBF	6.3 years
Rack Mount Dimensions	3U, 19" rack (5.2" H × 29.8" D × 17.3" W) with PSU inserted
Weight	70 lb (standalone) / 116 lb (as shipped)
Safety	cTUVus, CB
EMI	FCC Class A; CE Class A; VCCI Class A
Environment	Operating 0–50 °C (32–122 °F); Non-operating −20–70 °C (−4–158 °F); Humidity 10–90%; Max altitude 3,048 m; Airflow front-to-back

Interface Modes	L2, L3, tap, virtual wire (transparent)
Routing	Advanced routing engine; OSPFv2/v3, MP-BGP (graceful restart), RIP, static; policy-based forwarding; PPPoE & DHCP client (IPv4/IPv6); DHCPv4 server/relay; Multicast PIM-SM/SSM, IGMPv2/v3; BFD & multihop BFD
Advanced SD-WAN	Path quality measurement (jitter, loss, latency); bandwidth monitoring; manual/IKEv1*/IKEv2 key exchange; post-quantum PPK; Multi-VR/LR over overlay; Prisma Access Hub; ADEM support
IPv6	Inspection in L2/L3/tap/virtual wire; dual-stack & IPv6-only; IPv6 geolocation, OSPFv3, MP-BGP, NAT64, NPTv6; DHCPv6 client with PD; SLAAC server
IPsec VPN	Manual, IKEv1*/IKEv2 (PSK & cert); Encryption 3DES, AES-128/192/256; Auth MD5, SHA-1/256/384/512; GlobalProtect Large Scale VPN; secure access over IPsec/SSL via GP gateways/portals†
VLANs / LAG	802.1Q VLAN tags per device/interface: 4,094 / 4,094; 802.3ad aggregate interfaces & LACP
NAT	Static, dynamic IP, dynamic IP and port (PAT); NAT64, NPTv6; dynamic IP reservation & tunable oversubscription
High Availability & Clustering	NGFW clustering (active/active) and HA active/passive‡; dual-active data plane with single control plane; MC-LAG support
Post-Quantum Crypto	PQC-ready; PQC SSL/TLS decryption, PQC VPN, Cipher Translation Proxy; supports ML-KEM, ML-DSA, SLH-DSA and experimental PQCs; PCIe slot for future PQ capabilities
Decryption & Visibility	Policy-based SSL/TLS inspection (SSLv3, TLS 1.1/1.2/1.3); classical & PQ key exchanges (RSA, ECDHE, DHE; ML-KEM, HQC) with metrics and controls
App-ID & ML	Full L7 identification and control; optional App-ID Cloud Engine; AI-enhanced recognition
Packet Processing	Single-pass architecture for predictable performance with security subscriptions
Management	Strata Cloud Manager for unified management, AI-assisted operations, and best-practice recommendations

Included	4× PAN-PA-5500-PWR-2700-AC; 5× PAN-PA-FAN-2RU-A; 1× PAN-PA-5500-ACC-A accessory kit; 1× PAN-PA-3RU-RACK-A; 2× PAN-SFP-CG
Optional – Spares	PAN-PA-5500-SSD-3.84TB-PAIR (spare); PAN-PA-5500-ACC-A (spare kit: includes 4× PAN-PWR-C19-US-120V cable, 1× USB cable, 1× Cat6 cable); PAN-PA-5500-ACC-B (spare kit: includes 4× PAN-PWR-DC-CBL-C, 1× USB cable, 1× Cat6 cable)

INTERNATIONAL -

International buyers must acknowledge that all duties and taxes are their sole responsibility and Network Devices Inc is not held responsible for possible additional charges.

DOMESTIC -

Products are shipped Monday through Friday via UPS/FedEx/USPS. The estimated delivery time is 1-6 business days depending on location. If “Free Shipping” is offered, it will be by Ground only and within USA Continental States Only (48 States). There will be a surcharge on shipments to Hawaii, Alaska, Puerto Rico and APO/FPO addresses. After you have made a purchase, the surcharge will be calculated using the parcel’s weight and size. Network Devices Inc ships the product the same day of receiving an order. Otherwise you will a receive notification of delay or cancellation of said order.