Palo Alto Networks PAN-PA-1410 1U Rackmount Firewall with 8x 1G RJ45, 4x 5G PoE, 6x 1G SFP and 4x 10G SFP+
Overview
The Palo Alto Networks PA-1400 Series moves the branch-office firewall into a 1U rack chassis with a dedicated 10 gigabit HSCI high-availability port, a 151 W PoE budget, an optional second power supply, and 1/10 gigabit SFP/SFP+ uplinks. Palo Alto Networks positions the line for branch offices and midsize businesses. It runs PAN-OS with the single-pass architecture, supports active/active and active/passive high availability, and allows NGFW clustering for horizontal scaling. The PAN-PA-1410 is the 22-port PoE configuration in that line-up, rated at 8.5 Gbps of firewall throughput. This SKU is supplied as Appliance Only: PAN-OS and its base platform capabilities are included. The Cloud-Delivered Security Services, such as Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering and Advanced DNS Security, are licensed for a term and sold separately, as is the support contract.
Technical Details
The Palo Alto Networks PAN-PA-1410 is a 1U rackmount next-generation firewall with 8×1GbE RJ45, 4×1/2.5/5GbE RJ45 PoE, 6×1GbE SFP, 4×1/10GbE SFP/SFP+, running PAN-OS. Firewall throughput (appmix) is 8.5 Gbps, measured with App-ID and logging enabled. Threat Prevention throughput (appmix) is 4.5 Gbps, measured with App-ID, IPS, antivirus, antispyware, WildFire, DNS Security, file blocking, and logging enabled. IPsec VPN throughput is 4.1 Gbps on 64 KB HTTP transactions with logging enabled. It holds 945,000 concurrent sessions and opens 100,000 new sessions per second. Power over Ethernet is provided on 4 ports, 151 W (90 W max per port). Palo Alto Networks support and security subscriptions are sold separately. It operates 32°F to 104°F (0°C to 40°C) at 10,000 feet and is used at a branch or midsize-business internet edge.
Best For
The PAN-PA-1410 suits a branch office or midsize business that needs 4.5 Gbps of Threat Prevention throughput with 945,000 concurrent sessions behind it. Its interfaces are 8×1GbE RJ45, 4×1/2.5/5GbE RJ45 PoE, 6×1GbE SFP, 4×1/10GbE SFP/SFP+. Firewall throughput (appmix) is 8.5 Gbps, measured with App-ID and logging enabled. Compare it with the PAN-PA-1420, its nearest model in the same family, on those two figures and on the interface set, since the two models differ in ports.
Not suitable if:
- your inspected traffic exceeds 4.5 Gbps, since that is the published Threat Prevention throughput
- you need the Cloud-Delivered Security Services included in the part number, since an Appliance Only SKU carries PAN-OS only and the subscriptions are sold separately
- you need a hardened appliance for a plant floor or outdoor cabinet, since this unit is rated only for 32°F to 104°F (0°C to 40°C) at 10,000 feet
PAN-PA-1410 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 8×1GbE RJ45, 4×1/2.5/5GbE RJ45 PoE, 6×1GbE SFP, 4×1/10GbE SFP/SFP+ |
| Max Port Speed | 10 GbE |
| Management & Console Ports | 1×1GbE RJ45 out-of-band management, 1×10GbE HSCI high availability, 1×RJ45 console, 1×USB, 1×micro-USB console |
| PoE Ports / Budget | 4 ports, 151 W (90 W max per port) |
| Performance & Scale | |
| Firewall Throughput | 8.5 Gbps (appmix) |
| Threat Prevention Throughput | 4.5 Gbps (appmix) |
| TLS/SSL Inspection Throughput | Not published |
| IPsec VPN Throughput | 4.1 Gbps (64 KB HTTP) |
| Maximum Concurrent Sessions | 945,000 |
| New Sessions per Second | 100,000 |
| Hardware & Memory | |
| Onboard Storage | 120 GB SSD |
| Power & Thermal | |
| Power Supply | 100-240 VAC input (50-60 Hz); one 450 W AC power supply, optional second 450 W AC power supply available |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 290 W (250 W average) |
| Cooling | Front-to-back airflow |
| Physical & Environmental | |
| Form Factor | 1U Rackmount |
| Dimensions (H x W x D) | 1.70 × 17.15 × 14.15 in (4.32 × 43.56 × 35.94 cm) |
| Weight | 15.5 lb (7.03 kg) |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) at 10,000 feet |
| Software | |
| Operating System | PAN-OS |
| High Availability | Active/Active, Active/Passive |
| Central Management Platform | Panorama, Strata Cloud Manager |
| Routing Protocols & IPv6 | OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing, policy-based forwarding, PPPoE, multicast (PIM-SM, PIM-SSM, IGMP v1/v2/v3), NAT64 and NPTv6; IPv6 in L2, L3, tap and virtual wire modes with SLAAC |
PAN-PA-1410 Accessories
| Included | AC 450W power supply (1) |
| Optional Power Supply | Optional for purchase 2nd AC 450W power supply (1) |
FAQ
Does the Palo Alto Networks PAN-PA-1410 support PoE?
Yes. The PAN-PA-1410 provides Power over Ethernet on 4 ports, 151 W (90 W max per port). The budget is the constraint rather than the port count, so the number of powered devices depends on what each one draws, not on how many ports are fitted. Its full interface set is 8×1GbE RJ45, 4×1/2.5/5GbE RJ45 PoE, 6×1GbE SFP, 4×1/10GbE SFP/SFP+.
What interfaces does the PAN-PA-1410 have?
The PAN-PA-1410 provides 8×1GbE RJ45, 4×1/2.5/5GbE RJ45 PoE, 6×1GbE SFP, 4×1/10GbE SFP/SFP+. Management and console connectivity is separate: 1×1GbE RJ45 out-of-band management, 1×10GbE HSCI high availability, 1×RJ45 console, 1×USB, 1×micro-USB console. Pluggable transceivers are sold separately.
How does high availability work on the Palo Alto Networks PAN-PA-1410?
The PAN-PA-1410 supports active/active and active/passive high availability. This model has a dedicated 10 gigabit HSCI high-availability port, listed among its management interfaces. NGFW clustering is also supported, which scales capacity horizontally across several appliances.
How much traffic can the PAN-PA-1410 handle?
Palo Alto publishes no user count, so compare the PAN-PA-1410 on its published capacity figures. Firewall throughput (appmix) is 8.5 Gbps, measured with App-ID and logging enabled. Threat Prevention throughput (appmix) is 4.5 Gbps, measured with App-ID, IPS, antivirus, antispyware, WildFire, DNS Security, file blocking, and logging enabled. It holds 945,000 concurrent sessions, measured with HTTP transactions, and opens 100,000 new sessions per second, measured with application override on 1-byte HTTP transactions. All figures were measured on PAN-OS 12.1.
What is the difference between the PAN-PA-1410 and the PAN-PA-1420?
Both run the same PAN-OS and share the family's platform capabilities. The PAN-PA-1410 is rated at 8.5 Gbps firewall throughput, 4.5 Gbps Threat Prevention throughput and 945,000 concurrent sessions; the PAN-PA-1420 is rated at 9.5 Gbps, 6.2 Gbps and 1,400,000. Their interface sets differ: the PAN-PA-1410 has 8×1GbE RJ45, 4×1/2.5/5GbE RJ45 PoE, 6×1GbE SFP, 4×1/10GbE SFP/SFP+, while the PAN-PA-1420 has 4×1GbE RJ45, 4×1/2.5/5GbE RJ45, 4×1/2.5/5GbE RJ45 PoE, 2×1GbE SFP, 8×1/10GbE SFP/SFP+.
Does the PAN-PA-1410 require a subscription to operate?
No. The PAN-PA-1410 runs PAN-OS without any subscription, and its base platform capabilities include stateful firewalling and NAT, App-ID, User-ID, Content-ID, SSL/TLS decryption, IPsec VPN, dynamic routing, IPv6 and high availability. The Cloud-Delivered Security Services, including Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering and Advanced DNS Security, are licensed for a term and sold separately.
Does the PAN-PA-1410 need a support contract?
Yes, unless your organisation holds an active Enterprise Support Agreement. A support service contract is required with the PAN-PA-1410, and one-, three- and five-year options are available. Network Devices Inc. confirms the correct support option and any additional Palo Alto Networks licenses the deployment needs before the order is placed.
What is the SSL/TLS decryption throughput of the PAN-PA-1410?
Palo Alto Networks does not publish a separate SSL/TLS decryption throughput figure for the PAN-PA-1410. The datasheet lists SSL/TLS decryption as a platform capability but provides no bandwidth figure; do not infer decryption throughput from the Threat Prevention throughput.
What condition is the PAN-PA-1410 sold in, and what warranty applies?
Network Devices Inc. supplies the PAN-PA-1410 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty. Orders ship from our New Jersey and Texas warehouses.
