Palo Alto Networks PAN-PA-455-5G Desktop Firewall with 6x 1G RJ45, 4x 1G PoE, 2x SFP/RJ45 Combo and 5G Modem
A support service contract is required unless your organization has an active Enterprise Support Agreement (ESA). 1-year, 3-year, and 5-year support options are available. Please contact us before fulfillment to confirm the correct support option or any additional Palo Alto licenses you may need.
Overview
The Palo Alto Networks PA-400 Series brings ML-powered next-generation firewalling to distributed enterprise branch offices and midsize businesses in a fanless desktop chassis. Every model runs PAN-OS with the single-pass architecture, so App-ID, User-ID, Content-ID and SSL/TLS decryption run once over the same packet rather than in a chain of separate engines, and performance stays predictable when security subscriptions are switched on. High availability is supported in active/active and active/passive modes, and NGFW clustering allows horizontal scaling across several appliances. The PAN-PA-455-5G is the 12-port PoE configuration with an embedded 5G cellular modem in that line-up, rated at 3.2 Gbps of firewall throughput. This SKU is supplied as Appliance Only: PAN-OS and its base platform capabilities are included. The Cloud-Delivered Security Services, such as Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering and Advanced DNS Security, are licensed for a term and sold separately, as is the support contract.
Technical Details
The Palo Alto Networks PAN-PA-455-5G is a desktop next-generation firewall with 1×embedded 5G cellular module, 2×1GbE SFP/RJ45 combo, 6×1GbE RJ45, 4×1GbE RJ45 PoE, running PAN-OS. Firewall throughput (appmix) is 3.2 Gbps, measured with App-ID and logging enabled. Threat Prevention throughput (appmix) is 1.8 Gbps, measured with App-ID, IPS, antivirus, antispyware, WildFire, DNS Security, file blocking, and logging enabled. IPsec VPN throughput is 1.6 Gbps on 64 KB HTTP transactions with logging enabled. It holds 300,000 concurrent sessions and opens 48,000 new sessions per second. Power over Ethernet is provided on 4 ports, 151 W (60 W max per port). Palo Alto Networks support and security subscriptions are sold separately. It operates 32°F to 104°F (0°C to 40°C) and is used at a branch or midsize-business internet edge.
Best For
The PAN-PA-455-5G suits a branch office, retail site or midsize business that needs 1.8 Gbps of Threat Prevention throughput with 300,000 concurrent sessions behind it. Its interfaces are 1×embedded 5G cellular module, 2×1GbE SFP/RJ45 combo, 6×1GbE RJ45, 4×1GbE RJ45 PoE. Firewall throughput (appmix) is 3.2 Gbps, measured with App-ID and logging enabled. Compare it with the PAN-PA-460, its nearest model in the same family, on those two figures and on the interface set, since the two models differ in ports. This model supports optional power redundancy using an additional power adapter.
Not suitable if:
- your inspected traffic exceeds 1.8 Gbps, since that is the published Threat Prevention throughput
- you need the Cloud-Delivered Security Services included in the part number, since an Appliance Only SKU carries PAN-OS only and the subscriptions are sold separately
- you need a hardened appliance for a plant floor or outdoor cabinet, since this unit is rated only for 32°F to 104°F (0°C to 40°C)
PAN-PA-455-5G Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 1×embedded 5G cellular module, 2×1GbE SFP/RJ45 combo, 6×1GbE RJ45, 4×1GbE RJ45 PoE |
| Max Port Speed | 1 GbE |
| Management & Console Ports | 1×1GbE SFP/RJ45 combo management, 1×RJ45 console, 1×USB |
| PoE Ports / Budget | 4 ports, 151 W (60 W max per port) |
| Performance & Scale | |
| Firewall Throughput | 3.2 Gbps (appmix) |
| Threat Prevention Throughput | 1.8 Gbps (appmix) |
| TLS/SSL Inspection Throughput | Not published |
| IPsec VPN Throughput | 1.6 Gbps (64 KB HTTP) |
| Hardware & Memory | |
| Onboard Storage | 128 GB eMMC |
| Power & Thermal | |
| Power Supply | 100-240 VAC input (50-60 Hz) via external power adapter; maximum current consumption 3.6 A @ 54 VDC |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 212 W with 151 W PoE output (195 W average) |
| Cooling | Passive cooling |
| Physical & Environmental | |
| Operating System | PAN-OS |
| Form Factor | Desktop |
| Dimensions (H x W x D) | 1 RU × 303 × 283 mm (1 RU × 30.3 × 28.3 cm) |
| Weight | 9.0 lb (4.08 kg) |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Software | |
| Central Management Platform | Panorama, Strata Cloud Manager |
| Routing Protocols & IPv6 | OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing, policy-based forwarding, PPPoE, multicast (PIM-SM, PIM-SSM, IGMP v1/v2/v3); IPv6 in L2, L3, tap and virtual wire modes with SLAAC |
| Other | |
| Maximum Concurrent Sessions | 300,000 |
| New Sessions per Second | 48,000 |
| High Availability | Active/Active, Active/Passive |
PAN-PA-455-5G Accessories
| AC Power Adapter | Included in the box |
| Rack Mount Kit | Optional |
| Console Cable | Included in the box |
| Quick Start Guide | Included in the box |
FAQ
Does the Palo Alto Networks PAN-PA-455-5G support PoE?
Yes. The PAN-PA-455-5G provides Power over Ethernet on 4 ports, 151 W (60 W max per port). The budget is the constraint rather than the port count, so the number of powered devices depends on what each one draws, not on how many ports are fitted. Its full interface set is 1×embedded 5G cellular module, 2×1GbE SFP/RJ45 combo, 6×1GbE RJ45, 4×1GbE RJ45 PoE. Palo Alto's hardware reference and the datasheet's power table both give 151 W; the datasheet's PoE row lists 91 W.
What interfaces does the PAN-PA-455-5G have?
The PAN-PA-455-5G provides 1×embedded 5G cellular module, 2×1GbE SFP/RJ45 combo, 6×1GbE RJ45, 4×1GbE RJ45 PoE. Management and console connectivity is separate: 1×1GbE SFP/RJ45 combo management, 1×RJ45 console, 1×USB. Pluggable transceivers are sold separately.
How does high availability work on the Palo Alto Networks PAN-PA-455-5G?
The PAN-PA-455-5G supports active/active and active/passive high availability. NGFW clustering is also supported for horizontal scaling.
How much traffic can the PAN-PA-455-5G handle?
Palo Alto publishes no user count, so compare the PAN-PA-455-5G on its published capacity figures. Firewall throughput (appmix) is 3.2 Gbps, measured with App-ID and logging enabled. Threat Prevention throughput (appmix) is 1.8 Gbps, measured with App-ID, IPS, antivirus, antispyware, WildFire, DNS Security, file blocking, and logging enabled. It holds 300,000 concurrent sessions, measured with HTTP transactions, and opens 48,000 new sessions per second, measured with application override on 1-byte HTTP transactions. All figures were measured on PAN-OS 12.1.
What is the difference between the PAN-PA-455-5G and the PAN-PA-460?
Both run the same PAN-OS and share the family's platform capabilities. The PAN-PA-455-5G is rated at 3.2 Gbps firewall throughput, 1.8 Gbps Threat Prevention throughput and 300,000 concurrent sessions; the PAN-PA-460 is rated at 4.2 Gbps, 3.0 Gbps and 400,000. Their interface sets differ: the PAN-PA-455-5G has 1×embedded 5G cellular module, 2×1GbE SFP/RJ45 combo, 6×1GbE RJ45, 4×1GbE RJ45 PoE, while the PAN-PA-460 has 8×1GbE RJ45.
Does the PAN-PA-455-5G require a subscription to operate?
No. The PAN-PA-455-5G runs PAN-OS without any subscription, and its base platform capabilities include stateful firewalling and NAT, App-ID, User-ID, Content-ID, SSL/TLS decryption, IPsec VPN, dynamic routing, IPv6 and high availability. The Cloud-Delivered Security Services, including Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering and Advanced DNS Security, are licensed for a term and sold separately.
Does the PAN-PA-455-5G need a support contract?
Yes, unless your organisation holds an active Enterprise Support Agreement. A support service contract is required with the PAN-PA-455-5G, and one-, three- and five-year options are available. Network Devices Inc. confirms the correct support option and any additional Palo Alto Networks licenses the deployment needs before the order is placed.
What is the SSL/TLS decryption throughput of the PAN-PA-455-5G?
Palo Alto Networks does not publish a separate SSL/TLS decryption throughput figure for the PAN-PA-455-5G. The datasheet lists SSL/TLS decryption as a platform capability but provides no bandwidth figure; do not infer decryption throughput from the Threat Prevention throughput.
What condition is the PAN-PA-455-5G sold in, and what warranty applies?
Network Devices Inc. supplies the PAN-PA-455-5G new and factory sealed. It is covered by a one-year Network Devices Inc. warranty. Orders ship from our New Jersey and Texas warehouses.
