[shortdesc]
3U Rack-mountable NGFW, 375 Gbps FW, 300 Gbps Threat Prevention, 170 Gbps VPN, 99 M Sessions, PQC-ready, FE-400 ASIC
[/shortdesc]
[properties]
| Model |
PA-5580 |
| Product Type |
Next-Generation Firewall (NGFW |
| Form Factor / Rack |
3U, 19" standard rack |
| Dimensions (H × D × W |
5.2" × 29.8" × 17.3" |
| Weight |
70 lb (standalone; 116 lb (as shipped |
| Airflow |
Front to back (port side to power supply side |
| Operating Temperature |
0–50 °C (32–122 °F |
| Storage Temperature |
−20–70 °C (−4–158 °F |
| Humidity (Operating |
10%–90% |
| Max Operating Altitude |
3,048 m (10,000 ft |
| I/O Ports (Data |
10/25G SFP28 (8; 40/100G QSFP28 (12; 100/400G QSFP-DD (8 |
| Management / Aux I/O |
Mgmt 1G/10G SFP+ (2; RJ-45 console; USB-C; USB 3.2 Gen1 Type-A (bootstrap; HSCI 100/400G QSFP-DD (2; Log 10G SFP+ (2 |
| Storage |
Optional 3.84 TB RAID1 SSD pair (cold swap |
| Input Voltage (DC |
−40 to −60 VDC |
| Power Supply Output (DC |
2,200 W per supply |
| Redundancy |
2+2 redundant for 220 V and DC; 3+1 redundant for 110 V |
| Max BTU/hr |
1638 |
| Max / Inrush Current (DC |
43.7 A @ 54 VDC / 25 A @ 54 VDC |
| MTBF (Series |
6.3 years (PA-5560/PA-5570/PA-5580 |
| Safety / EMI |
cTUVus, CB / FCC Class A, CE Class A, VCCI Class A |
[/properties]
[specifications]
| Firewall Throughput (appmix |
375 Gbps |
| Threat Prevention Throughput (appmix |
300 Gbps |
| IPsec VPN Throughput |
170 Gbps |
| Max Concurrent Sessions |
99 million |
| New Sessions per Second |
3.3 million |
| Virtual Systems (base/max |
25 / 225 |
| Interface Modes |
L2, L3, Tap, Virtual Wire (transparent |
| Routing |
Advanced routing engine; OSPFv2/v3, MP-BGP, RIP, static; PBF; DHCP(v4 server/relay, client v4/v6; Multicast (PIM-SM/SSM, IGMPv2/v3; BFD |
| IPv6 |
Dual-stack & IPv6-only; OSPFv3, MP-BGP, NAT64, NPTv6; DHCPv6 PD; SLAAC server; IPv6 geolocation |
| IPsec VPN |
Manual, IKEv1*, IKEv2; 3DES, AES-128/192/256; MD5, SHA-1/256/384/512; GlobalProtect gateway/portal† |
| SD-WAN |
Path quality measurement (jitter, loss, latency; bandwidth monitoring; multi-VR/LR; Prisma Access Hub; ADEM for NGFW |
| High Availability / Clustering |
NGFW clustering A/A; HA A/P‡ |
| VLANs / LAG |
802.1Q VLANs (4094; 802.3ad & LACP; NAT (static, dynamic, DIP-port, NAT64, NPTv6 |
| Environment Notes |
Results measured on PAN-OS 12.1 |
[/specifications]
[accesories]
| Included (PAN-PA-5580-DC |
4× PAN-PA-5500-PWR-2000-DC; 5× PAN-PA-FAN-2RU-A; PAN-PA-5500-ACC-B accessory kit; PAN-PA-3RU-RACK-A; 2× PAN-SFP-CG; 1× PAN-PA-5500-SSD-3.84TB-PAIR |
| Optional – Spares |
PAN-PA-5500-SSD-3.84TB-PAIR (spare replacement drive; PAN-PA-5500-ACC-A (US AC cable kit, USB, Cat6; PAN-PA-5500-ACC-B (DC cable kit, USB, Cat6 |
[/accesories]
Quantum-Optimized Defense for Next-Gen Data Centers
The Palo Alto Networks PA-5580-DC delivers uncompromising performance and future-proof security for large enterprise and service provider networks. Built around the FE-400 ASIC and powered by Precision AI®, it combines massive 375 Gbps firewall throughput with quantum-safe encryption, ML-driven threat prevention, and unified Strata™ Cloud management. Designed for critical infrastructure, it ensures deep visibility, post-quantum resilience, and predictable performance at scale.
Key Benefits & Features
The PA-5580-DC leads the PA-5500 Series as the highest-capacity model, engineered for hybrid data centers and 5G-native environments. It extends Palo Alto’s Strata™ security to the quantum era with single-pass processing and AI-powered protection.
Quantum-Safe Cryptography
Fully ready for post-quantum cryptography (PQC, the PA-5580-DC supports PQC SSL/TLS decryption, VPN site-to-site encryption, and NIST-approved ML-KEM and SLH-DSA algorithms—protecting data against future quantum threats.
Extreme Performance for High-Demand Networks
Delivering up to 375 Gbps of firewall throughput and 300 Gbps of threat prevention, the PA-5580-DC maintains consistent speed through single-pass architecture and hardware acceleration. It supports 99 million concurrent sessions and over 3.3 million new sessions per second.
AI-Powered Threat Intelligence
Precision AI® and Cloud-Delivered Security Services (CDSS provide proactive protection across web, DNS, SaaS, and GenAI applications—blocking billions of threats daily. Integrated services such as Advanced WildFire® and Advanced DNS Security keep organizations ahead of evolving attack vectors.
Unified Cloud-Based Management
With Strata™ Cloud Manager and Strata Copilot™, administrators gain real-time visibility across all assets, policy recommendations powered by AI, and rapid remediation for compliance and uptime assurance.
Ideal Use Cases
- Large-scale enterprise and carrier-grade data centers requiring 375 Gbps performance
- Organizations securing hybrid or 5G infrastructures with post-quantum readiness
- Cloud and colocation environments demanding zero-trust and ultra-low latency
- Government and financial networks prioritizing cryptographic compliance
Technical Specifications
-
Firewall Throughput (AppMix: 375 Gbps
-
Threat Prevention Throughput: 300 Gbps
-
IPsec VPN Throughput: 170 Gbps
-
Max Concurrent Sessions: 99 million
-
New Sessions per Second: 3.3 million
-
Virtual Systems (Base/Max: 25 / 225
-
Interfaces: 8 × 10/25 G SFP28, 12 × 40/100 G QSFP28, 8 × 100/400 G QSFP-DD
-
Form Factor: 3U rack-mountable (19 in.
-
Power Input: DC −40 V to −60 V, 2 + 2 redundant supply
-
Power Consumption (Avg/Max: 2,100 W / 3,100 W
-
Operating Temperature: 0 °C to 50 °C (32 °F to 122 °F
-
Certifications: FCC Class A, CE, VCCI, cTUVus
Secure the Quantum Future Now
Power your data center with unmatched visibility, performance, and quantum-ready protection. Contact us today to get enterprise-grade defense with the Palo Alto Networks PA-5580-DC.
