[shortdesc]A support service contract is required unless your organization has an active Enterprise Support Agreement (ESA). 1-year, 3-year, and 5-year support options are available. Please contact us before fulfillment to confirm the correct support option or any additional Palo Alto licenses you may need.[/shortdesc]
[properties]
| Model |
PA-5580 |
| Product Type |
Next-Generation Firewall (NGFW) |
| Form Factor / Rack |
3U, 19" standard rack |
| Dimensions (H × D × W) |
5.2" × 29.8" × 17.3" |
| Weight |
70 lb (standalone); 116 lb (as shipped) |
| Airflow |
Front to back (port side to power supply side) |
| Operating Temperature |
0–50 °C (32–122 °F) |
| Storage Temperature |
−20–70 °C (−4–158 °F) |
| Humidity (Operating) |
10%–90% |
| Max Operating Altitude |
3,048 m (10,000 ft) |
| I/O Ports (Data) |
10/25G SFP28 (8); 40/100G QSFP28 (12); 100/400G QSFP-DD (8) |
| Management / Aux I/O |
Mgmt 1G/10G SFP+ (2); RJ-45 console; USB-C; USB 3.2 Gen1 Type-A (bootstrap); HSCI 100/400G QSFP-DD (2); Log 10G SFP+ (2) |
| Storage |
Optional 3.84 TB RAID1 SSD pair (cold swap) |
| Input Voltage (DC) |
−40 to −60 VDC |
| Power Supply Output (DC) |
2,200 W per supply |
| Redundancy |
2+2 redundant for 220 V and DC; 3+1 redundant for 110 V |
| Max BTU/hr |
1638 |
| Max / Inrush Current (DC) |
43.7 A @ 54 VDC / 25 A @ 54 VDC |
| MTBF (Series) |
6.3 years (PA-5560/PA-5570/PA-5580) |
| Safety / EMI |
cTUVus, CB / FCC Class A, CE Class A, VCCI Class A |
[/properties]
[specifications]
| Firewall Throughput (appmix) |
375 Gbps |
| Threat Prevention Throughput (appmix) |
300 Gbps |
| IPsec VPN Throughput |
170 Gbps |
| Max Concurrent Sessions |
99 million |
| New Sessions per Second |
3.3 million |
| Virtual Systems (base/max) |
25 / 225 |
| Interface Modes |
L2, L3, Tap, Virtual Wire (transparent) |
| Routing |
Advanced routing engine; OSPFv2/v3, MP-BGP, RIP, static; PBF; DHCP(v4 server/relay, client v4/v6); Multicast (PIM-SM/SSM, IGMPv2/v3); BFD |
| IPv6 |
Dual-stack & IPv6-only; OSPFv3, MP-BGP, NAT64, NPTv6; DHCPv6 PD; SLAAC server; IPv6 geolocation |
| IPsec VPN |
Manual, IKEv1*, IKEv2; 3DES, AES-128/192/256; MD5, SHA-1/256/384/512; GlobalProtect gateway/portal† |
| SD-WAN |
Path quality measurement (jitter, loss, latency); bandwidth monitoring; multi-VR/LR; Prisma Access Hub; ADEM for NGFW |
| High Availability / Clustering |
NGFW clustering A/A; HA A/P‡ |
| VLANs / LAG |
802.1Q VLANs (4094); 802.3ad & LACP; NAT (static, dynamic, DIP-port), NAT64, NPTv6 |
| Environment Notes |
Results measured on PAN-OS 12.1 |
[/specifications]
[accesories]
| Included (PAN-PA-5580-DC) |
4× PAN-PA-5500-PWR-2000-DC; 5× PAN-PA-FAN-2RU-A; PAN-PA-5500-ACC-B accessory kit; PAN-PA-3RU-RACK-A; 2× PAN-SFP-CG; 1× PAN-PA-5500-SSD-3.84TB-PAIR |
| Optional – Spares |
PAN-PA-5500-SSD-3.84TB-PAIR (spare replacement drive); PAN-PA-5500-ACC-A (US AC cable kit, USB, Cat6); PAN-PA-5500-ACC-B (DC cable kit, USB, Cat6) |
[/accesories]
Quantum-Optimized Defense for Next-Gen Data Centers
The Palo Alto Networks PA-5580-DC delivers uncompromising performance and future-proof security for large enterprise and service provider networks. Built around the FE-400 ASIC and powered by Precision AI®, it combines massive 375 Gbps firewall throughput with quantum-safe encryption, ML-driven threat prevention, and unified Strata™ Cloud management. Designed for critical infrastructure, it ensures deep visibility, post-quantum resilience, and predictable performance at scale.
Key Benefits & Features
The PA-5580-DC leads the PA-5500 Series as the highest-capacity model, engineered for hybrid data centers and 5G-native environments. It extends Palo Alto’s Strata™ security to the quantum era with single-pass processing and AI-powered protection.
Quantum-Safe Cryptography
Fully ready for post-quantum cryptography (PQC), the PA-5580-DC supports PQC SSL/TLS decryption, VPN site-to-site encryption, and NIST-approved ML-KEM and SLH-DSA algorithms—protecting data against future quantum threats.
Extreme Performance for High-Demand Networks
Delivering up to 375 Gbps of firewall throughput and 300 Gbps of threat prevention, the PA-5580-DC maintains consistent speed through single-pass architecture and hardware acceleration. It supports 99 million concurrent sessions and over 3.3 million new sessions per second.
AI-Powered Threat Intelligence
Precision AI® and Cloud-Delivered Security Services (CDSS) provide proactive protection across web, DNS, SaaS, and GenAI applications—blocking billions of threats daily. Integrated services such as Advanced WildFire® and Advanced DNS Security keep organizations ahead of evolving attack vectors.
Unified Cloud-Based Management
With Strata™ Cloud Manager and Strata Copilot™, administrators gain real-time visibility across all assets, policy recommendations powered by AI, and rapid remediation for compliance and uptime assurance.
Ideal Use Cases
- Large-scale enterprise and carrier-grade data centers requiring 375 Gbps performance
- Organizations securing hybrid or 5G infrastructures with post-quantum readiness
- Cloud and colocation environments demanding zero-trust and ultra-low latency
- Government and financial networks prioritizing cryptographic compliance
Technical Specifications
-
Firewall Throughput (AppMix): 375 Gbps
-
Threat Prevention Throughput: 300 Gbps
-
IPsec VPN Throughput: 170 Gbps
-
Max Concurrent Sessions: 99 million
-
New Sessions per Second: 3.3 million
-
Virtual Systems (Base/Max): 25 / 225
-
Interfaces: 8 × 10/25 G SFP28, 12 × 40/100 G QSFP28, 8 × 100/400 G QSFP-DD
-
Form Factor: 3U rack-mountable (19 in.)
-
Power Input: DC −40 V to −60 V, 2 + 2 redundant supply
-
Power Consumption (Avg/Max): 2,100 W / 3,100 W
-
Operating Temperature: 0 °C to 50 °C (32 °F to 122 °F)
-
Certifications: FCC Class A, CE, VCCI, cTUVus
Secure the Quantum Future Now
Power your data center with unmatched visibility, performance, and quantum-ready protection. Contact us today to get enterprise-grade defense with the Palo Alto Networks PA-5580-DC.
