[shortdesc]A support service contract is required unless your organization has an active Enterprise Support Agreement (ESA). 1-year, 3-year, and 5-year support options are available. Please contact us before fulfillment to confirm the correct support option or any additional Palo Alto licenses you may need. [/shortdesc] [properties] Model PA-5540 Product Type Quantum Optimized Next-Generation Firewall (NGFW) Operating System PAN-OS Firewall Throughput (appmix) 150 Gbps Threat Prevention Throughput (appmix) 90 Gbps IPsec VPN Throughput 80 Gbps Max Concurrent Sessions 39 Million (39M) New Sessions per Second 1.33 Million (1.33M) Virtual Systems (Base/Max) 25 / 225 Form Factor / Dimensions 3U, 19” standard rack; 5.2” H × 29.8” D × 17.3” W I/O Ports 16× 10G/25G SFP28; 16× 40G/100G QSFP28; 4× 100G/400G QSFP-DD Management I/O 2× 1G/10G SFP+ (OOB Mgmt); RJ-45 console; USB-C console; USB 3.2 Gen1 Type-A (bootstrap); 2× 100G/400G QSFP-DD (HSCI); 2× 10G SFP+ (Log) Storage Optional 3.84 TB RAID1 SSD pair (cold swap) Power Type DC (Direct Current) Input Voltage (DC) −40 VDC to −60 VDC Power Consumption (Avg/Max) 2,100 W / 3,100 W Power Supplies 2+2 redundant for DC Power Supply Output (DC) 2,200 W per power supply Max Current (DC) 43.7 A @ 54 VDC Thermal (Max BTU/hr) 1638 Airflow Front to back (port side to power supply side) Operating Temperature 32 °F to 122 °F (0 °C to 50 °C) Non-operating Temperature −4 °F to 158 °F (−20 °C to 70 °C) Humidity 10%–90% Maximum Altitude 10,000 ft (3,048 m) MTBF 8.1 years Safety / EMI cTUVus, CB / FCC Class A, CE Class A, VCCI Class A [/properties] [specifications] Interface Modes L2, L3, tap, virtual wire (transparent) (L2 not available on MC-LAG aggregate interfaces) Routing Advanced routing engine; OSPFv2/v3, MP-BGP, RIP, static; policy-based forwarding; PPPoE, DHCP client; DHCPv4 server/relay; Multicast (PIM-SM/SSM, IGMPv2/v3); BFD & multihop BFD Advanced SD-WAN Path quality (jitter, loss, latency) measurement, bandwidth monitoring, manual/IKEv1/IKEv2 key exchange, post-quantum PPK, multi-VR/LR support over overlay, Prisma Access Hub, ADEM support IPv6 L2/L3/tap/virtual wire inspection; dual-stack & IPv6-only; IPv6 geolocation, OSPFv3, MP-BGP, NAT64, NPTv6; DHCPv6 client (PD) & SLAAC server IPsec VPN Manual, IKEv1/IKEv2; Encryption: 3DES, AES-128/192/256; Authentication: MD5, SHA-1/256/384/512; GlobalProtect Large Scale VPN; Secure access over IPsec/SSL VPN tunnels via GlobalProtect VLANs / LAG 802.1Q VLAN tags: 4,094 per device or per interface; 802.3ad aggregate interfaces & LACP NAT Static IP, dynamic IP, dynamic IP & port (PAT); NAT64, NPTv6; dynamic IP reservation, tunable dynamic IP, port oversubscription High Availability / Clustering NGFW clustering (active/active); HA active/passive Mobile Network 5G security (Future release; not supported with NGFW clustering) Management Managed with Strata™ Cloud Manager, the industry's first AI-powered unified management and operations solution. [/specifications] [accesories] Included in the box (DC SKU) 4× PAN-PA-5500-PWR-2000-DC; 5× PAN-PA-FAN-2RU-A; 1× PAN-PA-5500-ACC-B accessory kit; 1× PAN-PA-3RU-RACK-A; 2× PAN-SFP-CG; 1× PAN-PA-5500-SSD-3.84TB-PAIR Spare – SSD Pair PAN-PA-5500-SSD-3.84TB-PAIR (spare replacement drive) Spare – Accessory Kit (AC) PAN-PA-5500-ACC-A (includes 4× PAN-PWR-C19-US-120V cable, 1× USB cable, and 1× Cat6 cable) Spare – Accessory Kit (DC) PAN-PA-5500-ACC-B (includes 4× PAN-PWR-DC-CBL-C cable, 1× USB cable, and 1× Cat6 cable) [/accesories] Solve High-Speed Edge Risk with Quantum-Ready Security Growing east-west traffic, encrypted threats, and 100/400G uplinks put pressure on legacy edge firewalls. The Palo Alto Networks PA-5540-DC delivers data-center-class performance in a compact 3U chassis with Precision AI defenses and post-quantum cryptography readiness, giving you predictable security at scale without compromising throughput. Key Benefits & Features Quantum-Optimized & PQC-Ready NGFW Designed as the world's first quantum-optimized Next-Generation Firewall (NGFW), the PA-5500 Series supports PQC use cases (PQC TLS decryption and PQC site-to-site VPN) and includes a PCIe slot for future PQ capabilities—ideal for long-lived data and compliance roadmaps. Inline Prevention at Data-Center Speeds Achieve 150 Gbps firewall throughput (AppMix) and 90 Gbps Threat Prevention, plus 80 Gbps IPsec VPN, 39M max concurrent sessions, and 1.33M new sessions per second—built for large east-west and internet edge workloads. 100/400G I/O for Modern Fabrics Connect fabrics and spines with a high-density I/O of 16 × 10G/25G SFP28, 16 × 40G/100G QSFP28, and 4 × 100G/400G QSFP-DD ports; dedicated management and logging ports simplify operations. Unified, AI-Powered Operations with Strata Cloud Manager Operate at scale with Strata Cloud Manager, the industry's first AI-powered unified management solution. Leverage Strata Copilot for policy hygiene, anomaly detection, proactive issue resolution, and faster troubleshooting, unified across NGFW, SASE, and security services. App- and User-Aware Control PAN-OS natively classifies all traffic, including applications, threats, and content, tying them to the user regardless of location. App-ID and identity-based policies deliver precise Layer-7 control, safe SaaS access, and zero-trust segmentation without port-based guesswork. Ideal Use Cases for the PA-5540-DC Internet Gateways and Data-Center Edges consolidating high-bandwidth threat prevention with 100G/400G connectivity. Service Provider POPs needing predictable, low-latency performance and massive session scale. 5G-Native and Encrypted Traffic Environments planning for PQC migration and requiring 5G identifier-based visibility. Enterprises standardizing on AI-assisted, centralized policy and lifecycle management to strengthen their security posture. Technical Specifications at a Glance Firewall Throughput (AppMix): 150 Gbps Threat Prevention Throughput: 90 Gbps IPsec VPN Throughput: 80 Gbps Max Concurrent Sessions / New SPS: 39M / 1.33M Interfaces: 16 × 10/25G SFP28; 16 × 40/100G QSFP28; 4 × 100/400G QSFP-DD Form Factor & Airflow: 3U, front-to-back Power (DC Model): −40 to −60 VDC input, 2+2 redundant DC PSUs High Availability: NGFW clustering (Active/Active) and HA (Active/Passive) Lock Down Your Edge with Headroom to Grow Ready for quantum-safe futures and 400G fabrics, the Palo Alto Networks PA-5540-DC delivers the performance, visibility, and manageability modern, high-speed network edges demand.
