[shortdesc] A support service contract is required unless your organization has an active Enterprise Support Agreement (ESA). 1-year, 3-year, and 5-year support options are available. Please contact us before fulfillment to confirm the correct support option or any additional Palo Alto licenses you may need.[/shortdesc] [properties] Model PA-560 Product Type Next-Generation Firewall (NGFW) Series PA-500 Series Management Strata™ Cloud Manager, Panorama®; Zero Touch Provisioning (ZTP); Active/Active & Active/Passive HA supported Ports (I/O) 16 × 1G RJ45; 4 × 1G SFP; 4 × 1/10G SFP/SFP+ Management I/O 1 × 10/100/1000 OOB mgmt (RJ45); 1 × USB; 1 × RJ45 console; 1 × USB-C console Storage Capacity 240 GB Rack Unit 1U Cooling Active Dimensions (H × D × W) 1.74 in × 12.1 in × 13 in (43.9 mm H x 307 mm D x 330 mm W) Weight 11.2 lb (Standalone) / 15.6 lbs (As Shipped) Power (Max Consumption) 106 W Input Voltage / Frequency 100–240 VAC / 50–60 Hz Max BTU/hr 361 Operating Temperature 32 °F to 104 °F (0 °C to 40 °C) Storage Temperature −4 °F to 158 °F (−20 °C to 70 °C) Compliance / EMI cTUVus, CB; FCC Class A, CE Class A, VCCI Class A Trusted Platform Module Integrated TPM (secure boot, hardware root of trust) [/properties] [specifications] Firewall Throughput (App-mix) 8.5 Gbps (measured with App-ID & logging enabled on PAN-OS 12.1) Threat Prevention Throughput 6.0 Gbps (App-ID, IPS, AV, anti-spyware, WildFire, DNS Security, file blocking, logging; app-mix) IPsec VPN Throughput 5.5 Gbps (64 KB HTTP transactions; logging enabled) Max Concurrent Sessions 598,000 New Sessions per Second 100,000 Virtual Systems (base/max) 1 / 5 (license required above base) Interface Modes L2, L3, Tap, Virtual Wire (transparent) Routing OSPFv2/v3, MP-BGP, RIP, Static; Policy-based forwarding Advanced SD-WAN Path quality measurement (jitter, loss, latency); bandwidth monitoring; multi-VR/LR; Prisma® Access Hub IPv6 Features Dual-stack / IPv6-only; IPv6 geolocation; OSPFv3; MP-BGP; NAT64; NPTv6; DHCPv6 PD; SLAAC server VPN & Crypto IPsec & SSL VPN; IKEv1/v2 (PSK & cert); 3DES, AES-128/192/256; MD5, SHA-1/256/384/512 VLANs / LAG 802.1Q VLANs (4,094/device & per-interface); 802.3ad & LACP Post-Quantum Readiness PQC SSL/TLS decryption; PQC site-to-site VPN; support for ML-KEM, HQC and others Security Services Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, Advanced DNS Security, Device Security, SaaS Security, AI Access Security Notes Performance results measured on PAN-OS 12.1 [/specifications] [accesories] Optional – Power Adapters PAN-PWR-150W-12V-AC-A (for PA-520/540/550/560) Optional – Rack Mounts PAN-1RU-4POST-RACK-11 (1RU 4-post rack: one PA-560 & two power adapters; other supported combos listed by vendor) [/accesories] High-Performance Security for the Modern Enterprise Edge The Palo Alto Networks PA-560 is the flagship of the PA-500 Series, engineered to deliver enterprise-grade security with industry-leading throughput. Powered by Precision AI® and the PAN-OS® platform, it offers intelligent, inline threat prevention for distributed offices, retail environments, and midsize enterprises, ensuring consistent protection, visibility, and control across users and applications. Key Benefits & Features The PA-560 combines robust performance with deep security intelligence and future-proof hardware, ideal for hybrid and branch deployments requiring both speed and adaptability. AI-Powered Threat Prevention and Real-Time Detection Driven by Precision AI, the PA-560 analyzes and prevents threats in real time, blocking zero-day exploits, phishing, and malware before they can impact operations. With 6.0 Gbps threat prevention throughput, it ensures security does not come at the expense of performance. Post-Quantum Ready Encryption and Decryption Future-proof your security posture with post-quantum cryptography support for PQC SSL/TLS and VPN operations. The PA-560 protects against current and emerging cryptographic threats while ensuring compliance with evolving standards. Zero Touch Provisioning and Centralized Management Deploy rapidly with Zero Touch Provisioning (ZTP) and manage at scale using Strata™ Cloud Manager or Panorama®. Unified visibility across physical, virtual, and SASE deployments enables consistent policy enforcement and simplified operations. Superior Connectivity and Reliability Equipped with 16x 1G RJ45, 4x 1G SFP, and 4x 10G SFP+ ports, the PA-560 delivers flexible integration for diverse network environments. With active cooling and dual AC adapter support, it maintains peak performance under heavy workloads. Ideal Use Cases Enterprise branch offices requiring high-throughput next-gen firewalling. Retail and distributed networks needing centralized, AI-driven protection. Midsize data centers prioritizing throughput, visibility, and advanced encryption. Organizations preparing for quantum-era security through PQC readiness. Technical Specifications Firewall Throughput (AppMix): 8.5 Gbps Threat Prevention Throughput: 6.0 Gbps IPsec VPN Throughput: 5.5 Gbps Max Concurrent Sessions: 598,000 New Sessions per Second: 100,000 Interface Ports: 16x 1G RJ45, 4x 1G SFP, 4x 10G SFP+ Storage: 240 GB SSD Power Consumption: 106W Max Cooling: Active Dimensions: 1.74" H x 12.1" D x 13" W Certifications: FCC Class A, CE Class A, VCCI Class A Operating Temperature: 32°F–104°F (0°C–40°C) Ready to Secure Your Network Edge? Unlock AI-powered security and unstoppable performance with the Palo Alto Networks PA-560.Palo Alto License OptionsThe following subscription licenses are compatible with the Palo Alto PA-560 Firewall. License SKU Subscription License Type PAN-PA-560-ATP 1 Year Advanced Threat Prevention PAN-PA-560-ATP-3YR 3 Year Advanced Threat Prevention PAN-PA-560-ATP-5YR 5 Year Advanced Threat Prevention PAN-PA-560-BND-PRECISIONAI 1 Year Precision AI PAN-PA-560-BND-PRECISIONAI-3YR 3 Year Precision AI PAN-PA-560-BND-PRECISIONAI-5YR 5 Year Precision AI
