[shortdesc] High-performance NGFW, ML-powered prevention, 3.8 Gbps firewall, 2.2 Gbps threat prevention, 8× 1G RJ45 + 2× 1G SFP, Zero Touch Provisioning [/shortdesc]
[properties]
| Model |
PA-540 |
| Product Type |
Next-Generation Firewall (NGFW |
| Management |
Strata Cloud Manager; Zero Touch Provisioning |
| Firewall Throughput |
3.8 Gbps (appmix |
| Threat Prevention Throughput |
2.2 Gbps (appmix |
| IPsec VPN Throughput |
2.0 Gbps |
| Max Concurrent Sessions |
248,000 |
| New Sessions per Second |
50,000 |
| Virtual Systems (base/max |
1 / 2 |
| Ports |
8 × 1G RJ45; 2 × 1G SFP |
| Management I/O |
1 × 10/100/1000 Mgmt; 1 × RJ45 console; 1 × USB-C console; 1 × USB |
| Storage |
120 GB SSD |
| Form Factor |
1U rack-mountable |
| Cooling |
Passive |
| Power Consumption (Max |
30 W |
| Input Voltage |
100–240 VAC, 50–60 Hz |
| Max BTU/hr |
102 |
| Max Current |
4 A @ 12 VDC |
| Dimensions (H × D × W |
1.74 in × 10.4 in × 8 in |
| Weight (device / as shipped |
5.8 lb / 8 lb |
| Operating Temperature |
0 °C to 40 °C (32 °F to 104 °F |
| Safety / EMI |
cTUVus, CB; FCC Class A, CE Class A, VCCI Class A |
[/properties]
[specifications]
| Interface Modes |
L2, L3, tap, virtual wire |
| Routing |
OSPFv2/v3, MP-BGP, RIP, static; policy-based forwarding |
| SD-WAN |
Path quality measurement, bandwidth monitoring, Prisma Access Hub, ADEM support |
| IPv6 |
Dual-stack and IPv6-only; OSPFv3, MP-BGP, NAT64, NPTv6; IPv6 inspection |
| VPN |
IPsec and SSL VPN; IKEv1/v2, manual key; pre-shared key and certificate auth |
| Crypto (examples |
3DES, AES-128/192/256; MD5, SHA-1/256/384/512; TLS |
| Post-Quantum |
PQC for SSL/TLS decryption and VPN; supports ML-KEM, HQC and others |
| Decryption |
SSL/TLS inbound and outbound; TLSv1.1/1.2/1.3 and app protocols incl. HTTP/2 |
| VLANs / LAG |
802.1Q up to 4,094; 802.3ad and LACP |
| I/O Detail |
8 × 1G RJ45 data; 2 × 1G SFP; Mgmt RJ45; RJ45 console; USB-C console; 2 × USB |
| Security Services |
Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, Advanced DNS Security, Device/SaaS/AI Access Security |
| Storage |
120 GB SSD |
| Power |
AC 100–240 V, 50–60 Hz; 30 W max |
| Dimensions |
1.74 in × 10.4 in × 8 in |
| Weight |
5.8 lb |
| Environmental |
Operating 0–40 °C; Non-operating −20–70 °C |
| Compliance |
cTUVus, CB; FCC/CE/VCCI Class A |
[/specifications]
[accesories]
| Optional - Power Supplies |
PAN-PWR-150W-12V-AC-A - 150 W spare power adapter (for PA-520, PA-540, PA-550, PA-560 |
| Optional - Rack Mounts |
PAN-1RU-4POST-RACK-11 - 1RU 4-post rack mount supporting two PA-540 units |
[/accesories]
AI-Powered Security for Demanding Enterprise Networks
The Palo Alto Networks PA-540 delivers next-generation firewall protection built for distributed enterprises, retail environments, and midsize organizations needing uncompromising performance. Powered by Precision AI® and the PAN-OS® platform, this cloud-managed firewall provides 3.8 Gbps firewall throughput and deep Layer 7 inspection to block sophisticated attacks in real time while simplifying network management through Strata™ Cloud Manager.
Key Benefits & Features
With advanced ML-powered detection and flexible deployment, the PA-540 secures branch and core environments efficiently. It offers unified visibility, zero-touch provisioning (ZTP, and advanced analytics for proactive defense.
High-Performance Firewall and Threat Prevention
Featuring 3.8 Gbps firewall throughput and 2.2 Gbps threat prevention, the PA-540 ensures consistent, predictable performance even under heavy loads. Its single-pass architecture minimizes latency while scanning traffic across multiple services simultaneously.
Precision AI for Real-Time Threat Defense
Powered by Precision AI®, the PA-540 continuously learns from global threat intelligence, blocking zero-day malware, ransomware, and phishing attempts inline without signature dependence. This proactive defense model provides enterprise-grade protection with minimal manual tuning.
Zero Touch Provisioning & Centralized Management
Deploy firewalls in minutes with Zero Touch Provisioning (ZTP. Manage configurations, policies, and threat analytics via Strata Cloud Manager, Palo Alto’s unified AI-driven platform that reduces operational complexity and strengthens your security posture.
High Availability and Future-Ready Architecture
Support for active/active or active/passive HA modes ensures maximum uptime. With post-quantum cryptography (PQC readiness, the PA-540 prepares your network for next-generation encryption standards, ensuring long-term resilience against evolving threats.
Ideal Use Cases
- Distributed enterprise branches requiring AI-driven, high-throughput NGFW performance.
- Retail and healthcare environments demanding consistent protection and simplified management.
- Midsized businesses with hybrid cloud deployments and VPN requirements.
- Organizations implementing Zero Trust architectures with dynamic identity enforcement.
Technical Specifications
-
Firewall Throughput (AppMix: 3.8 Gbps
-
Threat Prevention Throughput: 2.2 Gbps
-
IPsec VPN Throughput: 2.0 Gbps
-
Max Concurrent Sessions: 248,000
-
New Sessions per Second: 50,000
-
Ports: 8x 1G RJ45, 2x 1G SFP
-
Storage Capacity: 120 GB SSD
-
Power Consumption: 30W max
-
Form Factor: 1U Rack-mountable
-
Dimensions: 1.74” H x 10.4” D x 8” W
-
Certifications: FCC Class A, CE Class A, VCCI Class A
-
Operating Temperature: 0°C – 40°C
Secure, Scalable, and Built for the Future
Empower your network with AI-driven performance, intelligent visibility, and future-ready cryptographic support. The Palo Alto Networks PA-540 delivers the perfect balance of speed, security, and simplicity for growing enterprises.
