[shortdesc] 1U rack-mount, 8.5 Gbps FW, 6 Gbps threat prevention, 598K sessions, 16x 1G RJ45 + 4x SFP + 4x SFP+, Panorama/Strata Cloud managed [/shortdesc]

[properties]

Model	PA-560
Product Type	Next-Generation Firewall (NGFW)
Series	PA-500 Series
Management	Strata™ Cloud Manager, Panorama®; Zero Touch Provisioning (ZTP); Active/Active & Active/Passive HA supported
Ports (I/O)	16 × 1G RJ45; 4 × 1G SFP; 4 × 1/10G SFP/SFP+
Management I/O	1 × 10/100/1000 OOB mgmt (RJ45); 1 × USB; 1 × RJ45 console; 1 × USB-C console
Storage Capacity	240 GB
Rack Unit	1U
Cooling	Active
Dimensions (H × D × W)	1.74 in × 12.1 in × 13 in (43.9 mm H x 307 mm D x 330 mm W)
Weight	11.2 lb (Standalone) / 15.6 lbs (As Shipped)
Power (Max Consumption)	106 W
Input Voltage / Frequency	100–240 VAC / 50–60 Hz
Max BTU/hr	361
Operating Temperature	32 °F to 104 °F (0 °C to 40 °C)
Storage Temperature	−4 °F to 158 °F (−20 °C to 70 °C)
Compliance / EMI	cTUVus, CB; FCC Class A, CE Class A, VCCI Class A
Trusted Platform Module	Integrated TPM (secure boot, hardware root of trust)

[/properties]

[specifications]

Firewall Throughput (App-mix)	8.5 Gbps (measured with App-ID & logging enabled on PAN-OS 12.1)
Threat Prevention Throughput	6.0 Gbps (App-ID, IPS, AV, anti-spyware, WildFire, DNS Security, file blocking, logging; app-mix)
IPsec VPN Throughput	5.5 Gbps (64 KB HTTP transactions; logging enabled)
Max Concurrent Sessions	598,000
New Sessions per Second	100,000
Virtual Systems (base/max)	1 / 5 (license required above base)
Interface Modes	L2, L3, Tap, Virtual Wire (transparent)
Routing	OSPFv2/v3, MP-BGP, RIP, Static; Policy-based forwarding
Advanced SD-WAN	Path quality measurement (jitter, loss, latency); bandwidth monitoring; multi-VR/LR; Prisma® Access Hub
IPv6 Features	Dual-stack / IPv6-only; IPv6 geolocation; OSPFv3; MP-BGP; NAT64; NPTv6; DHCPv6 PD; SLAAC server
VPN & Crypto	IPsec & SSL VPN; IKEv1/v2 (PSK & cert); 3DES, AES-128/192/256; MD5, SHA-1/256/384/512
VLANs / LAG	802.1Q VLANs (4,094/device & per-interface); 802.3ad & LACP
Post-Quantum Readiness	PQC SSL/TLS decryption; PQC site-to-site VPN; support for ML-KEM, HQC and others
Security Services	Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, Advanced DNS Security, Device Security, SaaS Security, AI Access Security
Notes	Performance results measured on PAN-OS 12.1

[/specifications]

[accesories]

Optional – Power Adapters	PAN-PWR-150W-12V-AC-A (for PA-520/540/550/560)
Optional – Rack Mounts	PAN-1RU-4POST-RACK-11 (1RU 4-post rack: one PA-560 & two power adapters; other supported combos listed by vendor)

[/accesories]

High-Performance Security for the Modern Enterprise Edge

The Palo Alto Networks PA-560 is the flagship of the PA-500 Series, engineered to deliver enterprise-grade security with industry-leading throughput. Powered by Precision AI® and the PAN-OS® platform, it offers intelligent, inline threat prevention for distributed offices, retail environments, and midsize enterprises, ensuring consistent protection, visibility, and control across users and applications.

Key Benefits & Features

The PA-560 combines robust performance with deep security intelligence and future-proof hardware, ideal for hybrid and branch deployments requiring both speed and adaptability.

AI-Powered Threat Prevention and Real-Time Detection

Driven by Precision AI, the PA-560 analyzes and prevents threats in real time, blocking zero-day exploits, phishing, and malware before they can impact operations. With 6.0 Gbps threat prevention throughput, it ensures security does not come at the expense of performance.

Post-Quantum Ready Encryption and Decryption

Future-proof your security posture with post-quantum cryptography support for PQC SSL/TLS and VPN operations. The PA-560 protects against current and emerging cryptographic threats while ensuring compliance with evolving standards.

Zero Touch Provisioning and Centralized Management

Deploy rapidly with Zero Touch Provisioning (ZTP) and manage at scale using Strata™ Cloud Manager or Panorama®. Unified visibility across physical, virtual, and SASE deployments enables consistent policy enforcement and simplified operations.

Superior Connectivity and Reliability

Equipped with 16x 1G RJ45, 4x 1G SFP, and 4x 10G SFP+ ports, the PA-560 delivers flexible integration for diverse network environments. With active cooling and dual AC adapter support, it maintains peak performance under heavy workloads.

Ideal Use Cases

• Enterprise branch offices requiring high-throughput next-gen firewalling.
• Retail and distributed networks needing centralized, AI-driven protection.
• Midsize data centers prioritizing throughput, visibility, and advanced encryption.
• Organizations preparing for quantum-era security through PQC readiness.

Technical Specifications

• Firewall Throughput (AppMix): 8.5 Gbps
• Threat Prevention Throughput: 6.0 Gbps
• IPsec VPN Throughput: 5.5 Gbps
• Max Concurrent Sessions: 598,000
• New Sessions per Second: 100,000
• Interface Ports: 16x 1G RJ45, 4x 1G SFP, 4x 10G SFP+
• Storage: 240 GB SSD
• Power Consumption: 106W Max
• Cooling: Active
• Dimensions: 1.74" H x 12.1" D x 13" W
• Certifications: FCC Class A, CE Class A, VCCI Class A
• Operating Temperature: 32°F–104°F (0°C–40°C)

Ready to Secure Your Network Edge?

Unlock AI-powered security and unstoppable performance with the Palo Alto Networks PA-560.