[shortdesc] ML-powered NGFW, 1RU rack-mountable, 2.8 Gbps firewall, 1.8 Gbps threat prevention, 1.5 Gbps IPsec VPN, 8× 1G RJ45 [/shortdesc]

[properties]

[/properties]

[specifications]

[/specifications]

[accesories]

[/accesories]

Advanced Security for Distributed Enterprises

The Palo Alto Networks PA-520 is part of the next-generation PA-500 Series, purpose-built for distributed enterprise branches and midsize organizations that require high-performance security in a compact, rack-mountable form. Powered by Precision AI® and PAN-OS® 12.1, the PA-520 delivers a proven 2.8 Gbps firewall throughput and 1.8 Gbps threat prevention, blending machine learning with deep Layer 7 visibility. Designed for zero-touch deployment and centralized management via Strata™ Cloud Manager, it gives network teams complete control with minimal complexity.

Key Benefits & Features

Engineered with Palo Alto’s single-pass architecture and inline ML-driven analysis, the PA-520 protects against advanced threats while maintaining predictable performance even with full security services enabled.

AI-Driven Threat Prevention

With Precision AI®, the PA-520 analyzes and prevents threats in real time, blocking zero-day malware, ransomware, and phishing attacks before they reach users. Inline ML and Advanced WildFire® deliver proactive defense across all traffic.

Cloud-Managed Simplicity

Through Strata Cloud Manager, the PA-520 provides unified visibility and lifecycle management across firewalls, SASE, and SD-WAN environments. Built-in analytics help detect and resolve policy gaps, latency issues, and vulnerabilities rapidly.

High-Performance Single-Pass Architecture

The single-pass architecture processes networking, policy lookup, and threat inspection in one flow, reducing latency and ensuring predictable throughput even under heavy load. This approach enables consistent App-ID™ and User-ID™ enforcement across all traffic.

Quantum-Ready Encryption Support

The PA-520 supports post-quantum cryptography (PQC options for decryption and VPN, helping future-proof data in transit as cryptographic standards evolve.

Ideal Use Cases

• Enterprise branch offices needing high-throughput NGFW protection in a compact form factor.
• Retail and healthcare sites requiring quiet, energy-efficient security devices (Passive Cooling.
• Service providers and managed networks that depend on centralized cloud management.
• Organizations pursuing Zero Trust with user- and application-aware security policies.

Technical Specifications

• Firewall Throughput (AppMix: 2.8 Gbps
• Threat Prevention Throughput: 1.8 Gbps
• IPsec VPN Throughput: 1.5 Gbps
• Max Concurrent Sessions: 148,000
• New Sessions per Second: 25,000
• Interfaces: 8 × 1 GbE RJ-45, 1 × Mgmt RJ-45, USB-C console, USB
• Storage: 120 GB SSD
• Power Consumption: 30 W max
• Cooling: Passive (fanless
• Form Factor: 1U rack-mountable (1.74 in H × 10.4 in D × 8 in W
• Operating Temperature: 32 °F – 104 °F (0 °C – 40 °C
• Certifications: FCC Class A, CE Class A, VCCI Class A

Secure Your Branch with Confidence

Empower your network edge with AI-powered, cloud-managed defense. The Palo Alto Networks PA-520 delivers enterprise-class performance, Precision AI security, and simplified operations in one compact platform.