>
    Strata Copilot
    Hardware Features
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Features Introduced in PAN-OS 12.1
    4. Hardware Features
    Download PDF
    Next-Generation Firewall

    Hardware Features

    Table of Contents

    Hardware Features

    What new hardware features are in PAN-OS 12.1?
    The following section describes new hardware features introduced in PAN-OS 12.1.

    PA-520-5G Next-Generation Firewall

    September 2026
    • Introduced in PAN-OS 12.1.10.
    When your enterprise branch loses its wired WAN connection, operations stop — the PA-520-5G eliminates that risk by embedding a 5G Sub-6 GHz cellular modem directly into the compact PA-520 chassis, so you get a built-in backup or primary internet link without adding separate hardware.
    The PA-520-5G fits enterprise branch, retail, and managed services environments. It delivers 3.0 Gbps App-ID™ throughput, 1.5 Gbps threat prevention, and 150,000 concurrent sessions while adding integrated 5G connectivity through an embedded Sierra EM9293 modem. Dual nano SIM slots operate in active/standby mode, so you can provision two carriers and enable failover if the primary SIM loses signal.
    You decide how to deploy the cellular interface: as a primary WAN link when no wired connection is available, as a standby backup that activates when the primary fails, or as a secondary link running in parallel with wired WAN. The firewall applies the same security policy across traffic profiles regardless of which interface carries it.
    Two SFP ports extend your fiber connectivity options, and a built-in fail-to-wire port pair supports inline bypass deployment. Zero Touch Provisioning (ZTP) works over both the cellular and Ethernet interfaces simultaneously, so the firewall can receive its configuration before a wired WAN link is established. You can also upgrade cellular modem firmware over the air, reducing the operational overhead of managing branch deployments at scale. You can manage this firewall using PAN-OS, Panorama, and Strata Cloud Manager.

    PA-501 Next-Generation Firewall

    February 2026
    • Introduced in PAN-OS 12.1.4-h2.
    The PA-501 Next-Generation firewall builds on the PA-400 Series foundation with focused enhancements designed to address a wider range of small-scale deployment use cases, including branch offices, retail environments, and managed security services. The PA-501 offers seven RJ-45 ports for flexible connectivity and delivers 500 Mbps of threat prevention performance, aligning security capability with cost-conscious deployments.
    The PA-501 has 128 GB of onboard storage and supports local logging. Additionally, Zero Touch Provisioning (ZTP) and high-availability support simplify deployment and operational continuity across distributed environments.
    The PA-501 is supported starting with PAN-OS 12.1.4-h2 and can be managed through CLI, Firewall Web Interface, or Panorama, ensuring consistency with existing operational models.

    PA-505 and PA-510 Next-Generation Firewalls

    September 2025
    • Introduced in PAN-OS 12.1.3.
    The PA-505 and PA-510 firewalls upgrade the capabilities of earlier PA-400 Series models with targeted enhancements for small branch offices, retail locations, and managed security service environments. The PA-505 features seven RJ-45 ports and the PA-510 features eight RJ-45 ports for connectivity. These platforms have threat performance of 800 Mbps to 1.2 Gbps. The PA-505 in particular includes upgraded memory from 8GB to 16GB and increased storage from 64GB to 128GB. Both of these models support local logging, Zero Touch Provisioning (ZTP), and high availability deployments.
    The PA-505 and PA-510 are first supported on PAN-OS® version 12.1.3. You can manage these firewalls through multiple interfaces including CLI, Firewall Web Interface, Panorama, and Strata Cloud Manager.

    PA-455R-5G Next-Generation Firewall

    August 2025
    • Introduced in PAN-OS 12.1.2.
    Securing industrial or remote outdoor environments often requires robust networking hardware capable of operating safely in harsh conditions. The PA-455R-5G Next-Generation Firewall addresses this challenge while also offering a solution to 5G cellular requirements.
    The firewall ships in a secure, rugged casing that allows you to install it in outdoor environments; the rugged casing enables the firewall to operate safely even when exposed to otherwise hazardous elements such as wind, rain, and high temperatures.
    The PA-455R-5G supports PAN-OS® 12.1.2 and later versions. The firewall features connectors on which you can install a 4x4 MIMO antenna as well as two nano (4FF) SIM card slots you can use to enable connectivity with two different mobile network providers. The I/O panel of the device includes two SFP/RJ-45 combo ports and six RJ-45 ports that offer 10/100/1000Mbps network speeds.
    The PA-455R-5G runs on AC power and has four dedicated PoE (power over Ethernet) ports to extend up to 180W of power to a connected device. The PA-455R-5G has a fanless design, makes use of waterproof cabling, and mounts securely onto a wall or a pole.

    PA-500 Series Next-Generation Firewall

    August 2025
    • Introduced in PAN-OS 12.1.2.
    The PA-500 Series firewalls are Palo Alto Networks latest Next-Generation Firewall (NGFW) family designed to expand capabilities for modern enterprise branch, retail, and managed service deployments. The PA-500 Series consists of the PA-520, PA-540, PA-545-POE, PA-550, PA-555-POE, and PA-560. These devices run on PAN-OS versions 12.1.2 and later.
    All PA-500 Series models support local logging. They host a wide variety of RJ-45, Multi-Gig RJ-45, SFP, and SFP+ connectivity options with threat performance of up to 6 Gbps.
    • The PA-520 provides eight RJ-45 ports with 1.8 Gbps in threat performance. The PA-540 has eight RJ-45 ports plus two SFP interfaces, with a threat performance of 2.2 Gbps. Both models have a convenient reset button as well as voltage monitoring.
    • The PA-545-POE, PA-550, and PA-555-POE extend on the capabilities of the previously mentioned models. They include different combinations of SFP and SFP+ ports, twelve RJ-45 ports, fail-to-wire functionality for critical network uptime, and threat throughput of 3 Gbps to up to 6 Gbps. The PA-560 expands the connectivity to a total of twenty-four ports, consisting of sixteen RJ-45 and eight SFP/SFP+ interfaces.
    • The PA-545-POE and PA-555-POE add Power over Ethernet capability to address deployment scenarios where you need to connect POE enabled devices such as IP-phones, cameras, and printers. The PA-545-POE provides 181 W PoE budget across four ports, while the PA-555-POE delivers 330 W across eight ports, supporting high-power devices like security cameras and wireless access points.
    All PA-500 Series firewalls support ZTP (Zero Touch Provisioning), which streamlines the onboarding and provisioning process. You can manage these firewalls using familiar PAN-OS management through the CLI, web interface, Panorama, and Strata Cloud Manager. With comprehensive security features including SSL decryption and high availability, you gain access to a powerful, versatile platform that can secure your network edge while providing the flexibility needed for modern, distributed network architectures.

    PA-5500 Series Next-Generation Firewall

    August 2025
    • Introduced in PAN-OS 12.1.2.
    The PA-5500 Series is a new line of Next-Generation Firewalls (NGFW) that delivers high-performance security for enterprise data centers and service provider environments. These 3RU fixed-configuration firewalls leverage the latest processors and Palo Alto Network’s custom FE400 ASIC for dedicated security processing.
    The PA-5500 Series consists of the PA-5540, PA-5550, PA-5560, PA-5570, and PA-5580 firewalls. The PA-5500 Series firewalls support PAN-OS 12.1.2 onwards and can make use of Panorama or Strata Cloud Manager to enhance the management of devices and operations.
    The PA-5500 Series leverages Palo Alto Networks' App-ID, User-ID, and Content-ID technologies to deliver precise traffic control, user-based policy enforcement, and comprehensive content inspection for superior network security and management. CDSS such as Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, and Advanced DNS Security provide multilayered protection against sophisticated attacks. These capabilities enable you to securely enable applications and protect critical assets.
    The PA-5500 Series offers threat prevention throughput from 90 Gbps to 300 Gbps, up to 99 million sessions, and connection rates up to 3 million per second. The firewalls feature flexible connectivity options with multiple 400 Gbps, 100/40Gbps and 25/10Gbps interfaces to accommodate high-bandwidth networks.
    The PA-5500 Series firewalls support NGFW clustering.

    © 2026 Palo Alto Networks, Inc. All rights reserved.