SKU	PAN-PA-455
Performance and Capacities
Firewall throughput (HTTP/appmix)	3.2/3.3 Gbps
Threat Prevention throughput (HTTP/appmix)	1.6/2 Gbps
IPsec VPN throughput	TBD
Max sessions	300,000
New sessions per second	TBD
Virtual systems (base/max)	1/5
Hardware Specifications
I/O	1G SFP/RJ45 combo (2) 1G RJ45 (2) 1G RJ45/PoE (4)
Management I/O	10/100/1000 out-of-band management port (1) RJ45 console port (1) USB port (2) Micro USB console port (1)
Power Over Ethernet (PoE)	PoE 1G RJ45 ports (4) Total PoE Power Budget: 91 W Maximum loading on single port: 60 W
Storage Capacity	128 GB eMMC
Power Supply (Avg/Max Power Consumption)	50/60 W
Max BTU/hr	205
Input Voltage (Input Frequency)	100–240 VAC (50–60Hz)
Max Current Consumption	5 A @ 12 VDC
Max Inrush Current	4.4 A
Dimensions	1.7" H x 9.4" D x 15.4" W
Weight (Standalone Device/As Shipped)	9.8 lbs/14.1 lbs
Safety	cTUVus, CB
EMI	FCC Class B, CE Class B, VCCI Class B
Environment	Operating temperature: 32° to 104° F, 0° to 40° C Non-operating temperature: -4° to 158° F, -20° to 70° C Passive cooling

PA-400 Series Networking Features
Interface Modes	L2, L3, tap, virtual wire (transparent mode)
Routing	OSPFv2/v3 with graceful restart, BGP with graceful restart, RIP, static routing Policy-based forwarding Point-to-Point Protocol over Ethernet (PPPoE) Multicast: PIM-SM, PIM-SSM, IGMP v1, v2, and v3
SD-WAN	Path quality measurement (jitter, packet loss, latency) Initial path selection (PBF) Dynamic path change
IPv6	L2, L3, tap, virtual wire (transparent mode) Features: App-ID, User-ID, Content-ID, WildFire, and SSL Decryption SLAAC
IPsec VPN	Key exchange: manual key, IKEv1, and IKEv2 (pre-shared key, certificate-based authentication) Encryption: 3DES, AES (128-bit, 192-bit, 256-bit) Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
VLANs	802.1Q VLAN tags per device/per interface: 4,094/4,094 Aggregate interfaces (802.3ad), LACP

PA-400 Series Hardware
Palo Alto Networks PA-455	#PAN-PA-455
PA-455 - Bundle Subscriptions for 36 months
GlobalProtect subscription, 3 years (36 months) term.	#PAN-PA-455-GP-3YR
PA-455, Threat prevention subscription, 3 years (36 months), term	#PAN-PA-455-TP-3YR
PA-455, PAN-DB URL Filtering subscription, 3 years (36 months), term.	#PAN-PA-455-URL4-3YR
PA-455, WildFire subscription, 3 years (36 months), term.	#PAN-PA-455-WF-3YR
PA-455, DNS security subscription, 3 years (36 months), term.	#PAN-PA-455-DNS-3YR
PA-455, Advanced URL Filtering subscription, 3 years (36 months) term.	#PAN-PA-455-ADVURL-3YR
PA-455, DLP subscription, 3 years (36 months), term.	#PAN-PA-455-DLP-3YR
PA-455, IoT subscription, 3 years (36 months) term	#PAN-PA-455-IOT-3YR
SaaS Inline subscription, 3 years (36 months) term	#PAN-PA-455-SAAS-INLINE-3YR
Advanced Threat
PA-455, Advanced Threat, 3 years (36 months) term.	#PAN-PA-455-ATP-3YR
PA-455, Advanced Wild Fire subscription, 3 years (36 months) term.	#PAN-PA-455-AWF-3YR

Detect and Prevent Advanced Threats with Cloud-Delivered Security Services

Advanced Threat Prevention: Stop known exploits, malware, malicious URLs, spyware, and com-mand and control (C2) with 96% prevention of web-based Cobalt Strike C2 and 48% more unknown C2 detected than the industry’s leading intrusion prevention (IPS) solution.
Advanced WildFire malware prevention: Ensure files are safe by automatically detecting and preventing unknown malware 180x faster with the industry’s largest threat intelligence and malware prevention engine
Advanced URL Filtering: Enable safe access to the internet with the industry’s first real-time preven-tion of known and unknown websites, stopping 76% of malicious URLs 24 hours before other vendors
DNS Security: Gain 40% more DNS-attack coverage and disrupt the 80% of attacks that use DNS for command and control and data theft without requiring any changes to your infrastructure.
Enterprise DLP: Minimize risk of a data breach, stop out-of-policy data transfers, and enable compliance consistently across your enterprise with 2x greater coverage of any cloud-delivered enterprise DLP
SaaS Security: Stay ahead of the SaaS explosion with the industry’s only Next-Generation CASB to automatically see and secure all apps across all protocols.
IoT Security: Safeguard every “thing” and implement Zero Trust device security 20x faster with the industry’s smartest security for smart devices.