CyberIndexBeta

Product

Palo Alto Networks hardware next-generation firewall appliance line for branch, campus and data centre. Delivering high-performance security with 100G interface support, the PA-3500 Series is the power-efficient NGFW of choice for Campus Core and internet edge environments. Featuring up to 400G ports, it is the ultimate solution for Service Provider cores, hyper-scale Data Centers, and AI Factory Data Center Interconnects (DCI). Built with custom FE400 and FE100X ASICs, the PA-5500 Series offers Quantum-Optimized security for Enterprise Data Center Edge, DCI, and AI Factory DCI deployments. It is available as a hardware appliance.

Current Version
12.2.4
Market
EnterpriseSMB
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-28

Vendor

Palo Alto Networks was founded in 2005 by Nir Zuk, who had written the first stateful inspection engine at Check Point, and built the next-generation firewall — an appliance that identifies the application in a flow rather than judging it by port number. That product made the company, and it is now one of the largest security firms in the world, listed on Nasdaq, with around 16,000 employees and over 70,000 customers. Its range is organised under three names: Strata for network security and the PA-Series firewalls, Prisma for cloud and SASE, and Cortex for security operations — Cortex XDR for detection and response, Cortex XSOAR for automation, Cortex Xpanse for attack-surface discovery and Cortex XSIAM as the platform it is steering customers toward. Unit 42 is its threat intelligence and incident response arm. What appears in this index is the endpoint and firewall end of that portfolio. Its endpoint agent is sold as part of a platform rather than on its own, which is worth knowing when comparing its price and its test results with a standalone product's. Vendor page →

Country
United States
Headquarters
Santa Clara, United States
Year Established
2005
Customers
70K organisations
Users
100M users
Revenue
$11.5B (2026)

Platforms

Hardware Appliancenative

Target Market

Enterprise secondarySMB primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)Not known
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANnative
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

1 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 12.2.4platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

NetSecOPEN Network Security Test

Tested: PA-5402026-04-06lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

All results

NetSecOPEN Network Security TestNetSecOPEN — PA-540, PAN-OS 12.1.4 (UNH-IOL)2026-04-06
Exploits Blocked: 99.78%HTTPS Throughput (inspected): 1.2 GbpsHTTPS Connections/s: 899
NetSecOPEN Network Security TestNetSecOPEN — PA-450, PAN-OS 11.0.2-h2 (UNH-IOL)2024-02-16
Exploits Blocked: 99.58%HTTPS Throughput (inspected): 0.8 GbpsHTTPS Connections/s: 1690
NetSecOPEN Network Security TestNetSecOPEN — PA-3250, PAN-OS 9.0.7 (UNH-IOL)2020-05-14
HTTPS Throughput (inspected): 1.83 GbpsHTTPS Connections/s: 7356
NetSecOPEN Network Security TestNetSecOPEN — PA-3250, PAN-OS 9.0.5 (UNH-IOL)2020-02-19
HTTPS Throughput (inspected): 1.07 GbpsHTTPS Connections/s: 997

Certifications

Common Criteria1 activeUS 2024-09-19
FIPS 140-34 activeshow 4 certificates ▾
NetSecOPEN CertificationCertified4 activeshow 4 certificates ▾

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 12.2.4evidence
  • 2026-10-13New versionNew version: 12.2.3evidence
  • 2026-10-12Certification addedCertified: Common Criteriaevidence
  • 2026-10-08Capability addedVPN Gateway: built inevidence
  • 2026-10-08Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Test result addedNew NetSecOPEN Network Security Test resultevidence
  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: NetSecOPEN Certification (Certified)evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Capability addedSD-WAN: built inevidence
  • 2026-10-06Capability addedApplication Control: built inevidence
  • 2026-10-06Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20New versionNew version: PAN-OSevidence
  • 2026-09-20Platform addedRuns on Hardware Applianceevidence
  • 2026-09-19Product updatedSold to: SMBevidence
  • 2026-09-19Product updatedAlso sold to: Enterpriseevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.