Palo Alto PA-850 PA-800 Series Firewalls

PA-850 Interface and Power Profile

PA-850 provides four RJ-45 Gigabit Ethernet data ports, four Gigabit SFP ports and four additional cages that operate as either 1GbE SFP or 10GbE SFP+ ports. Ports 9 through 12 must operate as one media-speed group; SFP and SFP+ modes cannot be mixed within that group.

Security Sizing

The PA-800 Series datasheet lists 2.0/1.9 Gbps firewall throughput, 1.0/1.2 Gbps threat prevention throughput, 1.8 Gbps IPsec VPN throughput, 13,100 new sessions per second and 192,000 maximum sessions for PA-850. Production sizing should use the enabled inspection profile and expected traffic mix.

Redundancy and Lifecycle

The 1U appliance has two AC power supplies, with the second unit providing redundancy, plus a 240 GB SSD. Palo Alto Networks lists the PA-800 Series end-of-sale date as August 31, 2024 and end-of-life date as August 31, 2029, with PA-1400 Series identified as the replacement family. Migration requires new interface, performance, PAN-OS and subscription validation.

• Choose SFP or SFP+ mode for ports 9 through 12 as one group.
• Confirm both AC supplies and separate power feeds for redundancy.
• Size using threat and VPN throughput, not firewall throughput alone.
• Plan PA-1400 migration before the published 2029 end-of-life date.

Palo Alto Networks PA-800 Series official datasheet | PA-800 official interface reference | Palo Alto Networks official lifecycle table