PAN-PA-5060 Firewall has the following distinguishing entries in the manufacturer specification. Performance and Capacities Specifications Firewall throughput (App-ID enabled): twenty Gbps. Threat prevention throughput: ten Gbps. IPSec VPN tunnels/tunnel interfaces: eight,zero. Max sessions: four,zero,zero. GlobalProtect (SSL VPN) concurrent users: twenty,zero. SSL decrypt sessions: ninety,zero. SSL Inbound Certificates: one,zero.
| Datasheet series | Palo Alto PA-5000 Series Firewalls |
| Exact model | PAN-PA-5060FIREWALL |
| Security check | Confirm PAN-OS compatibility, subscriptions, support term, HA design and interface requirements |
| Official datasheet | Palo Alto PA-5000 Series official hardware reference |
Model | PA-5060 |
Performance and Capacities Specifications | |
Firewall throughput (App-ID enabled) | 20 Gbps |
Threat prevention throughput | 10 Gbps |
IPSec VPN throughput | 4 Gbps |
New sessions per second | 120,000 |
Max sessions | 4,000,000 |
IPSec VPN tunnels/tunnel interfaces | 8,000 |
GlobalProtect (SSL VPN) concurrent users | 20,000 |
SSL decrypt sessions | 90,000 |
SSL Inbound Certificates | 1,000 |
Virtual routers | 225 |
Virtual systems (base/max2) | 25/225* |
Security zones | 900 |
Max. number of policies | 40,000 |
Hardware Specifications | |
I/O | (12) 10/100/1000, (8) Gigabit SFP, (4) 10 Gigabit SFP+ |
Management I/O | (2) 10/100/1000 high availability, |
Storage Options | Single or dual solid state disk drives |
Storage Capacity | 120GB, 240GB SSD, RAID 1 |
Power supply (Avg/max power consumption) | Redundant 450W AC (330W/415W) |
Max BTU/HR | 1,416 |
Input Voltage (Input Frequency) | 100-240VAC (50-60Hz); -40 to -72 VDC |
Max Current Consumption | 8A@100VAC, 14A@48VDC |
Mean Time Between Failure (MTBF) | 6.5 Years |
Max Inrush Current | 80A@230VAC; 40A@120VAC; 40A@48VDC |
Rack Mountable | 2U, 19" standard rack |
Dimensions | 3.5"H x 20"D x 17.5"W |
Weight (Stand alone device/as shipped) | 41lbs/55lbs |
Safety | UL, CUL, CB |
EMI | FCC Class A, CE Class A, VCCI Class A |
Certifications | NEBS Level 3, FIPS level 2, ICSA |
Environment | |
Operating temperature | 32° to 122° F, 0° to 50° C |
Non-operating temperature | -4° to 158° F, -20° to 70° C |
Product Quotation | ![]() | Condition and Packaging | |
Return Eligibility | Returns and Replacement | ||
Shipping Arrangements | ![]() | Warranty Terms |
For PA-5060, the manufacturer specification lists firewall throughput (app-id enabled) as 20 Gbps.
For PA-5060, the manufacturer specification lists threat prevention throughput as 10 Gbps.
For PA-5060, the manufacturer specification lists ipsec vpn throughput as 4 Gbps.
Related products

PAN-PA-5050 Firewall is the CMS ordering identity for the Palo Alto Networks PA-5050, a 2U PA-5000 Series appliance with 10 Gbps App-ID firewall throughput, 5 Gbps threat-prevention throughput and two million maximum sessions.

PA-3260 adds four 40G QSFP+ traffic ports to the PA-3200 interface layout. Check the actual optical design, installed power supplies and support horizon when evaluating this legacy firewall; hardware end of life is listed as August 31, 2028.

PA-3220 combines 12 Gigabit copper traffic ports with four 1G SFP and four 1G/10G SFP/SFP+ positions. This legacy PA-3200 appliance has a published August 31, 2028 hardware end-of-life date; confirm support eligibility and migration timing before ordering.

PAN-PA-7080 Palo Alto security firewall appliance for security refresh projects. Contact YYST Global for stock, lead time and quote support.

PAN-PA-7050 Palo Alto security firewall appliance for security refresh projects. Contact YYST Global for stock, lead time and quote support.

PAN-PA-3060 Palo Alto security firewall appliance for security refresh projects. Contact YYST Global for stock, lead time and quote support.

PA-5020 is the Palo Alto Networks PA-5000 Series firewall model with 5 Gbps App-ID firewall throughput, 2 Gbps threat-prevention throughput, 2 Gbps IPSec VPN throughput, twelve copper Gigabit interfaces and eight Gigabit SFP interfaces.

PA-220R Palo Alto security firewall appliance for security refresh projects. Contact YYST Global for stock, lead time and quote support.