Palo Alto Networks PAN-PA-560
The PAN-PA-560 delivers robust security capabilities for enterprise and data center environments, ensuring high-speed inspection and threat prevention.
Inspection & Performance at Load
The PAN-PA-560 excels in maintaining high throughput even with advanced security features enabled. With a firewall throughput of 8.5 Gbps, it ensures that traffic inspection does not become a bottleneck. The IPS throughput of 6.0 Gbps allows for deep packet inspection without compromising speed, while the VPN throughput of 5.5 Gbps supports secure remote access for distributed workforces.
Concurrency & Session Management
Supporting up to 598K concurrent connections, the PAN-PA-560 is designed for environments with high session counts, such as large enterprises and data centers. This capability ensures seamless session management and resiliency, accommodating both remote user access and east-west traffic flows within the network.
Network Topology & Segmentation
With 24 ports supporting 1G/10G speeds, the PAN-PA-560 provides flexible uplink and aggregation options, facilitating high availability and redundancy. The support for 4,094 VLANs enables extensive network segmentation, enhancing security and performance by isolating different network segments.
Physical Integration & Operations
The rackmount form factor and 1U size of the PAN-PA-560 allow for efficient use of space in data centers. Its compact dimensions of 1.74" x 12.1" x 13" facilitate easy installation and maintenance, while ensuring optimal thermal management and cabling efficiency.
Available Subscriptions & Add-On Capabilities
Precision AI Network Security (CORESEC Bundle)
The CORESEC Bundle integrates Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, and Advanced DNS Security, providing comprehensive protection across all traffic flows. It leverages AI-driven threat intelligence to detect and mitigate threats in real-time, ensuring that security measures do not impede network performance.
Advanced DNS Security
Advanced DNS Security protects against DNS-based threats by using machine learning to identify and block malicious domains. It operates at the DNS layer, providing an additional security perimeter that enhances the overall threat prevention strategy.
Advanced URL Filtering
This feature provides real-time URL classification and blocking, preventing access to malicious and inappropriate websites. It enhances user protection by dynamically updating URL categories based on the latest threat intelligence.
Advanced SD-WAN
Advanced SD-WAN optimizes network performance by dynamically selecting the best path for traffic based on real-time conditions. It enhances application performance and reliability, particularly for distributed enterprises with multiple branch locations.
Advanced Threat Prevention
This capability provides inline threat detection and prevention, leveraging signature-based and behavioral analysis to block known and unknown threats. It ensures that security measures are enforced without degrading network performance.
Advanced WildFire
Advanced WildFire provides cloud-based malware analysis and sandboxing, detecting and preventing zero-day threats. It enhances security by analyzing suspicious files in a secure environment, ensuring that threats are identified before they can impact the network.
IoT / Device Security
IoT Security provides device profiling and risk assessment, ensuring that all connected devices are identified and monitored. It enhances security by applying appropriate policies based on device type and behavior, reducing the risk of IoT-based attacks.
DLP
Data Loss Prevention (DLP) safeguards sensitive information by monitoring and controlling data flows. It enforces content classification and pattern matching to prevent unauthorized data exfiltration, ensuring compliance with data protection regulations.
Prisma Access Agent
Prisma Access Agent extends secure access to remote users, providing consistent security policies across all locations. It operates as an agent-based SASE edge, ensuring secure and reliable connectivity for remote workforces.
SaaS Security Inline
SaaS Security Inline provides real-time control over SaaS applications, ensuring that data is protected and compliance is maintained. It offers inline security controls that monitor and manage SaaS usage, preventing data leaks and unauthorized access.
Reliability, Management & Visibility
The PAN-PA-560 is engineered for high availability and reliability, with support for redundant configurations and failover mechanisms. It integrates seamlessly with Strata Cloud Manager, providing centralized management and visibility across the network. AIOps insights enhance operational efficiency by offering predictive analytics and anomaly detection, while robust change control and policy lifecycle management ensure that security policies are consistently enforced.
The PAN-PA-560 is a powerful solution for enterprises seeking to enhance their security posture while maintaining high performance and scalability. Its comprehensive feature set and advanced capabilities make it an ideal choice for securing complex network environments.
Security Performance
| IPS Throughput | 6.0 Gbps |
|---|

