Skip to content


Product Line: Palo alto PA-5000 Series
Product Type: firewall
Sold out
Original price $0.00 - Original price $0.00
Original price
$0.00 - $0.00
Current price $0.00
Title: Surplus

Orders typically ship within 1-3 Business days, if you need an item to ship sooner please contact us.

Product Description

The PA-5020 delivers a firewall throughput of 5 Gbps with App-ID enabled, threat prevention throughput of 2 Gbps, and supports IPSec VPN throughput of 2 Gbps. It can handle up to 1,000,000 sessions, with the capability to establish 120,000 new sessions per second, and supports up to 2,000 IPSec VPN tunnels/tunnel interfaces. The device features (12) 10/100/1000 and (8) Gigabit SFP I/O ports, offers options for single or dual 120GB or 240GB SSD drives in RAID 1, and operates within a 32° F to 122° F temperature range.

FAQs for the PA-5020

  • What is the firewall throughput with App-ID enabled?
    The firewall throughput with App-ID enabled is 5 Gbps.
  • How many IPSec VPN tunnels/tunnel interfaces does the device support?
    It supports 2,000 IPSec VPN tunnels/tunnel interfaces.
  • What is the threat prevention throughput capability of the firewall?
    The threat prevention throughput capability is 2 Gbps.
  • What is the maximum number of sessions the device can handle?
    The device can handle up to 1,000,000 sessions.
  • How many new sessions per second can the firewall manage?
    The firewall can manage up to 120,000 new sessions per second.
  • How many GlobalProtect (SSL VPN) concurrent users are supported?
    It supports up to 5,000 GlobalProtect (SSL VPN) concurrent users.
  • What is the maximum capacity for SSL decrypt sessions?
    The maximum capacity for SSL decrypt sessions is 15,000.
  • How many virtual routers can be configured?
    Up to 20 virtual routers can be configured.
  • What is the total number of security zones available?
    The device offers a total of 80 security zones.
  • What are the storage options available for this device?
    The device offers single or dual solid state disk drives with storage capacities of 120GB or 240GB in RAID 1 configuration.

Product Review

The Palo Alto PA-5020 offers a comprehensive set of features suitable for medium to large-sized network environments, with a firewall throughput of 5 Gbps and threat prevention throughput of 2 Gbps, ensuring efficient traffic management and security threat mitigation. However, its SSL VPN concurrent users are capped at 5,000, which might limit scalability for larger organizations requiring extensive remote access capabilities. Additionally, the device supports a maximum of 1,000,000 sessions and 120,000 new sessions per second, highlighting its capability to handle high volumes of traffic, though the initial investment and operational costs may be a consideration for some due to its advanced features and power requirements.


The Palo Alto PA-5020 is a firewall appliance designed to secure large enterprise networks with comprehensive security features and high-performance capabilities. This device offers a blend of advanced security measures and high throughput rates to manage and protect data flow efficiently. At the core of its performance metrics, the PA-5020 delivers a firewall throughput of 5 Gbps with App-ID enabled, ensuring swift and secure data processing. Its threat prevention throughput stands at 2 Gbps, providing substantial defense mechanisms against a wide array of cyber threats. The appliance also supports IPSec VPN throughput at 2 Gbps, facilitating secure remote access. The PA-5020 can handle up to 1,000,000 concurrent sessions with the capability to establish 120,000 new sessions per second, showcasing its ability to manage high volumes of traffic without compromising on speed or security. It supports 2,000 IPSec VPN tunnels/tunnel interfaces, accommodating a vast network of secure connections. For organizations requiring remote access solutions, the device can support up to 5,000 concurrent GlobalProtect (SSL VPN) users and manage 15,000 SSL decrypt sessions, making it a versatile option for secure remote connectivity. It also allows for up to 100 SSL inbound certificates, enhancing its utility in secure communications. The PA-5020 supports up to 20 virtual routers and can be configured for 10 to 20 virtual systems, providing flexibility in network segmentation and management. With support for 80 security zones and the capability to implement up to 10,000 policies, this device offers extensive control over network traffic and security configurations.
  • I/O includes 12 Ethernet ports (10/100/1000), 8 Gigabit SFP ports, and dedicated management interfaces including 2 high availability ports, 1 out-of-band management port, and 1 RJ45 console port.
  • Storage options are versatile, with single or dual solid-state drives available in 120GB or 240GB configurations, supporting RAID 1 for data redundancy.
  • The power supply is redundant with an average/max power consumption of 270W/340W, ensuring reliable operation.
The device operates efficiently within a wide range of power supplies and temperatures. It consumes a maximum of 8A@100VAC and 14A@48VDC, with an operational temperature range from 32°F (0°C) to 122°F (50°C). This ensures reliable performance across various environmental conditions. In summary, the Palo Alto PA-5020 stands out as a scalable and secure networking solution for enterprises. Its comprehensive security features, coupled with high throughput rates and the capacity to manage a vast number of sessions and VPN connections, make it a formidable appliance for protecting enterprise networks against a wide range of cyber threats.


Part NumberPalo Alto PA-5020
ManufacturerPalo Alto Networks
Application Inspection Throughput5 Gbps
Threat Defense Throughput2 Gbps
IPSec Virtual Private Network Throughput2 Gbps
Maximum Concurrent Sessions1,000,000
Session Initiation Rate120,000 per second
IPSec VPN Tunnels/Interfaces2,000
GlobalProtect Concurrent Sessions5,000
Decrypted SSL Sessions Capacity15,000
SSL Inbound Certificates Limit100
Configurable Virtual Routers20
Virtual Systems Support (initial/maximum)10/20
Defined Security Zones80
Maximum Configurable Policies10,000
Network Interfaces(12)10/100/1000, (8) Gigabit SFP
Management Interfaces(2) 10/100/1000 for high availability, (1) 10/100/1000 for management, (1) RJ45 for console
Storage OptionsOption for single or dual SSDs
Storage Capacity120GB, 240GB SSD options, RAID 1
Power SupplyRedundant 450W AC; Average/Max Consumption: 270W/340W
Heat Dissipation1,160 BTU/hr
Electrical Input100-240VAC (50-60Hz); -40 to -72 VDC
Maximum Power Draw8A @ 100VAC, 14A @ 48VDC
Operating Temperature Range32° F to 122° F (0° C to 50° C)

Compare products

{"one"=>"Select 2 or 3 items to compare", "other"=>"{{ count }} of 3 items selected"}

Select first item to compare

Select second item to compare

Select third item to compare