Skip to content


Product Line: Palo Alto PA-4060
Product Type: Firewall
Original price $0.00 - Original price $418.00
Original price
$0.00 - $418.00
Current price $418.00
Title: Used

Orders typically ship within 1-3 Business days, if you need an item to ship sooner please contact us.

Product Description

The PA-4060 Palo Alto boasts a firewall throughput of 10 Gbps, threat prevention throughput of 5 Gbps, and IPSec VPN throughput of 2 Gbps, designed to accommodate high-demand network environments. It supports up to 4,000 IPSec VPN tunnels/interfaces and 10,000 SSL VPN concurrent users, along with a capacity for 60,000 new sessions per second and a maximum of 2,000,000 sessions. The device is equipped with (4) 10 Gigabit XFP and (4) Gigabit SFP I/O ports, redundant 400W AC power supplies, and is 2U rack mountable, optimized for efficient space utilization and reliable performance in enterprise settings.

Key Feature for the PA-4060

  • What is the firewall throughput capacity?
    The firewall throughput capacity is 10 Gbps.
  • How many IPSec VPN tunnels/interfaces does the device support?
    The device supports 4,000 IPSec VPN tunnels/interfaces.
  • What is the maximum number of SSL VPN concurrent users?
    The maximum number of SSL VPN concurrent users is 10,000.
  • Can you detail the I/O ports available on this device?
    The device includes (4) 10 Gigabit XFP and (4) Gigabit SFP for I/O, along with (2) 10/100/1000 for high availability, (1) 10/100/1000 for out-of-band management, and (1) DB9 console port for management I/O.
  • What are the power supply specifications?
    The power supply is redundant 400W AC with an average power consumption of 175W and a maximum of 200W.
  • What rack mount dimensions does the device have?
    The device is rack-mountable with dimensions of 2U, 19” standard rack (3.5”H x 16.5”D x 17.5”W).
  • What is the operating temperature range?
    The operating temperature range is from 32° to 122° F (0° to 50° C).
  • Does the device offer High Availability features?
    Yes, the device offers High Availability features including Active/Passive configuration, session synchronization, interface and IP tracking, as well as link and path failure monitoring.
  • What is the threat prevention throughput?
    The threat prevention throughput is 5 Gbps.
  • Is URL Filtering available on this device?
    Yes, URL Filtering is available with a subscription. It features a 76-category on-box customizable database and enforces unique policies for SSL VPN traffic.

Product Review

The Palo Alto PA-4060 firewall delivers a solid throughput of 10 Gbps, with specialized throughputs for threat prevention and IPSec VPN at 5 Gbps and 2 Gbps respectively, catering well to medium to large-scale network environments. However, the unit's limitation to 4,000 IPSec VPN tunnels/interfaces and a maximum of 10,000 SSL VPN concurrent users might restrict scalability in larger deployments. With a comprehensive management I/O setup, redundant power supply for reliability, and support for high availability configurations, the PA-4060 is equipped for robust network security tasks, though its performance scalability could be a consideration for expanding networks.


The Palo Alto PA-4060 is designed to meet the demands of high-performance network environments, offering advanced security features and high throughput rates. This model boasts a firewall throughput of 10 Gbps and a threat prevention throughput of 5 Gbps, ensuring efficient handling of network traffic and protection against a wide range of cyber threats. Its IPSec VPN throughput reaches 2 Gbps, complemented by the capacity for 4,000 IPSec VPN tunnels/interfaces, making it suitable for secure remote access. Supporting up to 10,000 SSL VPN concurrent users and managing new sessions at a rate of 60,000 per second, the PA-4060 can handle a maximum of 2,000,000 sessions simultaneously. This capability makes it an ideal solution for large enterprises or data center environments where high connectivity and security are paramount. The hardware configuration includes a variety of I/O options: - Four 10 Gigabit XFP interfaces - Four Gigabit SFP interfaces This selection provides flexibility in connecting to different network segments at varying speeds, ensuring compatibility and performance. The management I/O features two 10/100/1000 high availability ports, one 10/100/1000 out-of-band management port, and one DB9 console port, facilitating comprehensive management and monitoring capabilities. Power efficiency is a key consideration in the design of the PA-4060, with redundant 400W AC power supplies operating at an average power consumption of 175W and a maximum of 200W. It supports a broad input voltage range of 100-240Vac at 50-60Hz, with a maximum input current of 50A@230Vac and 30A@120Vac, ensuring adaptability to various power supply systems. Designed for easy integration into existing network infrastructures, the PA-4060 is rack-mountable, fitting into a standard 19” rack with dimensions of 3.5”H x 16.5”D x 17.5”W. It operates within a temperature range of 32° to 122° F (0° to 50° C) and can be stored in temperatures ranging from -4° to 158° F (-20° to 70° C), ensuring reliability across various environmental conditions. High Availability features such as Active/Passive modes, configuration and session synchronization, interface and IP tracking, along with link and path failure monitoring, ensure continuous operation and minimal downtime. The PA-4060 also offers advanced security features like URL Filtering, requiring a subscription, which includes a 76-category customizable database and the ability to enforce unique policies for SSL VPN traffic, including options for enabling or disabling split tunneling. Additional capabilities include: - Full IPv6 content inspection via Content-ID in virtual wire mode. - DHCP server and DHCP relay support for up to 3 servers, enhancing network management and flexibility. In summary, the Palo Alto PA-4060 is a comprehensive security solution designed for high-throughput, high-capacity network environments, offering advanced features and specifications to support secure, efficient, and reliable network operations.


Item Number and Manufacturer Palo Alto PA-4060
Data Filtering Capacity 10 Gbps
Malware Prevention Speed 5 Gbps
IPSec Virtual Private Network Speed 2 Gbps
VPN Tunnels/Ports 4,000
Maximum SSL VPN Users Concurrently 10,000
Session Initiation Rate 60,000/s
Session Capacity Maximum 2,000,000
Networking Ports (4) 10GbE XFP + (4) 1GbE SFP
Ports for Management (2) Gigabit for high availability, (1) Gigabit for OOBM, (1) DB9 for console
Power Consumption (Average/Peak) Redundant 400W AC (175W/200W)
Input Voltage (Frequency) 100-240Vac (50-60Hz)
Maximum Current (230Vac) 50A
Maximum Current (120Vac) 30A
Mounting Specifications 2U standard 19” rack (3.5”H x 16.5”D x 17.5”W)
Operational Temperature Range 32° to 122° F (0° to 50° C)
Storage Temperature Range -4° to 158° F (-20° to 70° C)
Redundancy Active/Passive with configuration and session persistence, IP and interface monitoring, and link/path failure checks
Web Filtering Subscription-based 76-category customizable web database
VPN Support IPSec with SSL backup, customizable SSL VPN traffic policies
SSL VPN Tunnel Settings Toggle split tunneling for access control
IPv6 Inspection Content-ID full inspection in Virtual Wire mode
DHCP Services Supports up to 3 DHCP servers, with DHCP relay

Compare products

{"one"=>"Select 2 or 3 items to compare", "other"=>"{{ count }} of 3 items selected"}

Select first item to compare

Select second item to compare

Select third item to compare