Compatibility Matrix
HA Port and Processor Support
Table of Contents
HA Port and Processor Support
Review the high availability (HA) ports and processor
functionality supported on your Palo Alto Networks Next-Generation
Firewall (NGFW).
The following table identifies which Palo Alto Networks
Next-Generation Firewall (NGFW) can support the HA ports and processor
functionality you require in your network.
Additionally, some firewall models and PA-7000 Series firewall
cards include an offload processor—a Content Engine (CE) for accelerating
signature matches or a Crypto Accelerator (CA) for accelerating
SSL processing; some firewalls support either one but none can support
both simultaneously.
Palo Alto Networks
Firewall Model | Separate Mgmt Plane Processor | Network Processor | Offload Processor | First Packet Processor | HA1 Port | HA2 Port | HSCI Port |
|---|---|---|---|---|---|---|---|
Firewalls | |||||||
PA-220 (EoS)* | — | — | — | — | — | — | — |
PA-220R (EoS)* | — | — | — | — | — | — | — |
PA-410 | — | — | — | — | — | — | — |
PA-415 | — | — | — | — | — | — | — |
|
PA-415-5G
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
PA-440 | — | — | — | — | — | — | — |
PA-445 | — | — | — | — | — | — | — |
PA-450 | — | — | — | — | — | — | — |
|
PA-450R
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-455
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-455-5G
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-455R-5G
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-510
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-520
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-540
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-545-POE
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-550
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-555-POE
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
|
PA-560
|
—
|
—
|
—
|
—
|
—
|
—
|
—
|
PA-460 | — | — | — | — | — | — | — |
PA-820* | — | — | — | — | √ | √ | — |
PA-850* | — | — | — | — | √ | √ | — |
PA-1410 | — | — | — | — | √ (x2) | — | √ |
PA-1420 | — | — | — | — | √ (x2) | — | √ |
PA-3220 (EoS)* | √ | √ | — | — | √ (x2) | — | √ |
PA-3250 (EoS)* | √ | √ | √ (CE) | — | √ (x2) | — | √ |
PA-3260 (EoS)* | √ | √ | √ (CE) | — | √ (x2) | — | √ |
PA-3410 | √ | √ | — | — | √ (x2) | — | √ |
PA-3420 | √ | √ | — | — | √ (x2) | — | √ |
PA-3430 | √ | √ | — | — | √ (x2) | — | √ |
PA-3440 | √ | √ | — | — | √ (x2) | — | √ |
PA-5220 (EoS)* | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5250 (EoS)* | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5260 (EoS)* | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5280 (EoS)* | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5410 | — | — | — | — | √ (x2) | — | √ |
PA-5420 | — | — | — | — | √ (x2) | — | √ |
PA-5430 | — | — | — | — | √ (x2) | — | √ |
PA-5440 | — | — | — | — | √ (x2) | — | √ |
|
PA-5445
|
—
|
—
|
—
|
—
|
√
(x2)
|
—
|
√
|
PA-5450 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ (x2) |
|
PA-5540
|
—
|
—
|
—
|
—
|
—
|
—
|
√
(x2)
|
|
PA-5550
|
—
|
—
|
—
|
—
|
—
|
—
|
√
(x2)
|
|
PA-5560
|
—
|
—
|
—
|
—
|
—
|
—
|
√
(x2)
|
|
PA-5570
|
—
|
—
|
—
|
—
|
—
|
—
|
√
(x2)
|
|
PA-5580
|
—
|
—
|
—
|
—
|
—
|
—
|
√
(x2)
|
PA-7050 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ (x2) |
PA-7080 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ (x2) |
|
PA-7500
|
√
|
√
|
√
(CE or CA)
|
√
|
—
|
—
|
√
(x2)
|
PA-7000 Series Firewall
Cards | |||||||
PA-7050-SMC (EoS)* | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7080-SMC (EoS)* | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7050-SMC-B | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7080-SMC-B | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7000-20GXM-NPC (EoS)* | — | √ | √ (CE x2) | — | — | — | — |
PA-7000-20GQXM-NPC (EoS)* | — | √ | √ (CE x2) | — | — | — | — |
PA-7000-100G-NPC-A | — | √ | √ (CE or CA) | — | — | — | — |
PA-7000-DPC-A | — | — | √ (CA x2) | — | — | — | — |
* Some of the firewalls and firewall cards in this table have reached end-of-sale (EoS),
are not supported in newer versions of PAN-OS software, or both. Be sure to review the
specific information for your firewalls, firewall cards, and appliances on the hardware EoL web page.