Review the high availability (HA) ports and processor
functionality supported on your Palo Alto Networks Next-Generation
Firewall (NGFW).
The following table identifies which Palo Alto Networks
Next-Generation Firewall (NGFW) can support the HA ports and processor
functionality you require in your network.
Additionally, some firewall models and PA-7000 Series firewall
cards include an offload processor—a Content Engine (CE) for accelerating
signature matches or a Crypto Accelerator (CA) for accelerating
SSL processing; some firewalls support either one but none can support
both simultaneously.
Palo Alto Networks
Firewall Model
Separate Mgmt Plane Processor
Network Processor
Offload Processor
First Packet Processor
HA1 Port
HA2 Port
HSCI Port
Firewalls
PA-220 (EoS)*
—
—
—
—
—
—
—
PA-220R (EoS)*
—
—
—
—
—
—
—
PA-410
—
—
—
—
—
—
—
PA-415
—
—
—
—
—
—
—
PA-415-5G
—
—
—
—
—
—
—
PA-440
—
—
—
—
—
—
—
PA-445
—
—
—
—
—
—
—
PA-450
—
—
—
—
—
—
—
PA-450R
—
—
—
—
—
—
—
PA-455
—
—
—
—
—
—
—
PA-455-5G
—
—
—
—
—
—
—
PA-460
—
—
—
—
—
—
—
PA-820*
—
—
—
—
√
√
—
PA-850*
—
—
—
—
√
√
—
PA-1410
—
—
—
—
√
(x2)
—
√
PA-1420
—
—
—
—
√
(x2)
—
√
PA-3220 (EoS)*
√
√
—
—
√
(x2)
—
√
PA-3250 (EoS)*
√
√
√
(CE)
—
√
(x2)
—
√
PA-3260 (EoS)*
√
√
√
(CE)
—
√
(x2)
—
√
PA-3410
√
√
—
—
√
(x2)
—
√
PA-3420
√
√
—
—
√
(x2)
—
√
PA-3430
√
√
—
—
√
(x2)
—
√
PA-3440
√
√
—
—
√
(x2)
—
√
PA-5220 (EoS)*
√
√
√
(CE or CA)
√
√
(x2)
—
√
PA-5250 (EoS)*
√
√
√
(CE or CA)
√
√
(x2)
—
√
PA-5260 (EoS)*
√
√
√
(CE or CA)
√
√
(x2)
—
√
PA-5280 (EoS)*
√
√
√
(CE or CA)
√
√
(x2)
—
√
PA-5410
—
—
—
—
√
(x2)
—
√
PA-5420
—
—
—
—
√
(x2)
—
√
PA-5430
—
—
—
—
√
(x2)
—
√
PA-5440
—
—
—
—
√
(x2)
—
√
PA-5445
—
—
—
—
√
(x2)
—
√
PA-5450
√
√
√
(CE or CA)
√
√
(x2)
—
√
(x2)
PA-7050
√
√
√
(CE or CA)
√
√
(x2)
—
√
(x2)
PA-7080
√
√
√
(CE or CA)
√
√
(x2)
—
√
(x2)
PA-7500
√
√
√
(CE or CA)
√
—
—
√
(x2)
PA-7000 Series Firewall
Cards
PA-7050-SMC
(EoS)*
√
—
—
√
√
(x2)
—
√
(x2)
PA-7080-SMC
(EoS)*
√
—
—
√
√
(x2)
—
√
(x2)
PA-7050-SMC-B
√
—
—
√
√
(x2)
—
√
(x2)
PA-7080-SMC-B
√
—
—
√
√
(x2)
—
√
(x2)
PA-7000-20GXM-NPC
(EoS)*
—
√
√
(CE x2)
—
—
—
—
PA-7000-20GQXM-NPC
(EoS)*
—
√
√
(CE x2)
—
—
—
—
PA-7000-100G-NPC-A
—
√
√
(CE or CA)
—
—
—
—
PA-7000-DPC-A
—
—
√
(CA x2)
—
—
—
—
* Some of the firewalls and firewall cards in this table have reached end-of-sale (EoS),
are not supported in newer versions of PAN-OS software, or both. Be sure to review the
specific information for your firewalls, firewall cards, and appliances on the hardware EoL web page.
