HA Port and Processor Support
Table of Contents
Expand all | Collapse all
-
- Cloud Identity Engine Cipher Suites
-
- PAN-OS 11.0 GlobalProtect Cipher Suites
- PAN-OS 11.0 IPSec Cipher Suites
- PAN-OS 11.0 IKE and Web Certificate Cipher Suites
- PAN-OS 11.0 Decryption Cipher Suites
- PAN-OS 11.0 Administrative Session Cipher Suites
- PAN-OS 11.0 HA1 SSH Cipher Suites
- PAN-OS 11.0 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.0 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.2 GlobalProtect Cipher Suites
- PAN-OS 10.2 IPSec Cipher Suites
- PAN-OS 10.2 IKE and Web Certificate Cipher Suites
- PAN-OS 10.2 Decryption Cipher Suites
- PAN-OS 10.2 Administrative Session Cipher Suites
- PAN-OS 10.2 HA1 SSH Cipher Suites
- PAN-OS 10.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.1 GlobalProtect Cipher Suites
- PAN-OS 10.1 IPSec Cipher Suites
- PAN-OS 10.1 IKE and Web Certificate Cipher Suites
- PAN-OS 10.1 Decryption Cipher Suites
- PAN-OS 10.1 Administrative Session Cipher Suites
- PAN-OS 10.1 HA1 SSH Cipher Suites
- PAN-OS 10.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 9.1 GlobalProtect Cipher Suites
- PAN-OS 9.1 IPSec Cipher Suites
- PAN-OS 9.1 IKE and Web Certificate Cipher Suites
- PAN-OS 9.1 Decryption Cipher Suites
- PAN-OS 9.1 Administrative Session Cipher Suites
- PAN-OS 9.1 HA1 SSH Cipher Suites
- PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 9.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 8.1 GlobalProtect Cipher Suites
- PAN-OS 8.1 IPSec Cipher Suites
- PAN-OS 8.1 IKE and Web Certificate Cipher Suites
- PAN-OS 8.1 Decryption Cipher Suites
- PAN-OS 8.1 Administrative Session Cipher Suites
- PAN-OS 8.1 HA1 SSH Cipher Suites
- PAN-OS 8.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 8.1 Cipher Suites Supported in FIPS-CC Mode
HA Port and Processor Support
Review the high availability (HA) ports and processor
functionality supported on your Palo Alto Networks Next-Generation
Firewall (NGFW).
The following table identifies which Palo Alto Networks
Next-Generation Firewall (NGFW) can support the HA ports and processor
functionality you require in your network.
Additionally, some firewall models and PA-7000 Series firewall
cards include an offload processor—a Content Engine (CE) for accelerating
signature matches or a Crypto Accelerator (CA) for accelerating
SSL processing; some firewalls support either one but none can support
both simultaneously.
Palo Alto Networks
Firewall Model | Separate Mgmt Plane Processor | Network Processor | Offload Processor | First Packet Processor | HA1 Port | HA2 Port | HSCI Port |
|---|---|---|---|---|---|---|---|
Firewalls | |||||||
PA-200 (EoS)* | — | — | — | — | — | — | — |
PA-220 | — | — | — | — | — | — | — |
PA-220R | — | — | — | — | — | — | — |
PA-410 | — | — | — | — | — | — | — |
PA-415 | — | — | — | — | — | — | — |
PA-440 | — | — | — | — | — | — | — |
PA-445 | — | — | — | — | — | — | — |
PA-450 | — | — | — | — | — | — | — |
PA-460 | — | — | — | — | — | — | — |
PA-500 (EoS)* | √ | — | — | — | — | — | — |
PA-820 | — | — | — | — | √ | √ | — |
PA-850 | — | — | — | — | √ | √ | — |
PA-1410 | — | — | — | — | √ (x2) | — | √ |
PA-1420 | — | — | — | — | √ (x2) | — | √ |
PA-3020 (EoS) | √ | — | √ (CE) | — | √ | √ | — |
PA-3050 (EoS) | √ | √ | √ (CE) | — | √ | √ | — |
PA-3060 (EoS) | √ | √ | √ (CE) | — | √ | √ | — |
PA-3220 | √ | √ | — | — | √ (x2) | — | √ |
PA-3250 | √ | √ | √ (CE) | — | √ (x2) | — | √ |
PA-3260 | √ | √ | √ (CE) | — | √ (x2) | — | √ |
PA-3410 | √ | √ | — | — | √ (x2) | — | √ |
PA-3420 | √ | √ | — | — | √ (x2) | — | √ |
PA-3430 | √ | √ | — | — | √ (x2) | — | √ |
PA-3440 | √ | √ | — | — | √ (x2) | — | √ |
PA-5020 (EoS)* | √ | √ | √ (CE) | — | √ | √ | — |
PA-5050 (EoS)* | √ | √ | √ (CE) | — | √ | √ | — |
PA-5060 (EoS)* | √ | √ | √ (CE) | — | √ | √ | — |
PA-5220 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5250 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5260 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5280 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ |
PA-5410 | — | — | — | — | √ (x2) | — | √ |
PA-5420 | — | — | — | — | √ (x2) | — | √ |
PA-5430 | — | — | — | — | √ (x2) | — | √ |
PA-5440 | — | — | — | — | √ (x2) | — | √ |
PA-5450 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ (x2) |
PA-7050 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ (x2) |
PA-7080 | √ | √ | √ (CE or CA) | √ | √ (x2) | — | √ (x2) |
PA-7000 Series Firewall
Cards | |||||||
PA-7050-SMC (EoS) | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7080-SMC (EoS) | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7050-SMC-B | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7080-SMC-B | √ | — | — | √ | √ (x2) | — | √ (x2) |
PA-7000-20G-NPC (EoS) | — | √ | √ (CE x2) | — | — | — | — |
PA-7000-20GQ-NPC (EoS) | — | √ | √ (CE x2) | — | — | — | — |
PA-7000-20GXM-NPC (EoS) | — | √ | √ (CE x2) | — | — | — | — |
PA-7000-20GQXM-NPC (EoS) | — | √ | √ (CE x2) | — | — | — | — |
PA-7000-100G-NPC-A | — | √ | √ (CE or CA) | — | — | — | — |
PA-7000-DPC-A | — | — | √ (CA x2) | — | — | — | — |
* These firewalls are supported only on PAN-OS 8.1 and only until
each reaches its hardware end-of-life (EoL) date.
You can also review the hardware EoL information for
more specific information about firewalls and appliances that have
reached end-of-sale (EoS) status.