HA Port and Processor Support

Review the high availability (HA) ports and processor functionality supported on Palo Alto Networks Next-Generation Firewalls.
The following table identifies which Palo Alto Networks Next-Generation Firewalls can support the HA ports and processor functionality you require in your network.
Additionally, some firewall models and PA-7000 Series firewall cards include an offload processor: a Content Engine (CE) for accelerating signature matches or a Crypto Accelerator (CA) for accelerating SSL processing—some firewalls support either one but cannot support both simultaneously.
Palo Alto Networks Firewall Model
Separate Mgmt Plane Processor
Network Processor
Offload Processor
First Packet Processor
HA1 Port
HA2 Port
HSCI Port
Firewalls
PA-200
(EoS*)
PA-220
PA-220R
PA-440
PA-450
PA-460
PA-500
(EoS*)
PA-820
PA-850
PA-3020
(CE)
PA-3050
(CE)
PA-3060
(CE)
PA-3220
(x2)
PA-3250
(CE)
(x2)
PA-3260
(CE)
(x2)
PA-5020
(EoS*)
(CE)
PA-5050
(EoS*)
(CE)
PA-5060
(EoS*)
(CE)
PA-5220
(CE or CA)
(x2)
PA-5250
(CE or CA)
(x2)
PA-5260
(CE or CA)
(x2)
PA-5280
(CE or CA)
(x2)
PA-5450
(CE or CA)
(x2)
(x2)
PA-7050
(CE or CA)
(x2)
(x2)
PA-7080
(CE or CA)
(x2)
(x2)
PA-7000 Series Firewall Cards
PA-7050-SMC
(x2)
(x2)
PA-7080-SMC
(x2)
(x2)
PA-7050-SMC-B
(x2)
(x2)
PA-7080-SMC-B
(x2)
(x2)
PA-7000-20G-NPC
(CE x2)
PA-7000-20GQ-NPC
(CE x2)
PA-7000-20GXM-NPC
(CE x2)
PA-7000-20GQXM-NPC
(CE x2)
PA-7000-100G-NPC-A
(CE or CA)
PA-7000-DPC-A
(CA x2)
* For more specific information about firewalls and appliances that have reached end-of-sale (EoS) status, refer to Hardware End-of-Life Dates.

Recommended For You