Configure Power Over Ethernet (PoE) to route electrical
power from your firewall to another network device.
You can configure Power Over Ethernet (PoE)
on the interfaces of supported firewalls to transfer electrical
power from the firewall to a connected network device. This allows
you to meet the power needs of other devices while continuing to
transmit data to them using a single Ethernet cable per physical PoE
This table lists each Palo Alto Networks® Next-Generation
firewall with PoE ports as well as the maximum power they offer,
the total allowed power budget, and the interface types they support.
Maximum Reserved Power (per port)
Total PoE Budget Allowed (all ports)
Supported Interface Types
PA-415 and PA-445
6, 7, 8, and 9
High Availability (HA)
PA-1410 and PA-1420
9, 10, 11, and 12
The following task describes the procedure for
setting up PoE on your firewall.
Ensure that the device you want to provide power
to is connected to the firewall using an Ethernet cable through
a supported PoE port on the firewall.
Using a Cat5 or Cat6 Ethernet cable ensures the most
reliable power transfer. A Cat3 cable, for example, will only be
able to transfer as much as 20W.
the interface you have cabled.
PoE is active on all PoE ports by default. On the Ethernet
Interface window, selecting
Set the amount of power reserved by the port by entering
a value (in Watts) for
PoE Rsvd Pwr
value must be a number between
Maximum Reserved Power of the port as defined in the table above.
indicates that no power will be sent
through the port connection.
PoE Rsvd Pwr
all of your PoE ports should not exceed the Total PoE Budget Allowed
in the table above. If you go over the Total PoE Budget Allowed,
one or more powered devices will enter the
Denied) state until you reallocate the reserved power.
If no device is connected to a PoE port,
ensure that either