AI is changing both the scale of enterprise networks and the speed at which they must be defended. AI applications and agentic workflows are creating more traffic and connections for security infrastructure to inspect. Frontier AI can also accelerate vulnerability discovery and exploitation, leaving defenders less time to identify and stop attacks. Security teams need to sustain deep inspection as demand grows, without slowing the applications their organizations depend on. Additionally, organizations must also prepare for the transition to post-quantum cryptography. Any confidential data that is encrypted today with non-PQC ciphers is at risk of "harvest now, decrypt later" attacks when quantum computing is able to break traditional Elliptic Curve Cryptography (ECC), a widely used form of public-key cryptography that helps devices securely establish the keys protecting data in transit. To avoid this, networks must be optimized to move to PQC encryption.
Beyond traditional IT environments, security must also stretch to protect the industrial systems and remote assets that support essential services. The reality is that every internet-connected deployment expands an organization's threat exposure unless properly protected. Whether securing IoT devices on factory floors, remote utility substations, first responder vehicles, or distributed municipal infrastructure, organizations need security that can adapt to new threats and encryption requirements while preserving the availability and operational continuity these demanding environments require.
To meet these challenges, Palo Alto Networks is introducing new PA-Series hardware firewall appliances that complete our fifth-generation portfolio. Building on previously introduced platforms, these additions expand security performance and deployment options across branches, campuses, data centers, and critical infrastructure environments, helping organizations support AI adoption and prepare for the post-quantum transition.
Together, these platforms give organizations a consistent security foundation, with hardware choices suited to each location's bandwidth, connectivity, and operating conditions.
Security Performance for the Scale of AI
To support the massive traffic volume and concurrent connections generated by AI-enabled networks, our fifth-generation portfolio features updated processing architectures and hardware acceleration. Custom silicon in the PA-3500 Series, PA-5500 Series, and PA-7500 Series helps process traffic at scale, supporting high-speed connectivity, decryption, and application-layer inspection in demanding campus and data center deployments.
The appliances combine this hardware foundation with PAN-OS and Cloud-Delivered Security Services. Application-aware policies provide granular control, while services such as Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering and Advanced DNS Security help detect and block known and unknown threats across network, web and DNS traffic. Organizations can expand inspection capacity while keeping a common approach to security policy.
Preparing for the Post-Quantum Transition
To defend against the encryption risks mentioned earlier, infrastructure decisions made today must account for the heavy performance requirements of evolving encryption technologies.
Our fifth-generation hardware portfolio supports this transition to post-quantum cryptography through greater processing capacity and model-specific hardware acceleration. Alongside the hardware, PAN-OS provides standards-based capabilities for quantum-resistant IPsec VPNs. Organizations can begin strengthening protection for sensitive data in transit while planning for the performance requirements of evolving encryption technologies.
Hardware Designed for Each Deployment
Scalable Security for the Largest Deployments
For the largest deployments, the modular PA-7500 provides up to 1.5 Tbps of App-ID throughput and 400G connectivity. Its scalable chassis architecture supports organizations that need substantial inspection capacity for service provider cores and large data center environments.
More Capacity for Enterprise Data Centers and Large Campuses
The PA-5500 Series now includes the PA-5510, PA-5520 and PA-5530, broadening the portfolio with additional capacity options and 100G connectivity. They complement the previously introduced PA-5540 through PA-5580, allowing organizations to select a platform for their enterprise data center or large campus requirements. Across the PA-5500 Series, higher-end models offer up to 300 Gbps of threat prevention throughput and 400G interfaces.
High Performance Security for Campus Networks
The PA-3500 Series extends fifth-generation hardware to network perimeters, enterprise campuses, and smaller data centers. With 100G interface support and custom ASIC acceleration, these appliances help organizations expand security inspection as campus networks support more connected devices and AI application traffic.
Simpler Infrastructure for Large Branches
The PA-1500 Series brings integrated security, Layer 2 switching, and Power over Ethernet (PoE) into a single 1RU appliance for large branches and small enterprise campuses. The PA-1510-POE, PA-1520-POE, and PA-1530-POE deliver 9 to 27 Gbps of threat-prevention throughput, with 25G connectivity and PoE budgets up to 724W, depending on the model.
For a retail location, that means the firewall can also connect and power devices such as wireless access points, IP cameras, and payment terminals. Consolidating these functions reduces the need for separate access switching and simplifies installation and ongoing maintenance. Zero Touch Provisioning through Strata Cloud Manager helps teams bring distributed sites online with less local IT involvement.
Resilient Connectivity for Small Branches and Remote Offices
For smaller branches and remote offices, the PA-500 Series provides compact deployment options. The new PA-520-5G adds integrated cellular connectivity that can serve as a primary WAN connection or a backup to a wired link. This lets organizations support locations where wired connectivity is unavailable or maintain connectivity when the primary connection fails.
Protection for Industrial and Mobile Environments
The PA-50R Series extends the portfolio to industrial facilities, utilities, transportation infrastructure and mobile deployments. Ruggedized hardware is designed for operating conditions beyond those of a typical office or climate-controlled data center.
The series includes the PA-52R-5G, PA-54R-POE, PA-54R-POE-D-5G and PA-56R-POE-5G. Model-specific options for integrated 5G, PoE, mounting and DC power help organizations secure connected equipment at remote sites and in vehicles. These deployment choices bring network security closer to the operational assets that need protection.
A Common Management Experience Across the Portfolio
Strata Cloud Manager brings centralized visibility, policy management and AI-driven operations to the hardware portfolio. Teams can use a common management experience to assess security posture, monitor operational health and coordinate changes across distributed deployments.
For an organization adding branches while expanding campus and data center capacity, this helps reduce repeated management work. Hardware can be selected for each deployment while teams maintain shared security standards and a consistent approach to operating the environment.
The Latest Appliances Are Now Available
This newly introduced fifth-generation hardware firewall lineup expands the deployment options for customers as they modernize their networks.
Explore the PA-Series hardware firewall portfolio, review the model datasheets or contact your Palo Alto Networks account team to find the right platform for your deployment.
Performance, connectivity and available features vary by model, configuration and PAN-OS release. Security services require applicable subscriptions.