We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Palo Alto Networks PA-540 desktop firewall, silver metal enclosure, front panel with multiple RJ45 and SFP ports, status LEDs

Palo Alto Networks

Palo Alto Networks PAN-PA-540 PA-540 firewall appliance

SKU CH-CKF0-5EVBG MPN PAN-PA-540

Desktop firewall appliance with 120 GB storage, 3.8 Gbps firewall throughput, 2.2 Gbps threat prevention and 2.0 Gbps IPsec VPN, supporting 248K concurrent sessions in a 30 W unit

  • Form FactorDesktop
  • System MemoryStorage Capacity: 120 GB
  • VPNFirewall throughput (appmix): 3.8 Gbps Threat Prevention thr
  • Power InputInput Voltage (Input Frequency): 100-240 VAC (50-60 Hz) Max
  • Max Power Consumption30W
  • FeaturesNETWORKING FEATURES Interface Modes: L2 mode (not available

Model PA-540

  • ML-powered threat prevention stops attacks in real time
  • 8 Gbps firewall throughput handles heavy traffic loads
  • 2 Gbps threat prevention throughput inspects without slowing
  • 8 x 1G RJ45 plus 2 x 1G SFP connects diverse links
  • Desktop form factor fits branch offices and remote sites

Desktop firewall with 120 GB storage

The Palo Alto Networks PA-540 is a desktop next-generation firewall that provides 3.8 Gbps firewall throughput and 2.2 Gbps threat prevention throughput. It supports 248K concurrent sessions and 50K new sessions per second. The unit includes a single virtual system base licence expandable to two with a separate purchase. It is suited to branch offices and small enterprises needing integrated security services.

Check power and uplink compatibility

The appliance accepts 100-240 VAC at 50-60 Hz with a maximum draw of 30 W and 4 A at 12 VDC. Network connectivity consists of eight 1G RJ45 ports and two 1G SFP cages. Verify that your existing switches provide matching copper or fibre uplinks and that rack or desktop space accommodates the 1.74" H x 10.4" D x 8" W chassis. A separate licence is required for each additional virtual system beyond the base.

Console and management ports aid deployment

A dedicated 10/100/1000 out-of-band management port, RJ45 console, USB-C console and USB port are provided for local configuration and Zero Touch Provisioning. High availability is supported in active/active and active/passive modes without extra hardware. The single-pass architecture maintains predictable performance when security subscriptions are enabled.

Highlights

  • ML-powered threat prevention stops attacks in real time
  • 8 Gbps firewall throughput handles heavy traffic loads
  • 2 Gbps threat prevention throughput inspects without slowing
  • 8 x 1G RJ45 plus 2 x 1G SFP connects diverse links
  • Desktop form factor fits branch offices and remote sites

Specifications

BrandPalo Alto Networks
SeriesPA-500 Series
ModelPA-540
Part NumberPAN-PA-540
Form FactorDesktop
System MemoryStorage Capacity: 120 GB
VPNFirewall throughput (appmix): 3.8 Gbps
Threat Prevention throughput (appmix): 2.2 Gbps
IPsec VPN throughput: 2.0 Gbps
Max concurrent sessions: 248K
New sessions per second: 50K
Virtual systems* (base/max): 1/2
*Adding virtual systems over the base quantity requires a separately purchased license.
Power InputInput Voltage (Input Frequency): 100-240 VAC (50-60 Hz)
Max Current Consumption: 4 A @ 12 VDC
Max Power Consumption30W
FeaturesNETWORKING FEATURES
Interface Modes:
L2 mode (not available on MC-LAG aggregate interfaces), L3, tap, and virtual wire (transparent mode).
Routing:
OSPFv2/v3 and MP-BGP with graceful restart, RIP, and static routing.
Policy-based forwarding.
PPPoE and DHCP clients are supported for dynamic address assignment for both IPv4 and IPv6.
DHCPv4 server.
Multicast: PIM-SM, PIM-SSM, IGMPv2, and v3.
Advanced SD-WAN:
Path quality measurement (jitter, packet loss, and latency).
Bandwidth monitoring.
Key exchange: Manual key, IKEv1, and IKEv2 (pre-shared key and certificate-based authentication).
Dimensions1.74" H x 10.4" D x 8" W (43.9 mm H x 265 mm D x 203 mm W)
Weight5.8 lbs
Shipping weight2.63 kg
Package size264 × 203 × 44 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What cables or accessories come with the PA-540, and do I need to buy SFP transceivers separately?

The unit includes a power cord for the 100-240 VAC supply and a console cable for the RJ45 or USB-C console port. The two 1G SFP ports require compatible transceivers, which are sold separately.

The PA-500 series lists several models; what throughput figures distinguish the PA-540?

The PA-540 delivers 3.8 Gbps firewall throughput (appmix), 2.2 Gbps threat prevention throughput (appmix) and 2.0 Gbps IPsec VPN throughput, with 248K max concurrent sessions and 50K new sessions per second.

How does the 3.8 Gbps firewall throughput figure translate when threat prevention is enabled on a live network?

With threat prevention active, throughput is rated at 2.2 Gbps (appmix), so real-world traffic will fall between 2.2 and 3.8 Gbps depending on the security profile applied.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.