Palo Alto Networks · PA-3500 series
Palo Alto Networks PA-3540
The Palo Alto Networks PA-3540 is a rackmount firewall that runs PAN-OS. Palo Alto Networks publishes a firewall throughput of 55 Gbps and a threat prevention throughput of 35 Gbps for it. It has 8 x 10G multi-gig copper, 12 x 1G/10G SFP+, 6 x 10G/25G SFP28, 4 x 40G/100G QSFP28.
- Firewall throughput
- 55 Gbps
- Threat protection
- 35 Gbps
- IPsec VPN
- 36 Gbps
- Form
- Rackmount
Who it suits
As a rackmount unit it suits a head office, campus or data centre with a server rack. With protection switched on, plan for an internet line of no more than about two-thirds of the threat prevention throughput figure. For the PA-3540 that means a line of up to about 23 Gbps.
Palo Alto Networks PA-3540 specifications
| Performance | |
|---|---|
| Firewall throughput | 55 Gbps |
| Threat Prevention throughput | 35 Gbps |
| IPsec VPN throughput | 36 Gbps |
| Maximum concurrent sessions | 6 million |
| New sessions per second | 550,000 |
| Hardware | |
| Form factor | 2U, 19" rack |
| Ports | 8 x 10G multi-gig copper, 12 x 1G/10G SFP+, 6 x 10G/25G SFP28, 4 x 40G/100G QSFP28 |
| Storage | 960 GB SSD |
| Power supply | 1,200 W power supply |
| Power consumption | 1,066 W maximum |
Specifications from Palo Alto Networks's published data, checked October 2026. See Palo Alto Networks's firewall pages. Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care. Confirm details before ordering.
What we do with it
- Supply
Firewall supply and installation
The right-sized firewall from any of the five brands, with its licence, installed and configured at your site.
- Audit
Firewall configuration and audit
A review of your rules, firmware, admin access and VPNs, with the weak points fixed and written down.
- Renewal
Firewall licence renewal
Renewals for FortiGuard, Sophos, Palo Alto Networks, SonicWall and Juniper subscriptions, quoted from your serial number.
- Migrate
Firewall migration
Move from an old firewall to a new one, same brand or another, with the rules and VPNs carried over.
Questions about the PA-3540
What internet speed can the PA-3540 handle?
Palo Alto Networks publishes a threat prevention throughput of 35 Gbps for the PA-3540. Leaving headroom for busy hours, that suits an internet line of up to about 23 Gbps with protection switched on. With inspection off, its firewall throughput is 55 Gbps.
What ports does the PA-3540 have?
8 x 10G multi-gig copper, 12 x 1G/10G SFP+, 6 x 10G/25G SFP28, 4 x 40G/100G QSFP28.
How many connections can the PA-3540 handle?
Palo Alto Networks lists a maximum of 6 million concurrent sessions and 550,000 new sessions per second.
Does the PA-3540 need a licence?
The hardware works as a basic firewall on its own. Protection features such as intrusion prevention, web filtering and anti-malware need an active Palo Alto Networks subscription, and so do firmware updates and support. We quote the firewall with the licence term you choose.
Do you supply the PA-3540 with installation?
Yes. We supply it with its licence registered, install and configure it at your site, and hand over the logins and documentation. Ask for a quote on this page.
Similar Palo Alto Networks models
- Rackmount
Palo Alto Networks PA-5410
Firewall 52 Gbps, threat protection 35 Gbps
- Rackmount
Palo Alto Networks PA-1530-POE
Firewall 35 Gbps, threat protection 27 Gbps
- Rackmount
Palo Alto Networks PA-3530
Firewall 45 Gbps, threat protection 25 Gbps
- Rackmount
Palo Alto Networks PA-5420
Firewall 70 Gbps, threat protection 50 Gbps
Closest models from other brands
Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care.
- Rackmount
Fortinet FortiGate 3000F
Firewall 397 / 389 / 221 Gbps, threat protection 33 Gbps
- Rackmount
Sophos XGS 4500
Firewall 80 Gbps, threat protection 31.85 Gbps
- Rackmount
SonicWall NSsp 11700
Firewall 47 Gbps, threat protection 37 Gbps
- Rackmount
Juniper SRX4200
Firewall 80 Gbps, threat protection 30 Gbps (IPS)