Firewall Throughput: 8.9 Gbps HTTP / 6.8 Gbps appmix (reseller-listed; not confirmed against the official datasheet, which defers to the Product Selection tool)
Threat Prevention Throughput: 3.3 Gbps HTTP / 3.2 Gbps appmix (reseller-listed; other listings show 4.2 to 4.5 Gbps, unverified)
IPsec VPN Throughput: 4.6 Gbps (reseller-listed; other listings show 3.5 Gbps, unverified)
Form Factor: 1U rack-mount, two load-sharing 450W AC/DC power supplies (redundant)
Curation Review
✔ Pros:Large session capacity (945,000 concurrent, 100,000 new sessions/sec) for a 1U appliance; Dual redundant 450W AC/DC power supplies; Built-in PoE on ports 9-12 with a 150W PoE load per Palo Alto docs; Multi-gig (2.5G/5G) copper ports for modern access and uplinks; Dedicated HA port and out-of-band management port; ML-powered NGFW aimed at branch and midsize enterprise deployments
✘ Cons:Single IPsec tunnel throughput is capped by one CPU core (Palo Alto KB), so the headline VPN figure does not scale per tunnel; Published throughput numbers vary widely across resellers and the official performance figures were not verifiable; Premium price (about $9,995 USD at Newegg, roughly CAD 16,815 at CDW Canada); Threat Prevention and URL subscriptions add significant recurring cost; Listed US pricing is from a single retailer and was out of stock at the time of the search
✔ Pros:25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons:IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers