Interfaces: Ports 1-20 SFP/SFP+ (1G/10G); ports 21-24 SFP28 (25G); QSFP28 40G/100G ports with breakout support (port count varies by source); dedicated management port
Form Factor: 2U rack-mountable
Curation Review
✔ Pros:High firewall and threat prevention throughput for a 2U appliance; 3.6M max sessions and 295,000 new sessions/sec suit data center and high-traffic edge deployments; 25G and 40G/100G port options with breakout support; optional redundant power supply; 4,094 802.1Q VLAN tags per device; supports L2, L3, tap, virtual wire and 802.3ad/LACP aggregation; full PAN-OS feature set and App-ID, Threat Prevention and WildFire subscriptions
✘ Cons:Premium price, with reseller pricing ranging from roughly $78K to $118K and quote-based pricing common; throughput figures differ across datasheet versions and resellers, so sizing requires checking the current official datasheet; threat prevention throughput is roughly 40% below firewall throughput with full inspection enabled; only 10 virtual systems in the base configuration, with extra VSYS requiring a separate license; full functionality depends on recurring subscription licenses; power, port layout and dimensions could not be verified from official sources
✔ Pros:25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons:IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers