Pa 3410 sizing

Question

Is a Palo Alto PA-3410 sufficient for 7–8 Gbps with Full Threat Prevention and ~80% SSL Decryption?
Hi everyone,
We’re evaluating a Palo Alto PA-3410 as our internet edge firewall and would appreciate feedback from anyone running one in production.
Our requirements:
7–8 Gbps sustained internet throughput
Full security profile enabled (Threat Prevention, Antivirus, Anti-Spyware, URL Filtering, WildFire, DNS Security, etc.)
Approximately 80% of traffic requires SSL/TLS decryption
Enterprise environment with several thousand users
Mix of Microsoft 365, web browsing, video conferencing, and general business applications
I know the datasheet provides benchmark numbers, but I’m more interested in real-world performance.
A few questions:
Can the PA-3410 realistically handle 7–8 Gbps with full security profiles and around 80% SSL decryption enabled?
What CPU and dataplane utilization do you typically see at those traffic levels?
Have you experienced any bottlenecks or limitations?
If you were purchasing today, would you still choose the PA-3410, or would you recommend moving to a larger model (e.g., PA-5410 or PA-5410/5420 series) for additional headroom and future growth?
Any real-world deployment experiences or recommendations would be greatly appreciated.

Posted Aug 8, 2026, 5:34 PM UTC

712
Loading comments…