PAN-SFP28-25G-SR: Palo Alto 25GBASE-SR SFP28 Optical Transceiver Module
Also listed as: PAN-SFP28-25G-SR=, 10-000012-00
The Palo Alto PAN-SFP28-25G-SR is a 25GBASE-SR SFP28 optical transceiver delivering 25 Gigabit Ethernet up to 100 meters over OM4 multimode fibre for high-end firewalls.
Specifications
| Part number | PAN-SFP28-25G-SR |
|---|---|
| Brand | Palo Alto |
| Type | Transceivers |
| Other numbers | PAN-SFP28-25G-SR=, 10-000012-00 |
| Status | current |
| Form factor | SFP28 |
| Speed | 25GbE |
| Wavelength nm | 850 |
| Connector | LC duplex |
| Cable type | Multimode Fibre |
| Max distance m | 100 |
About the PAN-SFP28-25G-SR
The Palo Alto PAN-SFP28-25G-SR optical transceiver delivers 25 Gigabit Ethernet transmission for enterprise data center firewalls and high throughput cloud interconnects. Transmitting over 850 nanometer multimode optical fibre up to 100 meters on OM4, it provides 2.5 times the bandwidth of 10GbE links using the compact SFP form factor.
Compatibility
Compatible with Palo Alto PA-3400 Series, PA-5400 Series, and PA-7000 Series firewalls equipped with SFP28 interfaces. It operates under PAN-OS with automated transceiver identification and continuous digital diagnostic telemetry reporting across data center networks.
How to identify a genuine unit
Enclosed in an SFP28 metal casing featuring an orange or black extraction latch bail indicating short-reach multimode optics. The manufacturer label identifies the component as PAN-SFP28-25G-SR with Palo Alto Networks branding, individual serial number barcode, and laser safety warnings.
Buying used
Inspect the optical bore with a fiber microscope to verify clean optical surfaces. Test the module in a 25GbE firewall port with FEC enabled to confirm error-free packet reception, stable optical link synchronization, and proper digital optical monitoring telemetry.
Fits these models
- Palo Alto PA Series PA-3440
- Palo Alto PA Series PA-5260
- Palo Alto PA Series PA-5280
- Palo Alto PA Series PA-5410
- Palo Alto PA Series PA-5420
- Palo Alto PA Series PA-5430
- Palo Alto PA Series PA-5440
- Palo Alto PA Series PA-5450
- Palo Alto PA Series PA-7050
- Palo Alto PA Series PA-7080
Works together
How the Palo Alto PAN-SFP28-25G-SR connects to servers, storage and the network: 3 ways, with the hardware on each path.
iSCSI and NVMe/TCP over Ethernet
Keep the speed the same at all three points: a 25GbE server, a 25GbE switch port and a 25GbE array port. Mixed speeds work but the slowest link sets the pace.
Adapters for the server
BCM957414A4142CC Broadcom NetXtreme-E BCM57414 Dual-Port 25GbE SFP28 PCIe 3.0 Ethernet Network Adapter
540-BBGY Dell Broadcom 57414 Dual Port 10/25GbE SFP28 PCIe Low Profile Network Adapter
540-BBHB Dell Broadcom 57414 Dual Port 10/25GbE SFP28 OCP 3.0 Mezzanine Network Adapter
540-BBJL Dell Mellanox ConnectX-4 Lx Dual Port 25GbE SFP28 Network Daughter Card (rNDC)
Switches
Arista 7050X 7050SX3-48YC8 1U fixed switch
Arista 7260X 7260CX3-64 2U fixed switch
Arista 7280R 7280SR3-48YC8 1U fixed switch
Cisco Nexus 31108PC-V 1U fixed switch
Storage
Dell PowerMax 2500 4U multi-node rack
Dell PowerMax 8500 system bay multi-enclosure
Dell PowerProtect DD6400 2U appliance
Dell PowerProtect DD6900 2U appliance + shelves
Dell PowerProtect DD9400 2U appliance + shelves
Dell PowerProtect DD9410 2U appliance + shelves
File storage (NFS and SMB)
Front-end ports face the clients; back-end ports (on scale-out systems) connect the nodes to each other and need their own switch pair.
Adapters for the server
BCM957414A4142CC Broadcom NetXtreme-E BCM57414 Dual-Port 25GbE SFP28 PCIe 3.0 Ethernet Network Adapter
540-BBGY Dell Broadcom 57414 Dual Port 10/25GbE SFP28 PCIe Low Profile Network Adapter
540-BBHB Dell Broadcom 57414 Dual Port 10/25GbE SFP28 OCP 3.0 Mezzanine Network Adapter
540-BBJL Dell Mellanox ConnectX-4 Lx Dual Port 25GbE SFP28 Network Daughter Card (rNDC)
Switches
Arista 7050X 7050SX3-48YC8 1U fixed switch
Arista 7260X 7260CX3-64 2U fixed switch
Arista 7280R 7280SR3-48YC8 1U fixed switch
Cisco Nexus 31108PC-V 1U fixed switch
Storage
Dell PowerScale A300 4U
Dell PowerScale A3000 4U 4-node chassis
Dell PowerScale F200 1U rack
Dell PowerScale F210 1U node
Dell PowerScale F600 1U rack
Dell PowerScale F900 2U rack
Hyperconverged cluster
Plan at least two 25GbE ports per node to two switches; all-NVMe clusters often move to 100GbE.
HCI nodes
Dell VxRail D560 1U short-depth rack
Dell VxRail D560F 1U short-depth rack
Dell VxRail E660 1U rack
Dell VxRail E660F 1U rack
Adapters for the server
BCM957414A4142CC Broadcom NetXtreme-E BCM57414 Dual-Port 25GbE SFP28 PCIe 3.0 Ethernet Network Adapter
540-BBGY Dell Broadcom 57414 Dual Port 10/25GbE SFP28 PCIe Low Profile Network Adapter
540-BBHB Dell Broadcom 57414 Dual Port 10/25GbE SFP28 OCP 3.0 Mezzanine Network Adapter
540-BBJL Dell Mellanox ConnectX-4 Lx Dual Port 25GbE SFP28 Network Daughter Card (rNDC)
Switches
Arista 7050X 7050SX3-48YC8 1U fixed switch
Arista 7260X 7260CX3-64 2U fixed switch
Arista 7280R 7280SR3-48YC8 1U fixed switch
Cisco Nexus 31108PC-V 1U fixed switch
Plan and size it
- Draw this setup in the topology planner mrplanb.com
- Add up rack power and space rack-density.com
- iSCSI explained mrplanb.com
- Virtualization storage Ledger: scored storage platforms mrplanb.com
- Network monitoring tools compared mrplanb.com
Check compatibility with Palo Alto Networks
Before you buy, confirm the exact configuration against the vendor's own lists: firmware levels, operating systems, adapters and optics that Palo Alto Networks has tested with the Palo Alto PAN-SFP28-25G-SR.
- Compatibility Palo Alto Networks Compatibility Matrix
- Support Palo Alto Networks Support
FAQ
What is the maximum optical reach of PAN-SFP28-25G-SR?
It supports links up to 70 meters on OM3 multimode fibre and 100 meters on OM4 multimode fibre.
Does this transceiver require Forward Error Correction?
Yes, host interfaces must enable IEEE 802.3by RS-FEC to achieve the specified bit error rate.
Buying or selling PAN-SFP28-25G-SR?
New, refurbished or used. Tell us the quantity and condition and we connect you with a vetted reseller in your region, usually within one working day.
Sources
- Palo Alto Networks Transceiver and Cable Compatibility, checked 2026-10-27