PA‐5200 Series Firewall Overview
Item Component (Continued)
4
HSCI port
5
AUX 1 and AUX 2 ports
6
HA1‐A and HA1‐B
© Palo Alto Networks, Inc.
Description
These ports vary depending on your firewall model:
• PA‐5220 firewall—One QSFP+ 40Gbps port (supports only a 40Gbps
(QSFP+) transceiver or QSFP+ active optical cable).
• PA‐5250 and PA‐5260 firewalls—One QSFP28 40/100Gbps port
(supports 40Gbps (QSFP+) or 100Gbps transceiver (QSFP28) or equivalent
active optical cables). The link speed is based on the installed transceiver.
Use this port to connect two PA‐5200 Series firewalls in a high availability
(HA) configuration as follows:
• In an active/passive configuration, this port is for HA2 (data link).
• In an active/active configuration, you can configure this port for HA2
and/or HA3. HA3 is used for packet forwarding for asymmetrically
routed sessions that require Layer 7 inspection for App‐ID™ and
Content‐ID™.
The HSCI ports must be connected directly between the two firewalls
in the HA configuration (not between a network switch or router).
When directly connecting the HSCI ports between two PA‐5220
firewalls that are physically located near each other, Palo Alto
Networks recommends that you use a 40Gbps QSFP+ Active Optical
Cable (AOC). When directly connecting two PA‐5250 or two PA‐5260
firewalls, use either a 40Gbps QSFP+ Active Optical Cable (AOC) or a
100Gbps QSFP28 Active Optical Cable (AOC).
For installations where the two firewalls are not near each other and
you cannot use an AOC cable, use a standard 40Gbps or 100Gbps
transceivers and the appropriate cable length.
Use these SFP+ ports for HA1, management functions, or log forwarding to
Panorama.
For information on configuring the port, refer to the on‐device Help content
in Device > Setup >
Interfaces or refer to the PAN‐OS 8.0 Web Interface
Reference.
Two RJ‐45 10/100/1000Mbps ports for high‐availability control (HA1).
Copyright © 2007-2017 Palo Alto Networks
PA‐5200 Next‐Gen Firewall Hardware Reference • 11
Front Panel Description
Need help?
Do you have a question about the PA-5200 Series and is the answer not in the manual?