PaloAlto Networks PA-220 Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. PA-220
  6. Hardware reference manual

PaloAlto Networks PA-220 Hardware Reference Manual

Next-gen firewall
Hide thumbs Also See for PA-220:
Table of Contents

Advertisement

Quick Links

PA-220 Next-Gen Firewall Hardware
Reference
paloaltonetworks.com/documentation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PA-220 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for PaloAlto Networks PA-220

Summary of Contents for PaloAlto Networks PA-220

  • Page 1 PA-220 Next-Gen Firewall Hardware Reference paloaltonetworks.com/documentation...
  • Page 2 2019-2019 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo © Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised March 13, 2019 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE |...

  • Page 3: Table Of Contents

    Install the PA-220 Firewall on a Flat Surface..................21 Install the PA-220 Firewall on a Wall....................22 Install the PA-220 Firewall in a 19-inch Equipment Rack.............. 24 Connect Power to a PA-220 Firewall............29 How to Connect Power to a PA-220 Firewall.................. 31 Service the PA-220 Firewall Hardware............33...
  • Page 4 TABLE OF CONTENTS...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next-generation ® firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Tamper Proof Statement >...
  • Page 6 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2019 Palo Alto Networks, Inc. ©...

  • Page 7: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2019 Palo Alto Networks, Inc. ©...

  • Page 8: Third-Party Component Support

    Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2019 Palo Alto Networks, Inc. ©...

  • Page 9: Product Safety Warnings

    émissions électromagnétiques (CEM). • (PA-220 firewalls only) The PA-220 firewall meets the requirements of IEC 61000-4-5 surge immunity test. To prevent damage from electrical surges on Ethernet ports, we recommend that you use an Ethernet surge protection device with the following specifications: •...
  • Page 10 • The DC battery return wiring on the firewall must be connected as an isolated DC (DC-I) return. French Translation: Le câblage de retour de batterie c.c. sur le pare-feu doit être raccordé en tant que retour c.c. isolé (CC-I). PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2019 Palo Alto Networks, Inc. ©...
  • Page 11 • A suitably-rated DC mains disconnect device must be provided as part of the building installation. French Translation: Un interrupteur d'isolement suffisant doit être fourni pendant l'installation du bâtiment. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2019 Palo Alto Networks, Inc. ©...
  • Page 12 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin...

  • Page 13: Pa-220 Firewall Overview

    First Supported Software Release: PAN-OS ® The following topics describe the hardware features of the PA-220 firewall. To view or compare performance and capacity information, refer to the Product Selection tool. > PA-220 Front Panel > PA-220 Back Panel...
  • Page 14 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Overview 2019 Palo Alto Networks, Inc. ©...

  • Page 15: Pa-220 Front Panel

    PA-220 Front Panel The following image shows the front panel of the PA-220 firewall and the table describes each front panel component. Item Component Description Ethernet ports Eight RJ-45 10/100/1000Mbps ports for network traffic. You can set the link speed and duplex or choose auto-negotiate.
  • Page 16 LED status indicators Five LEDs that indicate the status of the firewall hardware components (see Interpret the LEDs on a PA-220 Firewall). PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Overview 2019 Palo Alto Networks, Inc. ©...

  • Page 17: Pa-220 Back Panel

    PA-220 Back Panel The following image shows the back panel of the PA-220 firewall and the table describes each back panel component. Item Component Description Power adapter inputs Use the power inputs to connect power to the firewall. (PWR 1 and PWR 2)
  • Page 18 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Overview...

  • Page 19: Install The Pa-220 Firewall

    Install the PA-220 Firewall The PA-220 next-generation firewall ships with the hardware required to install the firewall on a flat surface or on a wall. You can also order a rack mount kit to > Install the PA-220 Firewall on a Flat Surface >...
  • Page 20 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-220 Firewall 2019 Palo Alto Networks, Inc. ©...

  • Page 21: Install The Pa-220 Firewall On A Flat Surface

    Attach the rubber pads to the recessed circles on the bottom of the firewall and then place the firewall on a flat stable surface. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-220 Firewall 2019 Palo Alto Networks, Inc. ©...

  • Page 22: Install The Pa-220 Firewall On A Wall

    Install the PA-220 Firewall on a Wall Install a PA-220 firewall on a drywall or plywood wall using the wall-mount kit as describe in the following procedure. If the four rubber pads are installed on the bottom of the firewall, remove them.
  • Page 23 Connect the second power adapter through a different circuit breaker to provide power redundancy and allow for electrical circuit maintenance. The following image shows a completed installation for a PA-220 firewall with only a single power adapter. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-220 Firewall 2019 Palo Alto Networks, Inc.

  • Page 24: Install The Pa-220 Firewall In A 19-Inch Equipment Rack

    The PA-220 firewall one-unit (1U) rack tray kit (PAN-PA-220-RACKTRAY) enables you to install one or two PA-220 firewalls in a two-post 19" rack. If you install the firewall(s) and rack tray in a four-post rack, purchase and install the four-post rack kit (PAN-PA-1RU-RACK4) to secure the firewall to the back rack- postsThe installation hardware (screws and brackets) for the left side of the tray are contained in bags and the installation hardware for the right side of the tray are pre-installed.
  • Page 25 4-40 x 1/4” screw for each bracket. STEP 5 | Install a second PA-220 firewall into the right side of the rack tray: (Optional) First remove the pre-installed rack tray installation hardware and set aside this hardware for use when you install the second firewall.
  • Page 26 With the help of another person, hold the assembled PA-220 firewall rack tray in place in the STEP 7 | equipment rack and secure the rack tray brackets to the front rack posts using a #2 Phillips- head screwdriver.
  • Page 27 (#10-32 x 3/4” or #12-24 x 1/2”) and torque to 25 in-lbs. Use cage nuts to secure the screws if the rack has square holes. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-220 Firewall 2019 Palo Alto Networks, Inc.
  • Page 28 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-220 Firewall...

  • Page 29: Connect Power To A Pa-220 Firewall

    Connect Power to a PA-220 Firewall The PA-220 firewall is powered by an external power adapter that converts an AC power source to DC power. The firewall can operate with one power adapter or you can install a second power adapter for power redundancy.
  • Page 30 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-220 Firewall 2019 Palo Alto Networks, Inc. ©...

  • Page 31: How To Connect Power To A Pa-220 Firewall

    (Optional) the PWR 2 port and plug the AC connector into an AC power source. Connect the second PA-220 power adapter through a different circuit breaker to provide power redundancy and to allow for electrical circuit maintenance. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-220 Firewall 2019 Palo Alto Networks, Inc.
  • Page 32 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-220 Firewall...

  • Page 33: Service The Pa-220 Firewall Hardware

    Service the PA-220 Firewall Hardware The following topics describe how to interpret the PA-220 status LEDs and how to replace a PA-220 power adapter. The power adapter is the only serviceable component on the PA-220 firewall. > Interpret the LEDs on a PA-220 Firewall...
  • Page 34 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-220 Firewall Hardware 2019 Palo Alto Networks, Inc. ©...

  • Page 35: Interpret The Leds On A Pa-220 Firewall

    Interpret the LEDs on a PA-220 Firewall The following table describes how to interpret the status LEDs on the PA-220 firewall. Description Front Panel LEDs HA (High Availability) • Green—The firewall is the active peer in an active/passive configuration. • Yellow—The firewall is the passive peer in an active/passive configuration.
  • Page 36 If both power adapters are connected and one power adapter fails, the PWR LED on the back of the firewall turns off and the ALM LED turns red. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-220 Firewall Hardware 2019 Palo Alto Networks, Inc. ©...

  • Page 37: Replace A Power Adapter On A Pa-220 Firewall

    Replace a Power Adapter on a PA-220 Firewall The PA-220 firewall can operate on one power adapter or you can install a second power adapter for power redundancy. If two power adapters are installed and one fails, you can replace the failed power adapter without interruption.
  • Page 38 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-220 Firewall Hardware...

  • Page 39: Pa-220 Firewall Specifications

    PA-220 Firewall Specifications The following topics describe the PA-220 firewall hardware specifications. For feature, capacity, and performance information, refer to the PA-220 firewall datasheet. > Physical Specifications > Electrical Specifications > Environmental Specifications > Miscellaneous Specifications...
  • Page 40 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Specifications 2019 Palo Alto Networks, Inc. ©...

  • Page 41: Physical Specifications

    If the rubber feet are installed on the bottom of the firewall, add .78” (2cm) to the height.Rack units and dimensions if the PA-220 firewall is installed in the PA-220 19” rack kit. • Rack units—1U •...

  • Page 42: Electrical Specifications

    The following table describes PA-220 firewall electrical specifications. Specification Value Power adapter The PA-220 firewall operates on DC power that is provided by the external power adapter (provided). The firewall can operate on one power adapter or you can install a second power adapter for power redundancy.

  • Page 43: Environmental Specifications

    32°F to 104°F (0° to 40°C) Non-operating temperature -4°F to 158°F (-20° to 70°C) Humidity tolerance 5% to 90% non-condensing Airflow The PA-220 firewall uses passive cooling and does not contain fans. Maximum BTUs/hour 102 BTUs/hour Acoustic noise Emits no sound.

  • Page 44: Miscellaneous Specifications

    Miscellaneous Specifications The following table describes PA-220 firewall miscellaneous specifications. Specification Value Storage capacity One 32GB SSD for system files and log storage. Mean time between failures (MTBF) 29 years PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Specifications...

  • Page 45: Pa-220 Firewall Compliance Statements Overview

    Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose.To view compliance statements for the PA-220 firewall, see PA-220 Firewall Compliance Statements...
  • Page 46 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Compliance Statements Overview 2019 Palo Alto Networks, Inc. ©...

  • Page 47: Pa-220 Firewall Compliance Statements

    • ICES: Canadian Department Compliance Statement: This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Compliance Statements Overview 2019 Palo Alto Networks, Inc. ©...
  • Page 48 PA-220 NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-220 Firewall Compliance Statements Overview...

Table of Contents

Save PDF