PaloAlto Networks PA-400 Series Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. PA-400 Series
  6. Hardware reference manual

PaloAlto Networks PA-400 Series Hardware Reference Manual

Next-gen firewall
Hide thumbs Also See for PA-400 Series:
Table of Contents

Advertisement

Quick Links

PA-400 Series Next-Gen Firewall
Hardware Reference
paloaltonetworks.com/documentation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PA-400 Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for PaloAlto Networks PA-400 Series

Summary of Contents for PaloAlto Networks PA-400 Series

  • Page 1 PA-400 Series Next-Gen Firewall Hardware Reference paloaltonetworks.com/documentation...
  • Page 2 2020-2021 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo © Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised August 16, 2021 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE |...

  • Page 3: Table Of Contents

    Install the PA-400 Series Firewall on a Flat Surface................25 Install the PA-400 Series Firewall on a Wall..................27 Install the PA-400 Series Firewall in a 19-inch Equipment Rack..........32 Install the PA-400 Series Firewall Using the PAN-PA-400-RACKTRAY......32 Set Up a Connection to the Firewall....................38 Connect Power to a PA-400 Series Firewall..........
  • Page 4 TABLE OF CONTENTS...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next-generation ® firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Upgrade/Downgrade Considerations for Firewalls and Appliances >...
  • Page 6 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...

  • Page 7: Upgrade/Downgrade Considerations For Firewalls And Appliances

    If the value is downgrade. If the value is less than 20, then contact less than 20, then contact support for assistance. support for assistance. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...

  • Page 8: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...

  • Page 9: Third-Party Component Support

    Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...

  • Page 10: Product Safety Warnings

    • Le dispositif de protection doit être raccordé à la terre et un câble Ethernet blindé de catégorie 5E ou supérieure doit être utilisé. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 11 (Pare-feu PA-7000 uniquement) Lors du retrait d’un tiroir de ventilation d’un pare-feu PA-7000, retirez tout d’abord le tiroir sur 2,5 cm, puis patientez au moins PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 12 You must use the American wire gauge (AWG) cable specified and torque all nuts to the torque value specified in the installation procedure for your firewall. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc.
  • Page 13 • A suitably-rated DC mains disconnect device must be provided as part of the building installation. French Translation: Un interrupteur d'isolement suffisant doit être fourni pendant l'installation du bâtiment. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 14 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin...

  • Page 15: Pa-400 Series Firewall Overview

    First Supported Software Release for the PA-410: PAN-OS 10.1.2 ® The following topics describe the hardware features of the PA-400 Series firewall. To view or compare performance and capacity information, refer to the Product Selection tool. > PA-400 Series Front Panel...
  • Page 16 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Overview 2021 Palo Alto Networks, Inc. ©...

  • Page 17: Pa-400 Series Front Panel

    (MRT), and the command line interface (CLI). Refer to Micro USB Console Port for more information and to download the Windows driver or PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Overview 2021 Palo Alto Networks, Inc. ©...
  • Page 18 LEDs on a PA-400 Series Firewall). The following image shows the front panel of the PA-410 and the table describes each front panel component. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Overview 2021 Palo Alto Networks, Inc. ©...
  • Page 19 • Parity: none • Stop bits: 1 • Flow control: None USB ports Use one of the two ports to bootstrap the firewall. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Overview 2021 Palo Alto Networks, Inc. ©...
  • Page 20 To view system firmware versions for any of the PA-400 Series firewalls, use the following CLI command: admin@PA-400> show system firmware PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Overview 2021 Palo Alto Networks, Inc.

  • Page 21: Pa-400 Series Back Panel

    Palo Alto Networks. The following image shows the back panel of the PA-410 and the table describes each back panel component. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Overview 2021 Palo Alto Networks, Inc. ©...
  • Page 22 Power Cord Retainer Use the power cord retainer to secure the power cord. To view system firmware versions for any of the PA-400 Series firewalls, use the following CLI command: admin@PA-400> show system firmware PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Overview...

  • Page 23: Install The Pa-400 Series Firewall

    Install the PA-400 Series Firewall The PA-400 Series next-generation firewall ships with the hardware required to install the firewall on a flat surface or on a wall. You can also order a rack mount kit to > Install the PA-400 Series Firewall on a Flat Surface >...
  • Page 24 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...

  • Page 25: Install The Pa-400 Series Firewall On A Flat Surface

    The PA-440, PA-450, and PA-460 firewalls ship with rubber “feet” attached to each corner of the device. As pictured below, the PA-440, PA-450, and PA-460 can be situated on a flat surface both horizontally and vertically. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...
  • Page 26 The PA-410 has rubber feet installed on its bottom side so it can only be installed in a horizontal position PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...

  • Page 27: Install The Pa-400 Series Firewall On A Wall

    Install the PA-400 Series Firewall on a Wall Install a PA-400 Series firewall on a drywall or plywood wall using the wall-mount kit as described in the following procedure. Mark the locations on the wall that line up with the wall mount holes on the bottom of the STEP 1 | firewall.
  • Page 28 . Connect the second power adapter through a different circuit breaker to provide power redundancy and allow for electrical circuit maintenance. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...
  • Page 29 Next, loop the Velcro strap through the side openings on the wall mount and over the power adapter. Lastly, loop the Velcro strap back over the top of the power adapter to secure it into place. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...
  • Page 30 After you secure the power adapter to the bracket, mount the bracket next to the firewall using wood or drywall screws as appropriate. (PA-440, PA-450, and PA-460) (PA-410) PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...
  • Page 31 ) You can install an optional second power adapter next to the first STEP 6 | PA-440, PA-450, and PA-460 power adapter. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...

  • Page 32: Install The Pa-400 Series Firewall In A 19-Inch Equipment Rack

    Install the PA-400 Series Firewall in a 19-inch Equipment Rack The PA-400 Series firewall rack kit (PAN-PA-400-RACKTRAY) enables you to install one or two PA-440, PA-450, or PA-460 firewalls in a two-post 19" rack. The installation hardware consists of a metal base and two rails that can be expanded to include up to two firewalls and two PSUs.
  • Page 33 Secure the rails to the equipment frame with mounting screws (not provided) compatible with STEP 3 | your equipment frame. Tighten the screws to their recommended torque value. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...
  • Page 34 With the front of the firewall facing forward, align the four rubber feet on the bottom of the device to the slotted holes in the provided mounting tray. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc.
  • Page 35 Slide the firewall power supply into the marked position. Fasten the provided velcro strap around the power supply until it is secure in place. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc.
  • Page 36 3 screws each (not provided). The screws must be compatible with your equipment frame. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc.
  • Page 37 STEP 14 | Proceed to Connect Power to a PA-400 Series Firewall PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...

  • Page 38: Set Up A Connection To The Firewall

    Set Up a Connection to the Firewall On first startup, the PA-400 Series firewall boots into Zero Touch Provisioning (ZTP) mode by default. ZTP mode allows you to automate the provisioning process of a new firewall that is added to a management server.
  • Page 39 You will have to enter the serial number (12-digit number identified as S/N) and claim key (8- digit number). These numbers are stickers attached to the back of the device. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall 2021 Palo Alto Networks, Inc.
  • Page 40 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-400 Series Firewall...

  • Page 41: Connect Power To A Pa-400 Series Firewall

    Connect Power to a PA-400 Series Firewall The PA-400 Series firewalls are powered by an external power adapter that converts an AC power source to DC power. The firewall can operate with one power adapter or you can install a second power adapter for power redundancy.
  • Page 42 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...

  • Page 43: Connect Power To A Pa-400 Series Firewall

    (standard mode or Zero Touch Set Up a Connection to the Firewall. Provisioning mode) as specified in PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-400 Series Firewall 2021 Palo Alto Networks, Inc. ©...

  • Page 44: Connect Power To A Pa-410 Firewall

    (standard mode or Zero Touch Set Up a Connection to the Firewall. Provisioning mode) as specified in PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-400 Series Firewall...

  • Page 45: Service The Pa-400 Series Firewall Hardware

    Service the PA-400 Series Firewall Hardware The following topics describe how to interpret the PA-400 Series status LEDs and how to replace a PA-400 Series power adapter. The power adapter is the only serviceable component on the PA-400 Series firewall.
  • Page 46 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-400 Series Firewall Hardware 2021 Palo Alto Networks, Inc. ©...

  • Page 47: Interpret The Leds On A Pa-400 Series Firewall

    Interpret the LEDs on a PA-400 Series Firewall The following table describes how to interpret the status LEDs on the PA-400 Series firewalls. The PA-410 firewall only has PWR, STAT, and ALM front panel LEDs. It does not have any back panel LEDs.
  • Page 48 If both power adapters are connected and one power adapter fails, the PWR LED on the back of the firewall turns off and the ALM LED turns red. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-400 Series Firewall Hardware 2021 Palo Alto Networks, Inc.

  • Page 49: Replace A Power Adapter On A Pa-400 Series Firewall

    The PA-410 can only operate on one power adapter. The CLI cannot be used to determine the status of the PA-400 Series firewalls power adapter. To manually interpret the status of the power adapter, verify that your power cable connections are secure and that the LED on the power adapter is on.
  • Page 50 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-400 Series Firewall Hardware...

  • Page 51: Pa-400 Series Firewall Specifications

    PA-400 Series Firewall Specifications The following topics describe the PA-400 Series firewall hardware specifications. For feature, capacity, and performance information, refer to the datasheet. > Physical Specifications > Electrical Specifications > Environmental Specifications > Miscellaneous Specifications...
  • Page 52 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Specifications 2021 Palo Alto Networks, Inc. ©...

  • Page 53: Physical Specifications

    • Firewall weight—3.1 lbs (1.41 kg) • Shipping weight—6.05 lbs (2.74 kg) PA-440, PA-450, and PA-460 • Firewall weight—5.0 lbs (2.27 kg) • Shipping weight—7.8 lbs (3.54 kg) PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Specifications 2021 Palo Alto Networks, Inc. ©...

  • Page 54: Electrical Specifications

    Specification Value Power adapter The PA-400 Series firewalls operate on DC power that is provided by the external power adapter (provided). The firewall can operate on one power adapter or you can install a second power adapter for power redundancy.

  • Page 55: Environmental Specifications

    The PA-400 Series firewalls use passive cooling and do not contain fans. Maximum BTUs/hour 102 BTUs/hour Acoustic noise Emits no sound. Maximum operating altitude 10,000ft (3,048m) PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Specifications 2021 Palo Alto Networks, Inc. ©...

  • Page 56: Miscellaneous Specifications

    The following table describes PA-400 Series firewall miscellaneous specifications. Specification Value PA-440, PA-450, and PA-460 Storage capacity • One 128 GB eMMC PA-410 • One 64 GB eMMC Mean time between failures (MTBF) 29 years PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Specifications...

  • Page 57: Pa-400 Series Firewall Compliance Statements Overview

    Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose.To view compliance statements for the PA-400 Series firewall, see PA-400 Series Firewall Compliance Statements...
  • Page 58 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Compliance Statements Overview 2021 Palo Alto Networks, Inc. ©...

  • Page 59: Pa-400 Series Firewall Compliance Statements

    • ICES: Canadian Department Compliance Statement: This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Compliance Statements Overview 2021 Palo Alto Networks, Inc.
  • Page 60 PA-400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-400 Series Firewall Compliance Statements Overview...

This manual is also suitable for:

Pa-410Pa-440Pa-450Pa-460

Table of Contents

Save PDF