PaloAlto Networks PA-220 Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. PA-220
  6. Hardware reference manual

PaloAlto Networks PA-220 Hardware Reference Manual

Next-gen firewall
Hide thumbs Also See for PA-220:
Table of Contents

Advertisement

Quick Links

PA-220 Next-Gen Firewall Hardware
Reference
docs.paloaltonetworks.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PA-220 and is the answer not in the manual?

Questions and answers

Related Manuals for PaloAlto Networks PA-220

Summary of Contents for PaloAlto Networks PA-220

  • Page 1 PA-220 Next-Gen Firewall Hardware Reference docs.paloaltonetworks.com...
  • Page 2 Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks menoned herein may be trademarks of their respecve companies. Last Revised June 15, 2020 PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 3: Table Of Contents

    Install the PA-220 Firewall on a Flat Surface..............20 Install the PA-220 Firewall on a Wall...................21 Install the PA-220 Firewall in a 19-inch Equipment Rack..........23 Install the PA-220 Firewall Using the PAN-PA-220-RACKTRAY....... 23 Install the PA-220 Firewall Using the PAN-PA-220-RACK-SINGLE....27 Connect Power to a PA-220 Firewall............
  • Page 4 Table of Contents PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next- ® generaon firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Upgrade/Downgrade Consideraons for Firewalls and Appliances >...

  • Page 6: Upgrade/Downgrade ConsideraOns For Firewalls And Appliances

    20, then proceed with the upgrade. If the value the downgrade. If the is less than 20, then value is less than 20, contact support for then contact support for assistance. assistance. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 7: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 8: Third-Party Component Support

    Before You Begin Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 9: Product Safety Warnings

    Meez au rebut les baeries usagées conformément aux instrucons. • I/O ports are intended for intra-building connecons only and not intended for OSP (Outside Plant) connecons or any network connecons subject to external voltage surge events. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 10 Toutefois, vous devez le faire dans les 45 secondes et vous ne pouvez remplacer qu’un roir à la fois, sinon le circuit de protecon thermique arrêtera le pare-feu. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 11 (de service) qu'à l'aide d'un oul spécial, cadenas ou clé, ou autre disposif de sécurité, et qui est contrôlée par l'autorité responsable du site. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 12 • A suitably-rated DC mains disconnect device must be provided as part of the building installaon. French Translaon: Un interrupteur d'isolement suffisant doit être fourni pendant l'installaon du bâment. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 13: Pa-220 Firewall Overview

    First Supported Soware Release: PAN-OS ® The following topics describe the hardware features of the PA-220 firewall. To view or compare performance and capacity informaon, refer to the Product Selecon tool.

  • Page 14: Pa-220 Front Panel

    PA-220 Firewall Overview PA-220 Front Panel The following image shows the front panel of the PA-220 firewall and the table describes each front panel component. Item Component Descripon Ethernet ports Eight RJ-45 10/100/1000Mbps ports for network traffic. You can set the link speed and duplex or choose auto- negoate.
  • Page 15 firewall with a specific PAN-OS configuraon and then license it and make it operaonal on your network. LED status indicators Five LEDs that indicate the status of the firewall hardware PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 16 PA-220 Firewall Overview Item Component Descripon components (see Interpret the LEDs on a PA-220 Firewall). PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 17: Pa-220 Back Panel

    PA-220 Firewall Overview PA-220 Back Panel The following image shows the back panel of the PA-220 firewall and the table describes each back panel component. Item Component Descripon Power adapter inputs Use the power inputs to connect power to the firewall.
  • Page 18 PA-220 Firewall Overview PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 19: Install The Pa-220 Firewall

    Install the PA-220 Firewall The PA-220 next-generaon firewall ships with the hardware required to install the firewall on a flat surface or on a wall. You can also order a rack mount kit to > Install the PA-220 Firewall on a Flat Surface >...

  • Page 20: Install The Pa-220 Firewall On A Flat Surface

    Install the PA-220 Firewall Install the PA-220 Firewall on a Flat Surface Aach the rubber pads to the recessed circles on the boom of the firewall and then place the firewall on a flat stable surface. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 21: Install The Pa-220 Firewall On A Wall

    Install the PA-220 Firewall Install the PA-220 Firewall on a Wall Install a PA-220 firewall on a drywall or plywood wall using the wall-mount kit as describe in the following procedure. STEP 1 | If the four rubber pads are installed on the boom of the firewall, remove them.
  • Page 22 Connect the second power adapter through a different circuit breaker to provide power redundancy and allow for electrical circuit maintenance. The following image shows a completed installaon for a PA-220 firewall with only a single power adapter. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 23: Install The Pa-220 Firewall In A 19-Inch Equipment Rack

    The PA-220 firewall one-unit (1U) rack tray kit (PAN-PA-220-RACKTRAY) enables you to install one or two PA-220 firewalls in a two-post 19" rack. The installaon hardware (screws and brackets) for the le side of the tray is contained in bags. The installaon hardware for the right side of the tray is pre-installed.
  • Page 24 Install the PA-220 Firewall STEP 3 | Install the PA-220 power adapter in the power adapter bracket and secure it with the Velcro strap. (Oponal): Install a second power adapter for redundancy. STEP 4 | Slide the firewall (with power adapter bracket) into the rack tray and aach the rack tray brackets to the rack tray using one 4-40 x 1/4”...
  • Page 25 STEP 7 | With the help of another person, hold the assembled PA-220 firewall rack tray in place in the equipment rack and secure the rack tray brackets to the front rack posts using a #2 Phillips- PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.
  • Page 26 (#10-32 x 3/4” or #12-24 x 1/2”) and torque to 25 in-lbs. Use cage nuts to secure the screws if the rack has square holes. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 27: Install The Pa-220 Firewall Using The Pan-Pa-220-Rack-Single

    Install the PA-220 Firewall Install the PA-220 Firewall Using the PAN-PA-220-RACK-SINGLE STEP 1 | Align the back of the firewall with the two tabs located on the rack mount. STEP 2 | Use two #4-40 X 1/4” screws to aach the back of the firewall to the two tabs from Step 1.
  • Page 28 AC power supply cable to the power source yet. STEP 4 | (Oponal): Install a second power supply for redundancy. Repeat Step 3 using the opposite mount slot and the PWR 2 port. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 29 #12-24 X 1/2” screws. Torque the #10 screws at 25.0 in-lbs and the #12 screws at 32.0 in- lbs. STEP 6 | Plug the AC power supply cable(s) into a power source. PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 30 Install the PA-220 Firewall PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 31: Connect Power To A Pa-220 Firewall

    Connect Power to a PA-220 Firewall The PA-220 firewall is powered by an external power adapter that converts an AC power source to DC power. The firewall can operate with one power adapter or you can install a second power adapter for power redundancy.

  • Page 32: How To Connect Power To A Pa-220 Firewall

    Connect Power to a PA-220 Firewall How to Connect Power to a PA-220 Firewall The following procedure describes how to connect power to a PA-220 firewall. To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data ®...

  • Page 33: Service The Pa-220 Firewall Hardware

    Service the PA-220 Firewall Hardware The following topics describe how to interpret the PA-220 status LEDs and how to replace a PA-220 power adapter. The power adapter is the only serviceable component on the PA-220 firewall. > Interpret the LEDs on a PA-220 Firewall >...

  • Page 34: Interpret The Leds On A Pa-220 Firewall

    Service the PA-220 Firewall Hardware Interpret the LEDs on a PA-220 Firewall The following table describes how to interpret the status LEDs on the PA-220 firewall. Descripon Front Panel LEDs HA (High • Green—The firewall is the acve peer in an acve/passive Availability) configuraon.
  • Page 35 Service the PA-220 Firewall Hardware Descripon If you configure the link state to down on a port, the LEDs on some acve ports will not work. Similarly, if the passive link state is set to shutdown, the HA link LEDs on the passive device in the HA pair will not work.

  • Page 36: Replace A Power Adapter On A Pa-220 Firewall

    Replace a Power Adapter on a PA-220 Firewall The PA-220 firewall can operate on one power adapter or you can install a second power adapter for power redundancy. If two power adapters are installed and one fails, you can replace the failed power adapter without interrupon.

  • Page 37: Pa-220 Firewall SpecificaOns

    PA-220 Firewall Specificaons The following topics describe the PA-220 firewall hardware specificaons. For feature, capacity, and performance informaon, refer to the PA-220 firewall datasheet. > Physical Specificaons > Electrical Specificaons > Environmental Specificaons > Miscellaneous Specificaons...

  • Page 38: Physical SpecificaOns

    firewall. If the rubber feet are installed on the boom of the firewall, add .78” (2cm) to the height.Rack units and dimensions if the PA-220 firewall is installed in the PA-220 19” rack kit. • Rack units—1U •...

  • Page 39: Electrical SpecificaOns

    The following table describes PA-220 firewall electrical specificaons. Specificaon Value Power adapter The PA-220 firewall operates on DC power that is provided by the external power adapter (provided). The firewall can operate on one power adapter or you can install a second power adapter for power redundancy.

  • Page 40: Environmental SpecificaOns

    32°F to 104°F (0° to 40°C) Non-operang temperature -4°F to 158°F (-20° to 70°C) Humidity tolerance 5% to 90% non-condensing Airflow The PA-220 firewall uses passive cooling and does not contain fans. Maximum BTUs/hour 102 BTUs/hour Acousc noise Emits no sound.

  • Page 41: Miscellaneous SpecificaOns

    PA-220 Firewall Specificaons Miscellaneous Specificaons The following table describes PA-220 firewall miscellaneous specificaons. Specificaon Value Storage capacity One 32GB SSD for system files and log storage. Mean me between failures (MTBF) 29 years PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.
  • Page 42 PA-220 Firewall Specificaons PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 43: Pa-220 Firewall Compliance Statements Overview

    Our products meet standards for product safety and electromagnec compability when used for their intended purpose.To view compliance statements for the PA-220 firewall, see PA-220 Firewall Compliance Statements...

  • Page 44: Pa-220 Firewall Compliance Statements

    PA-220 Firewall Compliance Statements Overview PA-220 Firewall Compliance Statements The following lists the PA-220 firewall hardware compliance statements: • VCCI: This secon provides the compliance statement for the Voluntary Control Council for Interference by Informaon Technology Equipment (VCCI), which governs radio frequency emissions in Japan.The following informaon is in accordance to VCCI Class B requirements:...
  • Page 45 PA-220 Firewall Compliance Statements Overview determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: • Reorient or relocate the receiving antenna. • Increase the separaon between the equipment and receiver.
  • Page 46 PA-220 Firewall Compliance Statements Overview PA-220 Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

Table of Contents