PaloAlto Networks PA-3200 Series Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. PA-3200 Series
  6. Hardware reference manual

PaloAlto Networks PA-3200 Series Hardware Reference Manual

Next-gen firewall
Hide thumbs Also See for PA-3200 Series:
Table of Contents

Advertisement

Quick Links

PA-3200 Series Next-Gen Firewall
Hardware Reference
docs.paloaltonetworks.com

Advertisement

Table of Contents
loading

Related Manuals for PaloAlto Networks PA-3200 Series

Summary of Contents for PaloAlto Networks PA-3200 Series

  • Page 1 PA-3200 Series Next-Gen Firewall Hardware Reference docs.paloaltonetworks.com...
  • Page 2 Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks menoned herein may be trademarks of their respecve companies. Last Revised September 18, 2020 PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 3: Table Of Contents

    PA-3200 Series Firewall Overview..............13 PA-3200 Series Front Panel....................14 PA-3200 Series Back Panel....................17 Install the PA-3200 Series Firewall in an Equipment Rack....19 Install the PA-3200 Series Firewall Using the Rack-Mount Brackets......20 Install the PA-3200 Series Firewall Using the Four-Post Rack Kit.........22 Connect Power to a PA-3200 Series Firewall...........25...
  • Page 4 Table of Contents PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next- ® generaon firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Upgrade/Downgrade Consideraons for Firewalls and Appliances >...

  • Page 6: Upgrade/Downgrade ConsideraOns For Firewalls And Appliances

    If the value the downgrade. If the is less than 20, then value is less than 20, contact support for then contact support for assistance. assistance. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 7: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 8: Third-Party Component Support

    Before You Begin Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 9: Product Safety Warnings

    • I/O ports are intended for intra-building connecons only and not intended for OSP (Outside Plant) connecons or any network connecons subject to external voltage surge events. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 10 Toutefois, vous devez le faire dans les 45 secondes et vous ne pouvez remplacer qu’un roir à la fois, sinon le circuit de protecon thermique arrêtera le pare-feu. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 11 (de service) qu'à l'aide d'un oul spécial, cadenas ou clé, ou autre disposif de sécurité, et qui est contrôlée par l'autorité responsable du site. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 12 • A suitably-rated DC mains disconnect device must be provided as part of the building installaon. French Translaon: Un interrupteur d'isolement suffisant doit être fourni pendant l'installaon du bâment. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 13: Pa-3200 Series Firewall Overview

    First Supported Soware Release: PAN-OS ® The following topics describe the hardware features of PA-3200 Series firewalls. To view or compare performance and capacity informaon, refer to the Product Selecon tool.

  • Page 14: Pa-3200 Series Front Panel

    PA-3200 Series Firewall Overview PA-3200 Series Front Panel The following image shows the front panel of the PA-3200 Series firewall and the table describes each front panel component. The only differences between the PA-3220, PA-3250, and PA-3260 (shown) front panels are the model name and the Ethernet ports, as described in the table.
  • Page 15 firewalls in the HA configuraon (without a switch or router between them). When directly connecng the HSCI ports between two PA-3200 Series firewalls that are physically located near each other, Palo Alto Networks recommends that you use a passive SFP+ cable.
  • Page 16 Mac or Linux computer. LED status indicators Eight LEDs that indicate the status of the firewall hardware components (see Interpret the PA-3200 Series Status LEDs). PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 17: Pa-3200 Series Back Panel

    PA-3200 Series Firewall Overview PA-3200 Series Back Panel The following image shows the back panel of the PA-3200 Series firewall and the table describes each back-panel component. The PA-3220, PA-3250, and PA-3260 back-panel components are idencal. Item Component Descripon System drive One 240GB solid-state drive (SSD) used to store the PAN-OS system files, system logs, and network...
  • Page 18 PA-3200 Series Firewall Overview PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 19: Install The Pa-3200 Series Firewall In An Equipment Rack

    Install the PA-3200 Series Firewall in an Equipment Rack The PA-3200 Series next-generaon firewall ships with two rack-mount brackets for installaon in a two-post or four-post 19” equipment rack. If you install the firewall in a four-post rack, you can purchase and install the oponal four-post rack kit to secure the firewall to the back rack posts for addional support.

  • Page 20: Install The Pa-3200 Series Firewall Using The Rack-Mount Brackets

    Install the PA-3200 Series Firewall Using the Rack- Mount Brackets The following procedure describes how to install the PA-3200 Series firewall in a two-post or four-post equipment rack using the front rack-mount brackets that ship with the firewall. If you install the firewall in a four-post equipment rack and you want to aach the firewall to both front...
  • Page 21 Install the PA-3200 Series Firewall in an Equipment Rack (#10-32 x 3/4” or #12-24 x 1/2”) for your rack and torque each screw to 25 in-lbs. Use cage nuts (not provided) to secure the screws if the rack has square holes.

  • Page 22: Install The Pa-3200 Series Firewall Using The Four-Post Rack Kit

    Install the PA-3200 Series Firewall Using the Four-Post Rack Kit The following procedure describes how to install the PA-3200 Series firewall in a 19” four-post equipment rack using the oponal four-post rack kit (PAN-PA-2RU-RACK4). This kit is designed to provide addional support for the back of the firewall.
  • Page 23 Install the PA-3200 Series Firewall in an Equipment Rack #12-24 x 1/2”) for your rack and torque each screw to 25 in-lbs. Use cage nuts (not provided) to secure the screws if the rack has square holes. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.
  • Page 24 Install the PA-3200 Series Firewall in an Equipment Rack STEP 4 | Slide one four-post back rack-mount rail into each of the two previously installed side rack- mount rails, and secure the back rails to the back rack-posts using two screws for each bracket (#10-32 x 3/4”...

  • Page 25: Connect Power To A Pa-3200 Series Firewall

    Connect Power to a PA-3200 Series Firewall PA-3200 Series firewalls have either two AC or two DC power supplies (the second power supply is for redundancy). Before you connect power, read the PA-3200 Series Electrical Specificaons. > Connect AC Power to a PA-3200 Series Firewall >...

  • Page 26: Connect Ac Power To A Pa-3200 Series Firewall

    Connect Power to a PA-3200 Series Firewall Connect AC Power to a PA-3200 Series Firewall The following procedure describes how to connect AC power to a PA-3200 Series firewall with AC power supplies. The power configuraon (AC or DC) can be changed in the field. However, you cannot install both an AC and DC power supply in the same firewall.
  • Page 27 Connect Power to a PA-3200 Series Firewall STEP 4 | Secure the power cords to the power supplies using the Velcro straps. STEP 5 | Connect the other end of the power cords to an AC power source. Aer the first power...

  • Page 28: Connect Dc Power To A Pa-3200 Series Firewall

    Connect Power to a PA-3200 Series Firewall Connect DC Power to a PA-3200 Series Firewall The following procedure describes how to connect DC power to a PA-3200 Series firewall with DC power supplies. The power configuraon (AC or DC) can be changed in the field. However, you cannot install both an AC and DC power supply in the same firewall.
  • Page 29 Connect Power to a PA-3200 Series Firewall the negave terminal. Repeat this step for the second DC power supply using separate posive and negave cables. 4. Replace the plasc covers over each DC power input. 5. Connect the two posive and two negave DC power cables to your power sources and ensure that you observe the correct polarity (posive to posive and negave to...
  • Page 30 Connect Power to a PA-3200 Series Firewall PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 31: Service The Pa-3200 Series Firewall

    Service the PA-3200 Series Firewall The following topics describe how to interpret the PA-3200 Series firewall status LEDs and how to replace the serviceable components. > Interpret the PA-3200 Series Status LEDs > Replace a PA-3200 Series Fan Tray >...

  • Page 32: Interpret The Pa-3200 Series Status Leds

    Service the PA-3200 Series Firewall Interpret the PA-3200 Series Status LEDs The following table describes how to interpret the status LEDs on a PA-3200 Series firewall. Descripon Front Panel LEDs • Green—The firewall is powered on. PWR (Power) • Off—The firewall is not powered on or an error occurred with the internal power system (for example, power is not within tolerance levels).
  • Page 33 • Blinking green indicates network acvity. Back Panel LEDs Power supply LEDs The top LED provides status of the power input and the boom LED provides status of the power supply output. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 34 • Green—The fan trays and all fans are operang normally. Fan tray LED • Red—A fan in the fan tray failed (see Replace a PA-3200 Series Fan Tray). PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 35: Replace A Pa-3200 Series Fan Tray

    Replace a PA-3200 Series Fan Tray The PA-3200 Series firewalls have one fan tray with three fans. If one fan fails, the LED on the fan tray turns red and the firewall generates a system log. When this occurs, immediately replace the fan tray to avoid service interrupon.
  • Page 36 five seconds, and then reconnect the cords. On a DC model, shut down the DC circuit that is providing power to the firewall, wait at least five seconds, and then restore the power. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 37: Replace A Pa-3200 Series Power Supply

    Service the PA-3200 Series Firewall Replace a PA-3200 Series Power Supply PA-3200 Series firewalls have either two AC or two DC power supplies (the second power supply is for redundancy). If one power supply fails, you can replace it without service interrupon as described in the following procedures.

  • Page 38: Replace A Pa-3200 Series Dc Power Supply

    PWR LED and the power supply LED (PWR 1 or PWR 2) on the front of the firewall turns green. Replace a PA-3200 Series DC Power Supply The following procedure describes how to replace a DC power supply.
  • Page 39 Remove the plasc cover that protects the DC input terminals and then use a Phillips-head screwdriver to remove the screws holding the posive and negave DC cables to the DC input terminals. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 40 Remove the replacement power supply from the packaging and slide it into the empty power supply slot. Push the power supply all the way in unl the release lever clicks and secures the power supply. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 41 LEDs on the power supplies turn green, and the PWR LED and the power supply LEDs (PWR 1 and PWR 2) on the front of the firewall turns green. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 42: Replace A Pa-3200 Series Drive

    Service the PA-3200 Series Firewall Replace a PA-3200 Series Drive The PA-3200 Series firewalls use a single solid-state drive (SSD) to store the PAN-OS system files, system logs, and network traffic logs. If this drive fails, you must replace it to restore funconality to the firewall.
  • Page 43 192.168.1.2. STEP 8 | From a web browser, go to hps:/ /192.168.1.1 and, when prompted, log in to the web interface using the default username and password (admin/admin). PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 44 For informaon on how to upgrade or downgrade PAN-OS, see the New Features Guide for the PAN-OS version that your firewall is running. The New Features Guides are located on the Technical Documentaon portal. PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 45: Pa-3200 Series Firewall SpecificaOns

    PA-3200 Series Firewall Specificaons The following topics describe the PA-3200 Series firewall hardware specificaons. For feature, capacity, and performance informaon, refer to the PA-3200 Series firewall datasheet. > PA-3200 Series Physical Specificaons > PA-3200 Series Electrical Specificaons > PA-3200 Series Environmental Specificaons >...

  • Page 46: Pa-3200 Series Physical SpecificaOns

    PA-3200 Series Firewall Specificaons PA-3200 Series Physical Specificaons The following table describes PA-3200 Series firewall physical specificaons. Specificaon Value Rack units—2U Rack units and dimensions Dimensions—3.5” H x 20.53” D x 17.34” W (8.89cm H x 52.15cm D x 44.04cm W)

  • Page 47: Pa-3200 Series Electrical SpecificaOns

    PA-3200 Series Firewall Specificaons PA-3200 Series Electrical Specificaons The following table describes PA-3200 Series firewall electrical specificaons. The electrical specificaons are the same for all models in the series (PA-3220, PA-3250, and PA-3260 firewalls). Specificaon Value Power Supplies Two 650W AC or DC power supplies; the second power supply is for redundancy.

  • Page 48: Pa-3200 Series Environmental SpecificaOns

    PA-3200 Series Firewall Specificaons PA-3200 Series Environmental Specificaons The following table describes PA-3200 Series firewall environmental specificaons. Specificaon Value All PA-3200 Series firewalls—32ºF to 122ºF Operang temperature range (0ºC to 50ºC) Non-operang temperature All PA-3200 Series firewalls— -4ºF to 158ºF (-20ºC to 70ºC)

  • Page 49: Pa-3200 Series Miscellaneous SpecificaOns

    PA-3200 Series Firewall Specificaons PA-3200 Series Miscellaneous Specificaons The following table describes PA-3200 Series firewall miscellaneous specificaons. Specificaon Value Storage capacity One 240GB SSD for system files and log storage. Mean me between failures (MTBF) 14 years PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc.
  • Page 50 PA-3200 Series Firewall Specificaons PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 51: Pa-3200 Series Firewall Hardware Compliance Statements

    Our products meet standards for product safety and electromagnec compability when used for their intended purpose. To view compliance statements for the PA-3200 Series firewalls, see PA-3200 Series Firewall Compliance...

  • Page 52: Pa-3200 Series Firewall Compliance Statements

    PA-3200 Series Firewall Hardware Compliance Statements PA-3200 Series Firewall Compliance Statements The following are the PA-3200 Series firewall hardware compliance statements: • BSMI EMC Statement—User warning: This is a Class A product. When used in a residenal environment it may cause radio interference. In this case, the user will be required to take adequate measures.
  • Page 53 PA-3200 Series Firewall Hardware Compliance Statements • VCCI—This secon provides the compliance statement for the Voluntary Control Council for Interference by Informaon Technology Equipment (VCCI), which governs radio frequency emissions in Japan. The following informaon is in accordance to VCCI Class A requirements: Translaon: This is a Class A product.
  • Page 54 PA-3200 Series Firewall Hardware Compliance Statements PA-3200 Series Next-Gen Firewall Hardware Reference 2021 Palo Alto Networks, Inc. ©...

This manual is also suitable for:

Pa-3220Pa-3250Pa-3260

Table of Contents