PaloAlto Networks PA-3400 Series Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. PA-3400 Series
  6. Hardware reference manual

PaloAlto Networks PA-3400 Series Hardware Reference Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

PA-3400 Series Next-Gen Firewall
Hardware Reference
docs.paloaltonetworks.com

Advertisement

Table of Contents
loading

Related Manuals for PaloAlto Networks PA-3400 Series

Summary of Contents for PaloAlto Networks PA-3400 Series

  • Page 1 PA-3400 Series Next-Gen Firewall Hardware Reference docs.paloaltonetworks.com...
  • Page 2 Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks menoned herein may be trademarks of their respecve companies. Last Revised March 24, 2022 PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 3: Table Of Contents

    PA-3400 Series Firewall Overview..............13 PA-3400 Series Front Panel....................14 PA-3400 Series Back Panel....................20 Install the PA-3400 Series Firewall in an Equipment Rack....21 Install the PA-3400 Series Firewall Using the Four-Post Rack Kit.........22 Connect Power to a PA-3400 Series Firewall...........27 Set Up a Connecon to the Firewall..................28...
  • Page 4 Table of Contents PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next- ® generaon firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Upgrade/Downgrade Consideraons for Firewalls and Appliances >...

  • Page 6: Upgrade/Downgrade ConsideraOns For Firewalls And Appliances

    If the value the downgrade. If the is less than 20, then value is less than 20, contact support for then contact support for assistance. assistance. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 7: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 8: Third-Party Component Support

    Before You Begin Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 9: Product Safety Warnings

    • I/O ports are intended for intra-building connecons only and not intended for OSP (Outside Plant) connecons or any network connecons subject to external voltage surge events. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...
  • Page 10 Toutefois, vous devez le faire dans les 45 secondes et vous ne pouvez remplacer qu’un roir à la fois, sinon le circuit de protecon thermique arrêtera le pare-feu. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...
  • Page 11 (de service) qu'à l'aide d'un oul spécial, cadenas ou clé, ou autre disposif de sécurité, et qui est contrôlée par l'autorité responsable du site. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...
  • Page 12 • A suitably-rated DC mains disconnect device must be provided as part of the building installaon. French Translaon: Un interrupteur d'isolement suffisant doit être fourni pendant l'installaon du bâment. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 13: Pa-3400 Series Firewall Overview

    First Supported Soware Release: PAN-OS 10.2 ® The following topics describe the hardware features of PA-3400 Series firewalls. To view or compare performance and capacity informaon, refer to the Product Selecon tool. >...

  • Page 14: Pa-3400 Series Front Panel

    HSCI port One SFP+ (10Gbps) port (supports both SFP and SFP+ transceivers or cables). Use this port to connect two PA-3400 Series firewalls in a high availability (HA) configuraon as follows: • In an acve/passive configuraon, this port is for HA2 (data link).
  • Page 15 firewalls in the HA configuraon (without a switch or router between them). When directly connecng the HSCI ports between two PA-3400 Series firewalls that are physically located near each other, Palo Alto Networks recommends that you use a passive SFP+ cable.
  • Page 16 System Drive Cover Secures the device SSD. The following image shows the front panel of the PA-3430 and PA-3440 firewalls and the table describes each front panel component. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...
  • Page 17 HSCI port One SFP+ (10Gbps) port (supports only an SFP+ transceiver or passive SFP+ cable). Use this port to connect two PA-3400 Series firewalls in a high availability (HA) configuraon as follows: • In an acve/passive configuraon, this port is for HA2 (data link).
  • Page 18 firewalls in the HA configuraon (without a switch or router between them). When directly connecng the HSCI ports between two PA-3400 Series firewalls that are physically located near each other, Palo Alto Networks recommends that you use a passive SFP+ cable.
  • Page 19 LED status indicators Nine LEDs that indicate the status of the firewall hardware components (see Interpret the PA-3400 Series Status LEDs). System Drive Cover Secures the device SSD. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 20: Pa-3400 Series Back Panel

    PA-3400 Series Firewall Overview PA-3400 Series Back Panel The following image shows the back panel of the PA-3400 Series firewall and the table describes each back-panel component. The PA-3410, PA-3420, PA-3430, and PA-3440 back-panel components are idencal. Item Component Descripon Fan assemblies Provides venlaon and cooling for the firewall.

  • Page 21: Install The Pa-3400 Series Firewall In An Equipment Rack

    Install the PA-3400 Series Firewall in an Equipment Rack The PA-3400 Series next-generaon firewall ships with rack-mount brackets for installaon in a four-post 19” equipment rack. > Install the PA-3400 Series Firewall Using the Four-Post Rack Kit...

  • Page 22: Install The Pa-3400 Series Firewall Using The Four-Post Rack Kit

    Install the PA-3400 Series Firewall in an Equipment Rack Install the PA-3400 Series Firewall Using the Four-Post Rack Kit The following procedure describes how to install the PA-3400 Series firewall in a 19” four-post equipment rack using the four-post rack kit (PAN-PA-1RU-RACK4). STEP 1 | Aach one rack-mount bracket to each side of the firewall in the front-mount posion using...
  • Page 23 Install the PA-3400 Series Firewall in an Equipment Rack STEP 2 | Aach one rack-mount rail to each side of the firewall using two #6-32 x 5/16” screws for each rail and torque to 9 in-lbs. STEP 3 | With help from another person, hold the firewall in the rack and secure the front rack-mount brackets to the front rack-posts using two screws for each bracket.
  • Page 24 Install the PA-3400 Series Firewall in an Equipment Rack screws (#10-32 x 3/4” or #12-24 x 1/2”) for your rack and torque to 25 in-lbs. Use cage nuts to secure the screws if the rack has square holes. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc.
  • Page 25 Install the PA-3400 Series Firewall in an Equipment Rack STEP 4 | Slide one back rack-mount bracket into each of the two previously installed side rack-mount rails and secure the brackets to the back rack-posts using the appropriate screws for your rack (#10-32 x 3/4”...
  • Page 26 Install the PA-3400 Series Firewall in an Equipment Rack PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 27: Connect Power To A Pa-3400 Series Firewall

    Connect Power to a PA-3400 Series Firewall PA-3400 Series firewalls have two AC power supplies (the second power supply is for redundancy). Before you connect power, read the PA-3400 Series Electrical Specificaons. Learn how to Set Up a Connecon to the Firewall based on your desired boot mode prior to powering on the firewall for the first me.

  • Page 28: Set Up A ConnecOn To The Firewall

    To learn more about ZTP, see Overview. You can also bring the PA-3400 Series firewall online in standard mode. See the instrucons below to learn how to boot in ZTP or standard mode. If you have already booted up the firewall and selected the wrong mode, you must perform a factory reset or private-data-reset before connuing.
  • Page 29 Connect Power to a PA-3400 Series Firewall STEP 4 | Power on the firewall. See Connect Power to a PA-3400 Series Firewall to learn how to connect power to the firewall. • (Standard mode) Using your terminal emulator, watch for the following CLI prompt as the firewall boots:...

  • Page 30: Connect Power To A Pa-3400 Series Firewall

    Connect Power to a PA-3400 Series Firewall Connect Power to a PA-3400 Series Firewall The following procedure describes how to connect AC power to a PA-3400 Series firewall with AC power supplies. Learn how to Set Up a Connecon to the Firewall based on your desired boot mode prior to powering on the firewall for the first me.
  • Page 31 Connect Power to a PA-3400 Series Firewall STEP 4 | Secure the power cords to the power supplies using the provided cord retainer. Before powering on the firewall, ensure that you have connected your Ethernet cables in accordance to the mode you wish to boot the firewall in (standard mode or Zero Touch Provisioning mode) as specified in...
  • Page 32 Connect Power to a PA-3400 Series Firewall PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 33: Service The Pa-3400 Series Firewall

    Service the PA-3400 Series Firewall The following topics describe how to interpret the PA-3400 Series firewall status LEDs and how to replace the serviceable components. > Interpret the PA-3400 Series Status LEDs > Replace a PA-3400 Series Power Supply >...

  • Page 34: Interpret The Pa-3400 Series Status Leds

    Service the PA-3400 Series Firewall Interpret the PA-3400 Series Status LEDs The following table describes how to interpret the status LEDs on a PA-3400 Series firewall. Descripon Front Panel LEDs Service • Off—The firewall is operang normally. • Blue—The firewall is instructed by the CLI or Web Interface to enable this LED.
  • Page 35 • Blinking Green—The firewall is processing network acvity. SFP, SFP+, SFP28, QSFP+ These ports have one LED each. The color of the LED will differ and QSFP28 LEDs based on the port speed. 1G—Yellow PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...
  • Page 36 • Blinking yellow—Power supply warning detected. • Solid yellow—Power supply fault detected. • Green—All fans are operang normally. Fan tray LED • Red—A fan has failed. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 37: Replace A Pa-3400 Series Power Supply

    Service the PA-3400 Series Firewall Replace a PA-3400 Series Power Supply PA-3400 Series firewalls have two AC power supplies (the second power supply is for redundancy). If one power supply fails, you can replace it without service interrupon as described in the following procedure.
  • Page 38 Once the power supply powers on, the input and output LEDs on the power supply turn green. Similarly, the PWR LED and the power supply LED (PWR 1 or PWR 2) on the front of the firewall turn green. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 39: Replace A Pa-3400 Series Drive

    Service the PA-3400 Series Firewall Replace a PA-3400 Series Drive The PA-3400 Series firewalls use a single solid-state drive (SSD) to store the PAN-OS system files, system logs, and network traffic logs. If this drive fails, you must replace it to restore funconality to the firewall.
  • Page 40 For informaon on how to upgrade or downgrade PAN-OS, see the New Features Guide for the PAN-OS version that your firewall is running. The New Features Guides are located on the Technical Documentaon portal. PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 41: Pa-3400 Series Firewall SpecificaOns

    PA-3400 Series Firewall Specificaons The following topics describe the PA-3400 Series firewall hardware specificaons. For feature, capacity, and performance informaon, refer to the PA-3400 Series datasheet. > PA-3400 Series Physical Specificaons > PA-3400 Series Electrical Specificaons > PA-3400 Series Environmental Specificaons >...

  • Page 42: Pa-3400 Series Physical SpecificaOns

    PA-3400 Series Firewall Specificaons PA-3400 Series Physical Specificaons The following table describes PA-3400 Series firewall physical specificaons. Specificaon Value Rack units—1RU Rack units and dimensions Dimensions—1.7” H x 14.23” D x 17.12” W (4.32 cm H x 36.14 cm D x 43.49 cm W)

  • Page 43: Pa-3400 Series Electrical SpecificaOns

    PA-3400 Series Firewall Specificaons PA-3400 Series Electrical Specificaons The following table describes PA-3400 Series firewall electrical specificaons. The electrical specificaons are the same for all models in the series. Specificaon Value Power Supplies Two 450W AC power supplies; the second power supply is for redundancy.

  • Page 44: Pa-3400 Series Environmental SpecificaOns

    PA-3400 Series Firewall Specificaons PA-3400 Series Environmental Specificaons The following table describes PA-3400 Series firewall environmental specificaons. Specificaon Value Operang temperature range 32ºF to 104ºF (0ºC to 40ºC) Non-operang temperature -4ºF to 158ºF (-20ºC to 70ºC) Operang and non-operang relave Humidity tolerance (non-condensing) humidity—10% to 90%...

  • Page 45: Pa-3400 Series Miscellaneous SpecificaOns

    PA-3400 Series Firewall Specificaons PA-3400 Series Miscellaneous Specificaons The following table describes PA-3400 Series firewall miscellaneous specificaons. Specificaon Value Storage capacity One 480GB SSD for system files and log storage. Mean me between failures (MTBF) 14 years PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc.
  • Page 46 PA-3400 Series Firewall Specificaons PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

  • Page 47: Pa-3400 Series Firewall Hardware Compliance Statements

    Our products meet standards for product safety and electromagnec compability when used for their intended purpose. To view compliance statements for the PA-3400 Series firewalls, see PA-3400 Series Firewall Compliance...

  • Page 48: Pa-3400 Series Firewall Compliance Statements

    PA-3400 Series Firewall Hardware Compliance Statements PA-3400 Series Firewall Compliance Statements The following are the PA-3400 Series firewall hardware compliance statements: • BSMI EMC Statement—User warning: This is a Class A product. When used in a residenal environment it may cause radio interference. In this case, the user will be required to take adequate measures.
  • Page 49 PA-3400 Series Firewall Hardware Compliance Statements • VCCI—This secon provides the compliance statement for the Voluntary Control Council for Interference by Informaon Technology Equipment (VCCI), which governs radio frequency emissions in Japan. The following informaon is in accordance to VCCI Class A requirements: Translaon: This is a Class A product.
  • Page 50 PA-3400 Series Firewall Hardware Compliance Statements PA-3400 Series Next-Gen Firewall Hardware Reference 2022 Palo Alto Networks, Inc. ©...

This manual is also suitable for:

Pa-7000 seriesPa-3200Pa-5200Pa-5400Pa-7050Pa-7080 ... Show all

Table of Contents