PaloAlto Networks PA-400 Series Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Network Hardware
  5. PA-400 Series
  6. Hardware reference manual

PaloAlto Networks PA-400 Series Hardware Reference Manual

Next-gen firewall
Hide thumbs Also See for PA-400 Series:
Table of Contents

Advertisement

Quick Links

PA-400 Series Next-Gen Firewall
Hardware Reference
docs.paloaltonetworks.com

Advertisement

Table of Contents
loading

Related Manuals for PaloAlto Networks PA-400 Series

Summary of Contents for PaloAlto Networks PA-400 Series

  • Page 1 PA-400 Series Next-Gen Firewall Hardware Reference docs.paloaltonetworks.com...
  • Page 2 Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised January 24, 2023 PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 3: Table Of Contents

    PA-400 Series Front Panel..................... 14 PA-400 Series Back Panel.......................21 Install the PA-400 Series Firewall............... 25 Install the PA-400 Series Firewall on a Flat Surface............26 Install the PA-400 Series Firewall on a Wall..............28 Install the PA-400 Series Firewall in a 19-inch Equipment Rack........36 Install the PA-400 Series Firewall Using the PAN-PA-400-RACKTRAY...36...
  • Page 4 Table of Contents PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next- ® generation firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Upgrade/Downgrade Considerations for Firewalls and Appliances >...

  • Page 6: Upgrade/Downgrade Considerations For Firewalls And Appliances

    If the value the downgrade. If the is less than 20, then value is less than 20, contact support for then contact support for assistance. assistance. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 7: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 8: Third-Party Component Support

    Before You Begin Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 9: Product Safety Warnings

    • I/O ports are intended for intra-building connections only and not intended for OSP (Outside Plant) connections or any network connections subject to external voltage surge events. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 10 Toutefois, vous devez le faire dans les 45 secondes et vous ne pouvez remplacer qu’un tiroir à la fois, sinon le circuit de protection thermique arrêtera le pare-feu. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 11 à accès limité uniquement. Une zone à accès limité correspond à une zone dans laquelle l’accès n’est autorisé au personnel (de service) qu'à l'aide d'un outil spécial, PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 12 • A suitably-rated DC mains disconnect device must be provided as part of the building installation. French Translation: Un interrupteur d'isolement suffisant doit être fourni pendant l'installation du bâtiment. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 13: Pa-400 Series Firewall Overview

    TPM module for PAN-OS key storage and security, ZTP functionality, active/passive and active/active high availability (HA), and Power Over Ethernet (PoE) capability in the PA-415 and PA-445. All PA-400 Series firewalls except for the PA-410 can make use of dual power adapters for power redundancy (second power adapter sold separately).

  • Page 14: Pa-400 Series Front Panel

    (Micro USB) firewall using a standard Type- A USB-to-micro USB cable. The console connection provides access to firewall boot messages, the Maintenance Recovery Tool PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 15 • Stop bits: 1 • Flow control: None USB port Use this port to bootstrap the firewall. Bootstrapping enables you to provision the firewall with a specific PAN-OS configuration PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 16 (see Interpret the LEDs on a PA-400 Series Firewall). The front panels of the PA-415 and PA-445 firewalls are visually different but feature the same components. The following image shows the front panel of the PA-415 and the table describes each front panel component.
  • Page 17 10/100/1000Mbps speeds. MGT port Use this Ethernet 1Gbps port to access the management web interface and perform administrative tasks. The firewall also uses this port for management services, PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 18 Three LEDs that indicate the status of the firewall hardware components (see Interpret the LEDs on a PA-400 Series Firewall). The following image shows the front panel of the PA-410 and the table describes each front panel component. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 19 LED status indicators Three LEDs that indicate the status of the firewall hardware components (see Interpret the LEDs on a PA-400 Series Firewall). CONSOLE port Use this port to connect a management computer to the firewall using a 9-pin serial to RJ-45 cable and terminal emulation software.
  • Page 20 To view system firmware versions for any of the PA-400 Series firewalls, use the following CLI command: admin@PA-400> show system firmware PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.

  • Page 21: Pa-400 Series Back Panel

    The back panels of the PA-415 and PA-445 firewalls are visually different but feature the same components. The following image shows the back panel of the PA-415 and the table describes each front panel component. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 22 Use only the PA-400 Series external power adapters provided by Palo Alto Networks. Ground stud Use the single post ground stud to connect the firewall to earth ground (ground cable not included). PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 23 Power Cord Retainer Use the power cord retainer to secure the power cord. To view system firmware versions for any of the PA-400 Series firewalls, use the following CLI command: admin@PA-400> show system firmware PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 24 PA-400 Series Firewall Overview PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 25: Install The Pa-400 Series Firewall

    Install the PA-400 Series Firewall The PA-400 Series next-generation firewall ships with the hardware required to install the firewall on a flat surface or on a wall. You can also order a rack mount kit to > Install the PA-400 Series Firewall on a Flat Surface >...

  • Page 26: Install The Pa-400 Series Firewall On A Flat Surface

    Install the PA-400 Series Firewall Install the PA-400 Series Firewall on a Flat Surface The PA-440, PA-450, and PA-460 firewalls ship with rubber “feet” attached to each corner of the device. As pictured below, the PA-440, PA-450, and PA-460 can be situated on a flat surface both horizontally and vertically.
  • Page 27 Install the PA-400 Series Firewall The PA-410, PA-415, and PA-445 have rubber feet installed on their bottom side so they can only be installed in a horizontal position. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 28: Install The Pa-400 Series Firewall On A Wall

    Install the PA-400 Series Firewall Install the PA-400 Series Firewall on a Wall Install a PA-400 Series firewall on a drywall or plywood wall using the wall-mount kit as described in the following procedure. STEP 1 | Mark the locations on the wall that line up with the wall mount holes on the bottom of the firewall.
  • Page 29 Make sure the firewall is securely connected to each of the screws before you let go. (PA-440, PA-450, and PA-460) (PA-410, PA-415, and PA-445) PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 30 Velcro straps and cable tie. Make sure to align the cable tie with the notches in the bracket to prevent the power cord from falling out. Next, loop the two Velcro straps PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 31 Velcro straps and cable tie. Make sure to align the cable tie with the notches in the bracket to prevent the power cord from falling out. Next, loop the two Velcro straps through the side PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 32 Make sure to align the cable tie with the notches in the bracket to prevent the power cord from falling out. Next, loop the two Velcro straps through the side openings on PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 33 Install the PA-400 Series Firewall the wall mount and over the power adapter. Lastly, loop the Velcro straps back over the top of the power adapter to secure it into place. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 34 After you secure the power adapter to the bracket, mount the bracket next to the firewall using wood or drywall screws as appropriate. (PA-440, PA-450, and PA-460) (PA-415 and PA-445) (PA-410) PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 35 Install the PA-400 Series Firewall STEP 6 | (PA-415, PA-440, PA-445, PA-450, and PA-460) You can install an optional second power adapter next to the first power adapter. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 36: Install The Pa-400 Series Firewall In A 19-Inch Equipment Rack

    Install the PA-400 Series Firewall Install the PA-400 Series Firewall in a 19-inch Equipment Rack The PAN-PA-400-RACKTRAY enables you to install one or two PA-440, PA-450, or PA-460 firewalls in a four-post 19" rack. The installation hardware consists of a metal base and two rails that can be expanded to include up to two firewalls and two PSUs.
  • Page 37 Align the slotted holes in the adjustable mounting bracket to the holes on the rear of the equipment frame. The mounting rails are designed for equipment frames that are 26” to 32” deep. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 38 STEP 3 | Secure the rails to the equipment frame with mounting screws (not provided) compatible with your equipment frame. Tighten the screws to their recommended torque value. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 39 (PA-440, PA-450, and PA-460 firewalls) (PA-415 and PA-445 firewalls) STEP 5 | While holding the firewall, carefully flip the mounting tray over to reveal its underside. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 40 STEP 6 | Secure the firewall in place using three of the provided #6-32 x 3/16” Long Flathead screws. (PA-440, PA-450, and PA-460 firewalls) (PA-415 and PA-445 firewalls) PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 41 Repeat Steps 4 through 6 for the second firewall. Place the second firewall adjacent to the first firewall in the mounting tray. STEP 8 | Flip the mounting tray back into an upright position. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 42 Slide the mounting tray into the rails previously fixed to the equipment rack. Stop when the front flange on the mounting tray is flush with the front of the rail. PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 43 3 screws each (not provided). The screws must be compatible with your equipment frame. (PA-440, PA-450, and PA-460 firewalls) (PA-415 and PA-445 firewalls) PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 44 Install the PA-400 Series Firewall STEP 14 | Proceed to Connect Power to a PA-400 Series Firewall PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 45: Set Up A Connection To The Firewall

    Overview. You can also ™ bring the PA-400 Series firewall online in standard mode. See the instructions below to learn how to boot in ZTP or standard mode. If you have already booted up the firewall and selected the wrong mode, you must perform a factory reset or private-data-reset before continuing.
  • Page 46 Install the PA-400 Series Firewall STEP 4 | Power on the firewall. See Connect Power to a PA-400 Series Firewall to learn how to connect power to the firewall. • (Standard mode) Using your terminal emulator, watch for the following CLI prompt as the...

  • Page 47: Connect Power To A Pa-400 Series Firewall

    Connect Power to a PA-400 Series Firewall The PA-400 Series firewalls are powered by an external power adapter that converts an AC power source to DC power. The PA-415, PA-440, PA-445, PA-450, and PA-460 firewalls can operate with one power adapter and you can install a second power adapter for power redundancy.

  • Page 48: Connect Power To A Pa-400 Series Firewall

    Connect Power to a PA-400 Series Firewall Connect Power to a PA-400 Series Firewall The following procedure describes how to connect power to a PA-415, PA-440, PA-445, PA-450, and PA-460 firewall. To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data ®...
  • Page 49 Connect Power to a PA-400 Series Firewall STEP 3 | Connect the DC connector from the power adapter into the PWR 1 port on the firewall and tighten the connector nut to secure the cable to the firewall. The power adapter inputs for the PA-440, PA-450, and PA-460 are on the back panel of the device.
  • Page 50 Connect Power to a PA-400 Series Firewall STEP 5 | (Optional for PA-415, PA-440, PA-445, PA-450, and PA-460) Connect the DC connector from a second power adapter (purchased separately) into the PWR 2 port and plug the AC connector into an AC power source.

  • Page 51: Connect Power To A Pa-410 Firewall

    Connect Power to a PA-400 Series Firewall Connect Power to a PA-410 Firewall The following procedure describes how to connect power to a PA-410 firewall. To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data ®...
  • Page 52 Connect Power to a PA-400 Series Firewall PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 53: Service The Pa-400 Series Firewall Hardware

    Service the PA-400 Series Firewall Hardware The following topics describe how to interpret the PA-400 Series status LEDs and how to replace a PA-400 Series power adapter. The power adapter is the only serviceable component on the PA-400 Series firewall. >...

  • Page 54: Interpret The Leds On A Pa-400 Series Firewall

    Service the PA-400 Series Firewall Hardware Interpret the LEDs on a PA-400 Series Firewall The following table describes how to interpret the status LEDs on the PA-400 Series firewalls. The PA-410, PA-415, and PA-445 firewall only have PWR, STAT, and ALM front panel LEDs.
  • Page 55 Service the PA-400 Series Firewall Hardware Description • (PA-410, PA-440, • Green—The firewall is powered on. PA-450, and • Off—The firewall is not powered on or an error has occurred PA-460) with the internal power system (for example, power is not within tolerance levels).

  • Page 56: Replace A Power Adapter On A Pa-400 Series Firewall

    The PA-410 can only operate on one power adapter. The CLI cannot be used to determine the status of the PA-400 Series firewalls power adapter. To manually interpret the status of the power adapter, verify that your power cable connections are secure and that the LED on the power adapter is on.
  • Page 57 Service the PA-400 Series Firewall Hardware STEP 1 | Disconnect the failed power adapter. (PA-415, PA-440, PA-445, PA-450, and PA-460) Unplug the failed power adapter from the AC power source and then turn the power cable connector nut counterclockwise to release the cable.
  • Page 58 Service the PA-400 Series Firewall Hardware STEP 2 | Connect a new power adapter. (PA-415, PA-440, PA-445, PA-450, and PA-460) Connect the DC connector from the new power adapter to the power input (PWR 1 or PWR 2) port on the firewall and tighten the connector nut to secure the cable to the firewall.

  • Page 59: Pa-400 Series Firewall Specifications

    PA-400 Series Firewall Specifications The following topics describe the PA-400 Series firewall hardware specifications. For feature, capacity, and performance information, refer to the datasheet. > Physical Specifications > Electrical Specifications > Environmental Specifications > Miscellaneous Specifications...

  • Page 60: Physical Specifications

    PA-400 Series Firewall Specifications Physical Specifications The following table describes PA-400 Series firewall physical specifications. Specification Value Rack units and dimensions PA-410 • Height: 1.73”, Width: 9.53”, Depth: 6.60” (Height: 4.39 cm, Width: 24.21 cm, Depth: 16.76 cm) PA-415 • Height: 1.73”, Width: 13”, Depth: 9” (Height: 4.40 cm, Width: 33.02 cm, Depth: 22.86 cm)

  • Page 61: Electrical Specifications

    Specification Value Power adapter The PA-400 Series firewalls operate on DC power that is provided by the external power adapter (provided). The firewall can operate on one power adapter or you can install a second power adapter for power redundancy.
  • Page 62 • Firewall—2.5A@12VDC PA-445 • Firewall—11.3A@12VDC PA-450 and PA-460 • Firewall—3A@12VDC PA-410 Maximum inrush current • AC power adapter input—1A@240VAC PA-440, PA-450, and PA-460 • AC power adapter input—1.8A@240VAC PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

  • Page 63: Environmental Specifications

    PA-400 Series Firewall Specifications Environmental Specifications The following table describes PA-400 Series firewall environmental specifications. Specification Value Operating temperature range PA-410, PA-440, PA-450, PA-460 • 32°F to 104°F (0° to 40°C) PA-415 and PA-445 • 32°F to 113°F (0° to 45°C) Non-operating temperature -4°F to 158°F (-20°...

  • Page 64: Miscellaneous Specifications

    PA-400 Series Firewall Specifications Miscellaneous Specifications The following table describes PA-400 Series firewall miscellaneous specifications. Specification Value Storage capacity PA-415, PA-440, PA-445, PA-450, and PA-460 • One 128 GB eMMC PA-410 • One 64 GB eMMC Mean time between failures (MTBF)

  • Page 65: Pa-400 Series Firewall Compliance Statements Overview

    Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose.To view compliance statements for the PA-400 Series firewall, see PA-400 Series Firewall Compliance Statements...

  • Page 66: Pa-400 Series Firewall Compliance Statements

    PA-400 Series Firewall Compliance Statements Overview PA-400 Series Firewall Compliance Statements The following lists the PA-400 Series firewall hardware compliance statements: • VCCI: This section provides the compliance statement for the Voluntary Control Council for Interference by Information Technology Equipment (VCCI), which governs radio frequency emissions in Japan.
  • Page 67 PA-400 Series Firewall Compliance Statements Overview • TUV: Product Ambient Temperature: • (PA-410, PA-440, PA-450, and PA-460) 0~40 degrees C • (PA-415 and PA-445) 0~45 degrees C Risk of explosion if battery is replaced by an incorrect type. Dispose of used battery according to local regulations.
  • Page 68 PA-400 Series Firewall Compliance Statements Overview PA-400 Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

This manual is also suitable for:

Pa-440Pa-450Pa-460Pa-415Pa-445Pa-410

Table of Contents