PaloAlto Networks PA-400R Series Hardware Reference Manual
PaloAlto Networks PA-400R Series Hardware Reference Manual

PaloAlto Networks PA-400R Series Hardware Reference Manual

Next-gen firewall

Advertisement

Quick Links

PA-400R Series Next-Gen Firewall
Hardware Reference
docs.paloaltonetworks.com

Advertisement

Table of Contents
loading

Summary of Contents for PaloAlto Networks PA-400R Series

  • Page 1 PA-400R Series Next-Gen Firewall Hardware Reference docs.paloaltonetworks.com...
  • Page 2 Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised October 23, 2023 PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 3: Table Of Contents

    Interpret the LEDs on a PA-400R Series Firewall.............18 Install the PA-400R Series Firewall.............21 Install the PA-400R Series Firewall on a Flat Surface............22 Install the PA-400R Series Firewall on a Wall..............23 Install the PA-400R Series Firewall in an Equipment Rack..........25 Set Up a Connection to the Firewall..................28...
  • Page 4 Table of Contents PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next-generation ® firewall or appliance.The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. • Upgrade/Downgrade Considerations for Firewalls and Appliances •...
  • Page 6: Upgrade/Downgrade Considerations For Firewalls And Appliances

    If the value the downgrade. If the is less than 20, then value is less than 20, contact support for then contact support for assistance. assistance. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 7: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 8: Third-Party Component Support

    Before You Begin Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 9: Product Safety Warnings

    • I/O ports are intended for intra-building connections only and not intended for OSP (Outside Plant) connections or any network connections subject to external voltage surge events. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 10 Toutefois, vous devez le faire dans les 45 secondes et vous ne pouvez remplacer qu’un tiroir à la fois, sinon le circuit de protection thermique arrêtera le pare-feu. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 11 à accès limité uniquement. Une zone à accès limité correspond à une zone dans laquelle l’accès n’est autorisé au personnel (de service) qu'à l'aide d'un outil spécial, PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 12 • A suitably-rated DC mains disconnect device must be provided as part of the building installation. French Translation: Un interrupteur d'isolement suffisant doit être fourni pendant l'installation du bâtiment. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 13: Pa-400R Series Firewall Overview

    PA-400R Series Firewall Overview The Palo Alto Networks PA-400R Series Next-Generation firewalls include the PA-450R. These ® rugged-designed firewalls are built for uncontrolled environments with varying temperature and humidity levels. They include the following main features: a TPM module for PAN-OS key storage and security, active/passive and active/active high availability (HA), and ZTP functionality.
  • Page 14: Pa-400R Series Front Panel

    PA-400R Series Firewall Overview PA-400R Series Front Panel View the front panel components of your PA-400R Series firewall. • PA-450R The following image shows the front panel of the PA-450R and the table describes each front panel component. Item Component...
  • Page 15 10/100/1000Mbps speeds. RJ-45 ports Six RJ-45 10/100/1000Mbps ports for network traffic. Ports 3 and 4 are fail-open ports. They can be configured to provide a pass-through PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 16 A second power supply can be used for redundancy. To view system firmware versions for any of the PA-400R firewalls, use the following CLI command: admin@PA-450r> show system firmware PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 17: Pa-400R Series Back Panel

    The following image shows the back panel of the PA-450R. There are no serviceable components on the back panel. To view system firmware versions for any of the PA-400R Series firewalls, use the following CLI command: admin@PA-450r> show system firmware PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc.
  • Page 18: Interpret The Leds On A Pa-400R Series Firewall

    PA-400R Series Firewall Overview Interpret the LEDs on a PA-400R Series Firewall The following table describes how to interpret the status LEDs on all off the PA-400R Series firewalls. Description Front Panel LEDs • Green—The firewall is powered on. • Off—The firewall is not powered on or an error has occurred...
  • Page 19 HA pair will not work. To ensure your LEDs display correctly, avoid configuring link states to down or using the shutdown passive link state unless needed for security reasons. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 20 PA-400R Series Firewall Overview PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 21: Install The Pa-400R Series Firewall

    Install the PA-400R Series Firewall The PA-400R Series next-generation firewalls can be installed in a number of different configurations depending on their design. The PA-450R ships with the hardware required to install the firewall in a 19-inch equipment rack or on a wall.
  • Page 22: Install The Pa-400R Series Firewall On A Flat Surface

    Install the PA-400R Series Firewall Install the PA-400R Series Firewall on a Flat Surface The PA-450R firewalls have four circular feet on their bottom side that can be used to install the device in a horizontal position. Keep the device clean and clear of dust to ensure optimal heat dissipation and maintain proper hardware operation.
  • Page 23: Install The Pa-400R Series Firewall On A Wall

    Install the PA-400R Series Firewall Install the PA-400R Series Firewall on a Wall The PA-450R firewalls can be installed on a wall with the use of a wall mount kit. After installing, make sure to keep the device clean and clear of dust to ensure optimal heat dissipation and maintain proper hardware operation.
  • Page 24 Attach the wall mount to the wall using four screws that are appropriate for your wall. Sheet metal and drywall inserts are included with the wall mount kit. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 25: Install The Pa-400R Series Firewall In An Equipment Rack

    Install the PA-400R Series Firewall Install the PA-400R Series Firewall in an Equipment Rack One PA-450R firewall can be mounted in a 19” equipment rack using the PAN-PA-1RU-RGD- RACK-KIT-4POST. The mounting equipment requires 1 RU of rack space. After installing, make sure to keep the device clean and clear of dust to ensure optimal heat dissipation and maintain proper hardware operation.
  • Page 26 Flip the mounting tray back into an upright position. STEP 8 | Follow the instructions to Connect Power to a PA-400R Series Firewall. STEP 9 | Slide the mounting tray into the rails previously fixed to the equipment rack. Stop when the front flange on the mounting tray is flush with the front of the rail.
  • Page 27 3 screws each (not provided). The screws must be compatible with your equipment frame. The above picture needs to be updated to remove the power adapter. PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 28: Set Up A Connection To The Firewall

    Install the PA-400R Series Firewall Set Up a Connection to the Firewall On first startup, the PA-400R Series firewall boots into Zero Touch Provisioning (ZTP) mode by default. ZTP mode allows you to automate the provisioning process of a new firewall that is added to a Panorama management server.
  • Page 29 Install the PA-400R Series Firewall STEP 4 | Power on the firewall. See Connect Power to a PA-400R Series Firewall to learn how to connect power to the firewall. • (Standard mode) Using your terminal emulator, watch for the following CLI prompt as the...
  • Page 30 Install the PA-400R Series Firewall PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 31: Connect Power To A Pa-400R Series Firewall

    Connect Power to a PA-400R Series Firewall The PA-400R Series firewalls are powered by DC power and support power redundancy. Learn how to Set Up a Connection to the Firewall based on your desired boot mode prior to powering on the firewall for the first time.
  • Page 32: Prepare To Connect Power To A Pa-400R Series Firewall

    Connect Power to a PA-400R Series Firewall Prepare to Connect Power to a PA-400R Series Firewall Use the following information to gather and prepare the hardware that is required to Connect Power to a PA-400R Series Firewall. Due to the various cable lengths required for a given installation site, DC power and ground cables are not included with the firewall.
  • Page 33: Connect Power To A Pa-400R Series Firewall

    The following procedure describes how to connect DC power to a PA-450R firewall. Before you continue, read how to Prepare to Connect Power to a PA-400R Series Firewall. The DC terminal block for connecting the DC power cables to the firewall is included in the accessories kit.
  • Page 34 Connect Power to a PA-400R Series Firewall PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 35: Pa-400R Series Firewall Specifications

    PA-400R Series Firewall Specifications The following topics describe the PA-400R Series firewall hardware specifications. For feature, capacity, and performance information, refer to the datasheet. • Physical Specifications • Electrical Specifications • Environmental Specifications • Miscellaneous Specifications...
  • Page 36: Physical Specifications

    PA-400R Series Firewall Specifications Physical Specifications The following table describes PA-400R Series firewall physical specifications. Specification Value Rack units and dimensions PA-450R • Height: 8.78", Width: 10.63", Depth: 4.45" (Height: 22.3 cm, Width: 27 cm, Depth: 11.3 cm) • Rack units—1U...
  • Page 37: Electrical Specifications

    PA-400R Series Firewall Specifications Electrical Specifications The following table describes PA-400R Series firewall electrical specifications. Specification Value Power input The PA-400R Series firewalls operate on 12-48VDC power. The firewall can operate on one power supply or you can install a second power supply for power redundancy.
  • Page 38: Environmental Specifications

    PA-400R Series Firewall Specifications Environmental Specifications The following table describes PA-400R Series firewall environmental specifications. Specification Value Operating temperature range PA-450R • -40°F to 158°F (-40° to 70°C) PA-450R Non-operating temperature • -40°F to 158°F (-20° to 70°C) Humidity tolerance...
  • Page 39: Miscellaneous Specifications

    Miscellaneous Specifications The following table describes PA-400 Series firewall miscellaneous specifications. Specification Value Storage capacity PA-450R • One 128 GB eMMC Mean time between failures (MTBF) 8.7 years PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 40 PA-400R Series Firewall Specifications PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...
  • Page 41: Pa-400R Series Firewall Compliance Statements Overview

    Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose. To view compliance statements for the PA-400R Series firewall, see PA-400R Series Firewall Compliance...
  • Page 42: Pa-400R Series Firewall Compliance Statements

    PA-400R Series Firewall Compliance Statements Overview PA-400R Series Firewall Compliance Statements The following lists the PA-400R Series firewall hardware compliance statements: • VCCI: This section provides the compliance statement for the Voluntary Control Council for Interference by Information Technology Equipment (VCCI), which governs radio frequency emissions in Japan.
  • Page 43 PA-400R Series Firewall Compliance Statements Overview determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: • Reorient or relocate the receiving antenna. • Increase the separation between the equipment and receiver.
  • Page 44 PA-400R Series Firewall Compliance Statements Overview PA-400R Series Next-Gen Firewall Hardware Reference 2023 Palo Alto Networks, Inc. ©...

Table of Contents