PaloAlto Networks PA-400R Series Hardware Reference Manual

Next-gen firewall

Hide thumbs Also See for PA-400R Series:

Hardware reference manual (44 pages)

Table Of Contents

Quick Links

Download this manual

PA-400R Series Next-Gen Firewall

Hardware Reference

docs.paloaltonetworks.com

Table of Contents

Need help?

Do you have a question about the PA-400R Series and is the answer not in the manual?

Questions and answers

Summary of Contents for PaloAlto Networks PA-400R Series

Page 1 PA-400R Series Next-Gen Firewall Hardware Reference docs.paloaltonetworks.com...
Page 2 Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised April 1, 2025 PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 3: Table Of Contents
Install the PA-400R Series Firewall on a Wall..............29 Install the PA-400R Series Firewall in an Equipment Rack..........31 Install the PA-400R Series Firewall on a DIN Rail............35 Connect Cables to the PA-400R Series Firewall...............37 Connect Ethernet Cables to the PA-400R Series Firewall........37 Connect Fiber Cables to the PA-400R Series Firewall.........
Page 5: Before You Begin
Before You Begin Read the following topics before you install or service a Palo Alto Networks next-generation ® firewall or appliance.The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. • Upgrade/Downgrade Considerations for Firewalls and Appliances •...
Page 6: Upgrade/Downgrade Considerations For Firewalls And Appliances
If the value the downgrade. If the is less than 20, then value is less than 20, contact support for then contact support for assistance. assistance. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 7: Tamper Proof Statement
• The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 8: Third-Party Component Support
Before You Begin Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 9: Product Safety Warnings
• I/O ports are intended for intra-building connections only and not intended for OSP (Outside Plant) connections or any network connections subject to external voltage surge events. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 10 Toutefois, vous devez le faire dans les 45 secondes et vous ne pouvez remplacer qu’un tiroir à la fois, sinon le circuit de protection thermique arrêtera le pare-feu. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 11 à accès limité uniquement. Une zone à accès limité correspond à une zone dans laquelle l’accès n’est autorisé au personnel (de service) qu'à l'aide d'un outil spécial, PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Page 12 • A suitably-rated DC mains disconnect device must be provided as part of the building installation. French Translation: Un interrupteur d'isolement suffisant doit être fourni pendant l'installation du bâtiment. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 13: Pa-400R Series Firewall Overview
The following topics describe the hardware features of the PA-400R firewalls. To view or compare performance and capacity information, refer to the Product Selection tool. • PA-400R Series Front Panel • PA-400R Series Back Panel • PA-400R Series Top and Bottom Panels • Interpret the LEDs on a PA-400R Series Firewall...
Page 14: Pa-400R Series Front Panel
PA-400R Series Firewall Overview PA-400R Series Front Panel View the front panel components of your PA-400R Series firewall. • PA-410R • PA-410R-5G • PA-450R • PA-450R-5G The front panels of the PA-410R and PA-410R-5G are similar except that the PA-410R-5G features antennas and has an additional LED to denote cellular status.
Page 15 The following image shows the front panel of the PA-450R and the table describes each front panel component. Item Component Description LED status indicators Four LEDs that indicate the status of the firewall hardware components (see Interpret PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 16 PA-400R Series Firewall Overview Item Component Description the LEDs on a PA-400R Series Firewall). USB port Use this port to bootstrap the firewall. Bootstrapping enables you to provision the firewall with a specific PAN-OS configuration and then license it and make it operational on your network.
Page 17 A second power supply can be used for redundancy. The following image shows the front panel of the PA-450R-5G and the table describes each front panel component. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 18 LED status indicators Five LEDs that indicate the status of the firewall hardware components (see Interpret the LEDs on a PA-400R Series Firewall). USB port Use this port to bootstrap the firewall. Bootstrapping enables you to...
Page 19 SFP/RJ-45 combo ports Two SFP/RJ-45 combo ports for 10/100/1000Mbps speeds. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 20 (ground cable not included). DC power inputs Use the DC power inputs to connect power to the firewall. A second power supply can be used for redundancy. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 21: Pa-400R Series Back Panel
PA-400R Series Firewall Overview PA-400R Series Back Panel View the back panel components of your PA-400R Series firewall. • PA-410R • PA-410R-5G • PA-450R • PA-450R-5G The back panels of the PA-410R and PA-410R-5G are identical. The following image shows the back panel of the PA-410R and the table describes each back panel component.
Page 22 The following image shows the back panel of the PA-450R. There are no serviceable components on the back panel. The following image shows the back panel of the PA-450R-5G. There are no serviceable components on the back panel. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 23: Pa-400R Series Top And Bottom Panels
PA-400R Series Firewall Overview PA-400R Series Top and Bottom Panels View the top and bottom panel components of your PA-400R Series firewall. • PA-410R and PA-410R-5G The PA-410R and PA-410R-5G firewalls feature serviceable components on the top and bottom panels.
Page 24 SFP Ports Two SFP ports for 10/100/1000Mbps speeds. Breather valve A breather valve that prevents the buildup of condensation in the sealed enclosure. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 25: Interpret The Leds On A Pa-400R Series Firewall
PA-400R Series Firewall Overview Interpret the LEDs on a PA-400R Series Firewall The following table describes how to interpret the status LEDs on all of the PA-400R Series firewalls. Description Front Panel LEDs • Green—The firewall is powered on. • Off—The firewall is not powered on or an error has occurred...
Page 26 HA pair will not work. To ensure your LEDs display correctly, avoid configuring link states to down or using the shutdown passive link state unless needed for security reasons. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 27: Install The Pa-400R Series Firewall
Install the PA-400R Series Firewall The PA-400R Series next-generation firewalls can be installed in a number of different configurations depending on their design. The PA-450R and PA-450R-5G can be installed in a 19- inch equipment rack, on a flat surface, or on a wall. The PA-410R and PA-410R-5G ship with the hardware required to install the firewall on a DIN rail, while the equipment needed to install the firewall on a wall requires your own VESA mount.
Page 28: Install The Pa-400R Series Firewall On A Flat Surface
Install the PA-400R Series Firewall Install the PA-400R Series Firewall on a Flat Surface The PA-450R and PA-450R-5G firewalls have four circular feet on their bottom side that can be used to install the device in a horizontal position. If you have a firewall that supports multi-band antennas, proceed to...
Page 29: Install The Pa-400R Series Firewall On A Wall
Install the PA-400R Series Firewall Install the PA-400R Series Firewall on a Wall The PA-450R and PA-450R-5G firewalls can be installed on a wall with the use of PAN-1RU- SMALL-WALLMNT. The PA-410R and PA-410R-5G firewalls can be installed on a wall using a VESA mount (not provided by Palo Alto Networks).
Page 30 PA-450R and PA-450R-5G— Attach the wall mount to the wall using four screws that are appropriate for your wall. Sheet metal and drywall inserts are included with the wall mount kit. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Page 31: Install The Pa-400R Series Firewall In An Equipment Rack
Install the PA-400R Series Firewall Install the PA-400R Series Firewall in an Equipment Rack One PA-450R or PA-450R-5G firewall can be mounted in a 19” equipment rack using the PAN-1RU-SMALL-RACK4. The mounting equipment requires 1 RU of rack space. After installing, make sure to keep the device clean and clear of dust to ensure optimal heat dissipation and maintain proper hardware operation.
Page 32 With the front of the firewall facing forward, align the four rubber feet on the bottom of the device to the slotted holes in the provided mounting tray. STEP 5 | While holding the firewall, carefully flip the mounting tray over to reveal its underside. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 33 Flip the mounting tray back into an upright position. STEP 8 | Follow the instructions to Connect DC Power to a PA-400R Series Firewall. STEP 9 | Slide the mounting tray into the rails previously fixed to the equipment rack. Stop when the front flange on the mounting tray is flush with the front of the rail.
Page 34 Align the slotted holes in the mounting tray to the holes in the equipment frame. Secure the mounting tray to the equipment frame on both sides using 3 screws each (not provided). The screws must be compatible with your equipment frame. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 35: Install The Pa-400R Series Firewall On A Din Rail
Install the PA-400R Series Firewall Install the PA-400R Series Firewall on a DIN Rail The PA-410R and PA-410R-5G firewalls can be installed on a DIN rail using the provided DIN rail mounting clip. STEP 1 | Using four M4 screws, install the DIN rail mounting clip to the back panel of the device.
Page 36 Using slight downward pressure, attach the firewall onto the DIN rail so that the two metal clips lock into place. Keep the device clean and clear of dust to ensure optimal heat dissipation and maintain proper hardware operation. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 37: Connect Cables To The Pa-400R Series Firewall
(for three RJ-45 cables). The PAN-PA-RGD-GLND2 includes a gland for one fiber cable. It takes two of each set to fully populate all the cables in the firewall. • Connect Ethernet Cables to the PA-400R Series Firewall • Connect Fiber Cables to the PA-400R Series Firewall...
Page 38 PA-410R and PA-410R-5G STEP 6 | Repeat Steps 4 and 5 for any additional cables. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 39: Connect Fiber Cables To The Pa-400R Series Firewall
Install the PA-400R Series Firewall STEP 7 | Follow the procedure to Connect DC Power to a PA-400R Series Firewall before you continue to the next step. STEP 8 | Once all cables are connected, make sure that any unused ports have a stopping plug in the corresponding panel slot.
Page 40 Thread the fiber cable through the end cap. Unlatch the seal and fit the cable into it, then close the seal latch. Thread the fiber cable through the connector so that the three components are in the order pictured. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 41 Screw the end cap into the seal and tighten it until the end cap is securely fastened. STEP 7 | Repeat Steps 1 through 6 on the other SFP port if you are connecting a second fiber cable. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 42: Install Antennas On The Pa-400R Series 5G Firewall
Install the PA-400R Series Firewall Install Antennas on the PA-400R Series 5G Firewall The PA-410R-5G and PA-450R-5G firewalls each support four multi-band antennas. The following procedure describes how to install the to the four antenna SMA (F) connectors on the firewall.
Page 43 Secure the antennas to the SMA connectors located at the corners of the device. Make sure to tighten each antenna by hand. The antennas are fixed at a 90 degree orientation but can be repositioned after installation. (PA-410R-5G) (PA-450R-5G) PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 44 Fold the antennas at a 90 degree angle so that the device can be appropriately installed on a wall or DIN rail. While viewing the back panel of the device, PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 45 Do not point the antennas towards one another or place them close to one another. Ensure that power cables do not cross over the antennas as this can cause signal quality distortion and antenna performance degradation. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 46: Insert A Sim Card Into A Pa-400R Series Firewall
Install the PA-400R Series Firewall Insert a SIM Card into a PA-400R Series Firewall The PA-410R-5G supports two nano SIM cards to enable mobile network connectivity. The SIM slot is located on the top panel of the firewall. The PA-450R-5G supports two nano SIM cards to enable mobile network connectivity. The SIM...
Page 47 SIM 1 as the primary slot. If you want to use SIM 2 as the primary slot, you must manually configure SIM 2 as the primary SIM slot using the Web Interface. (PA-410R-5G) (PA-450R-5G) PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 48 To eject the SIM from the device, gently push the SIM inward using your fingertip. Release your fingertip and pull out the SIM. It is recommended that you use tweezers to extract the SIM. PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 49: Set Up A Connection To The Firewall
Install the PA-400R Series Firewall Set Up a Connection to the Firewall On first startup, the PA-400R Series firewall boots into Zero Touch Provisioning (ZTP) mode by default. ZTP mode allows you to automate the provisioning process of a new firewall that is added to a Panorama management server.
Page 50 Install the PA-400R Series Firewall STEP 4 | Power on the firewall. See Connect Power to a PA-400R Series Firewall to learn how to connect power to the firewall. • (Standard mode) Using your terminal emulator, watch for the following CLI prompt as the...
Page 51: Connect Power To A Pa-400R Series Firewall
Connect Power to a PA-400R Series Firewall The PA-400R Series firewalls are powered by DC power and support power redundancy. Learn how to Set Up a Connection to the Firewall based on your desired boot mode prior to powering on the firewall for the first time.
Page 52: Prepare To Connect Power To A Pa-400R Series Firewall
Connect Power to a PA-400R Series Firewall Prepare to Connect Power to a PA-400R Series Firewall The following information describes how to prepare the hardware that is required to connect power to a PA-410R or PA-410R-5G only. On the other hand, the PA-450R and PA-450R-5G ship with the equipment needed to connect power to the firewall.
Page 53: Connect Dc Power To A Pa-400R Series Firewall
Connect Power to a PA-400R Series Firewall Connect DC Power to a PA-400R Series Firewall The following procedure describes how to connect DC power to a PA-410R , PA-410R-5G, PA-450R-5G, and PA-450R firewall. Before you continue, read how to Prepare to Connect Power to a PA-400R Series Firewall.
Page 54 Connect Power to a PA-400R Series Firewall STEP 2 | (PA-410R and PA-410R-5G only) Prepare to install the power cables using the provided cable glands. 1. Using a Phillips-Head screwdriver, unscrew the four screws on the bottom panel of the firewall.
Page 55 Connect Power to a PA-400R Series Firewall hole that corresponds to the DC power input being connected. Make sure that the connector is secure. 5. Thread the power cable through the end cap. This is used to secure the cable gland once the panel is reattached at the end of the procedure.
Page 56 Connect Power to a PA-400R Series Firewall screwdriver. Turn the connector screws clockwise until tight. Do not torque the screws to more than 2 in-lbs. STEP 6 | Plug the cabled DC connector into the DC input on the firewall. Secure the connector by turning the two screws on each side clockwise and torque them to 3 in-lbs.
Page 57 Connect Power to a PA-400R Series Firewall STEP 8 | (PA-410R and PA-410R-5G only) Follow the procedure to Connect Ethernet Cables to the PA-400R Series Firewall before you screw the bottom panel back into place. 1. Once all Ethernet and power cables are connected, make sure that any unused ports have a stopping plug in the corresponding panel slot.
Page 58 Connect Power to a PA-400R Series Firewall PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 59: Pa-400R Series Firewall Specifications
PA-400R Series Firewall Specifications The following topics describe the PA-400R Series firewall hardware specifications. For feature, capacity, and performance information, refer to the datasheet. • Physical Specifications • Electrical Specifications • Environmental Specifications • Antenna Specifications • Miscellaneous Specifications...
Page 60: Physical Specifications
PA-400R Series Firewall Specifications Physical Specifications The following table describes PA-400R Series firewall physical specifications. Specification Value Rack units and dimensions PA-410R and PA-410R-5G • Height: 8.07", Width: 10.63", Depth: 3.66" (Height: 20.5 cm, Width: 27 cm, Depth: 9.3 cm) The above dimensions do not take the cable glands and covers into account.
Page 61: Electrical Specifications
PA-400R Series Firewall Specifications Electrical Specifications The following table describes PA-400R Series firewall electrical specifications. Specification Value Power input PA-410R, PA-410R-5G, PA-450R, and PA-450R-5G— 12-48VDC power. Maximum power consumption PA-410R and PA-410R-5G—28.9W PA-450R—50W PA-450R-5G—50W Maximum current consumption PA-410R and PA-410R-5G—2.4A@12VDC PA-450R and PA-450R-5G—6A@12VDC...
Page 62: Environmental Specifications
PA-400R Series Firewall Specifications Environmental Specifications The following table describes PA-400R Series firewall environmental specifications. Specification Value Operating temperature range -40°F to 158°F (-40°C to 70°C) Humidity tolerance 10% to 90% non-condensing Airflow The PA-400R Series firewalls use passive cooling and do not contain fans.
Page 63: Antenna Specifications
PA-400R Series Firewall Specifications Antenna Specifications The following table describes the PA-400R Series firewall antenna specifications. Specification Value Antennas PA-410R-5G and PA-450R-5G • Four 5G multi-band antennas PA-410R-5G and PA-450R-5G Frequency range • 615-960MHz / 1500-1600MHz / 1710-2690MHz / 3300-3700MHz...
Page 64: Miscellaneous Specifications
PA-400R Series Firewall Specifications Miscellaneous Specifications The following table describes PA-400 Series firewall miscellaneous specifications. Specification Value Storage capacity One 128 GB eMMC Mean time between failures (MTBF) 8.7 years PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...
Page 65: Pa-400R Series Firewall Compliance Statements Overview
Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose. To view compliance statements for the PA-400R Series firewall, see PA-400R Series Firewall Compliance...
Page 66: Pa-400R Series Firewall Compliance Statements
PA-400R Series Firewall Compliance Statements Overview PA-400R Series Firewall Compliance Statements The following lists the PA-400R Series firewall hardware compliance statements: • VCCI: This section provides the compliance statement for the Voluntary Control Council for Interference by Information Technology Equipment (VCCI), which governs radio frequency emissions in Japan.
Page 67 PA-400R Series Firewall Compliance Statements Overview determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: • Reorient or relocate the receiving antenna. • Increase the separation between the equipment and receiver.
Page 68 PA-400R Series Firewall Compliance Statements Overview PA-400R Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc. ©...

This manual is also suitable for:

Pa-410r Pa-410r-5g Pa-450r Pa-450r-5g