PaloAlto Networks PA-220R, Hardware Reference Manual

Page 1: ...PA 220R Next Gen Firewall Hardware Reference docs paloaltonetworks com ...

Page 2: ...ltonetworks com search html Have feedback or ques ons for us Leave a comment on any page in the portal or write to us at documenta on paloaltonetworks com Copyright Palo Alto Networks Inc www paloaltonetworks com 2018 2021 Palo Alto Networks Inc Palo Alto Networks is a registered trademark of Palo Alto Networks A list of our trademarks can be found at www paloaltonetworks com company trademarks ht...

Page 3: ...il 21 Install the PA 220R Firewall on a Wall 22 Install the PA 220R Firewall in a 19 inch Equipment Rack 24 Connect Power to a PA 220R Firewall 27 Prepare to Connect DC Power to a PA 220R Firewall 28 Connect DC Power to a PA 220R Firewall 29 PA 220R Firewall Specifica ons 31 PA 220R Physical Specifica ons 32 PA 220R Electrical Specifica ons 33 PA 220R Environmental Specifica ons 34 PA 220R Miscellaneo...

Page 4: ...Table of Contents PA 220R Next Gen Firewall Hardware Reference 4 2021 Palo Alto Networks Inc ...

Page 5: ...to Networks next genera on firewall or appliance The following topics apply to all Palo Alto Networks firewalls and appliances except where noted Upgrade Downgrade Considera ons for Firewalls and Appliances Tamper Proof Statement Third Party Component Support Product Safety Warnings 5 ...

Page 6: ...interface for the Data Services service route n a Upgrading a PA 7000 Series Firewall with a first genera on switch management card PA 7050 SMC or PA 7080 SMC PAN OS 8 0 and later Before upgrading the firewall run the following CLI command to check the flash drive s status debug system disk smart info disk 1 If the value for a ribute ID 232 Available_Reservd_Space 0x0000 is greater than 20 then proce...

Page 7: ...oduct matches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used to seal the box or crate is not compromised The integrity of the warranty label on the firewall or appliance is not compromised PA 7000 Series firewalls only PA 7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall PA 220R Next G...

Page 8: ...rd Party Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Component Support statement PA 220R Next Gen Firewall Hardware Reference 8 2021 Palo Alto Networks Inc ...

Page 9: ... grounded and shielded Ethernet cables to ensure agency compliance with electromagne c compliance EMC regula ons French Transla on Des câbles Ethernet blindés reliés à la terre doivent être u lisés pour garan r la conformité de l organisme aux émissions électromagné ques CEM PA 3200 PA 5200 PA 5400 PA 7050 and PA 7080 firewalls only At least two people are recommended for unpacking handling and rel...

Page 10: ...xtrac ng the en re fan tray This allows the fans to stop spinning and helps you avoid serious injury when removing the fan tray You can replace a fan tray while the firewall is powered on but you must replace it within 45 seconds and you can only replace one fan tray at a me to prevent the thermal protec on circuit from shu ng down the firewall French Transla on Pare feu PA 7000 uniquement Lors du r...

Page 11: ...e conducteur à électrode de mise à la terre du système d alimenta on c c est raccordé The firewall must be in the same immediate area such as adjacent cabinets as any other equipment that has a connec on between the earthing conductor of the DC supply circuit and the earthing of the DC system French Transla on Le pare feu doit se trouver dans la même zone immédiate des armoires adjacentes par exemp...

Page 12: ...indiqué dans la procédure d installa on de votre pare feu pare feu The firewall permits the connec on of the earthed conductor of the DC supply circuit to the earthing conductor at the equipment as described in the installa on procedure for your firewall French Transla on Ce pare feu permet de raccorder le conducteur de mise à la terre du circuit d alimenta on c c au conducteur de mise à la terre de...

Page 13: ...e high availability HA passive cooling no fans to reduce noise and power consump on RJ 45 ports with built in surge protec on and dual 12 48VDC power inputs for power redundancy First Supported So ware Release PAN OS 8 1 The following topics describe the hardware features and the status LEDs of the PA 220R firewall To view or compare performance and capacity informa on refer to the Product Selec on...

Page 14: ...l see Connect Power to a PA 220R Firewall 3 Ethernet ports 1 through 6 Six RJ 45 10Mbps 100Mbps 1000Mbps ports for network traffic You can set the link speed and duplex or choose auto nego ate for each port These ports also have built in surge protec on 4 SFP ports 7 and 8 Two SFP 1Gbps ports for network traffic These ports also support 100Base FX 5 MGT port Use this Ethernet 10Mbps 100Mbps 1000Mbps p...

Page 15: ...ping speeds up the process of configuring and licensing the firewall to make it opera onal on the network with or without internet access 8 CONSOLE port Micro USB Use this port to connect a management computer to the firewall using a standard Type A USB to micro USB cable The console connec on provides access to firewall boot messages the Maintenance Recovery Tool MRT and the command line interface CL...

Page 16: ... PA 220R firewall The only usable components on the back panel are the two screw holes used to Install the PA 220R Firewall on a DIN Rail There are also two DIN bracket screw holes not shown on the bo om of the firewall PA 220R Next Gen Firewall Hardware Reference 16 2021 Palo Alto Networks Inc ...

Page 17: ...rewall is opera ng normally Yellow The firewall is boo ng HA High Availability Green The firewall is the ac ve peer in an ac ve passive configura on Yellow The firewall is the passive peer in an ac ve passive configura on Off HA is not opera onal on this firewall In an ac ve ac ve configura on the HA LED indicates HA status for only the local firewall and has two possible states it does not indicate HA con...

Page 18: ...green indicates a network link Right LED Blinking green indicates network ac vity SFP LEDs These ports have one green LED Solid green indicates a network link Blinking green indicates network ac vity PA 220R Next Gen Firewall Hardware Reference 18 2021 Palo Alto Networks Inc ...

Page 19: ...r on a DIN rail You can also order a wall mount kit to install the firewall on a wall or a rack mount kit to install the firewall in a 19 equipment rack Install the PA 220R Firewall on a Flat Surface Install the PA 220R Firewall on a DIN Rail Install the PA 220R Firewall on a Wall Install the PA 220R Firewall in a 19 inch Equipment Rack 19 ...

Page 20: ...220R Firewall on a Flat Surface A ach the rubber pads to the recessed circles on the bo om of the firewall and then place the firewall right side up on a flat stable surface PA 220R Next Gen Firewall Hardware Reference 20 2021 Palo Alto Networks Inc ...

Page 21: ...urface of the firewall using the DIN bracket cap ve screws Ensure that the spring loaded clips on the DIN bracket are oriented so that they will grasp the bo om of the DIN rail when you install it STEP 3 Engage the bo om of the DIN bracket with spring loaded clips with the bo om part of the DIN rail Push the firewall and bracket upward to fully compress the spring loaded clips against the rail and t...

Page 22: ... screws and torque each screw to 9 in lbs STEP 3 Use a Phillips head screwdriver to install the appropriate hardware to mount the firewall to the wall based on the wall type To ensure proper heat dissipa on install the firewall so that the front panel with ports and LEDs faces either le or right Drywall First hold the firewall up to the wall where you will install it and use a sharp object to mark th...

Page 23: ...rewall to the wall using four anchor screws Plywood Hold the firewall up to the wall where you will install it and then use a Phillips head screwdriver to mount the bracket to the wall using four 3 4 plywood screws PA 220R Next Gen Firewall Hardware Reference 23 2021 Palo Alto Networks Inc ...

Page 24: ...all hanging off the edge of the table by about three inches STEP 2 Place the shelf upside down on top of the firewall and align the four holes on the bo om of the shelf with the four screw holes on the bo om of the firewall The front bezel of the firewall protrudes out of the front opening of the shelf STEP 3 Secure the shelf to the firewall using four 6 32 x 1 4 Phillips head screws and torque each sc...

Page 25: ...rque to 25 in lbs Use cage nuts not provided to secure the screws if the rack has square holes The weight of the product is not enough to require moun ng to the rear posts of the four post rack PA 220R Next Gen Firewall Hardware Reference 25 2021 Palo Alto Networks Inc ...

Page 26: ...Install the PA 220R Firewall PA 220R Next Gen Firewall Hardware Reference 26 2021 Palo Alto Networks Inc ...

Page 27: ...ing topics describe how to prepare the hardware that is required to connect power to a PA 220R firewall and how to connect ground and DC power to the firewall Prepare to Connect DC Power to a PA 220R Firewall Connect DC Power to a PA 220R Firewall 27 ...

Page 28: ...are for the Installa on STEP 1 Read PA 220R Electrical Specifica ons for power requirements STEP 2 Measure and cut the DC power cables and ground cable Ensure that the DC power cables reach from the firewall to your DC power source and that the ground cable reaches from the firewall to your ground loca on You will need one ground cable and two DC cables one for the posi ve connec on and one for the n...

Page 29: ...ore you a ach the DC terminal block to the firewall STEP 2 Connect one end of a 16 22AWG ground cable to the firewall and connect the other end to earth ground There are three ground loca ons on the firewall one screw on ground point above the DC power inputs and two ground inputs on the DC terminal block last two inputs to the right of the DC inputs use only one of the three ground loca ons even if ...

Page 30: ...s to more than 2 in lbs STEP 4 Op onal Repeat step 3 to connect a second DC power source to terminals B and B STEP 5 Plug the cabled DC terminal block into the DC inputs on the firewall Secure the terminal block by turning the two screws on each side of the block clockwise and torque to 3 in lbs STEP 6 Power on the DC power source to power on the firewall The firewall powers on and the power PWR LED ...

Page 31: ...ardware specifica ons for the PA 220R firewall For feature capacity and performance informa on refer to the PA 220R firewall datasheet PA 220R Physical Specifica ons PA 220R Electrical Specifica ons PA 220R Environmental Specifica ons PA 220R Miscellaneous Specifica ons 31 ...

Page 32: ...des hardware that protrudes from the front of the firewall If the rubber feet are installed on the bo om of the firewall add 78 2cm to the height Rack Units The following dimensions apply when the firewall is installed in the PA 220R 19 inch rack kit Rack units 2U Rack kit dimensions 3 5 H x 8 D x 19 W 8 89cm H x 20 32cm D x 48 26cm W Weight Firewall weight 4 5 lbs 2 04kg Shipping weight 6 lbs 2 72kg...

Page 33: ...ut power must be limited to less than 100W as defined in IEC 60950 1 Specifica on Value Rated input voltage and current 12 48VDC 1 4A Maximum input voltage range 10 60VDC Power consump on 13 17W Maximum current consump on 1 4A 12VDC Maximum inrush current 4 9A 12VDC If you want to power the PA 220R with AC power you must order the PAN PWR 60W AC adapter PA 220R Next Gen Firewall Hardware Reference 3...

Page 34: ...rature range 40 F to 158 F 40 to 70 C Non opera ng temperature 40 F to 167 F 40 to 75 C Humidity tolerance 5 to 90 non condensing Airflow The PA 220R firewall uses passive cooling and does not contain fans Maximum BTU hr 55BTU hr Acous c noise Emits no sound Maximum opera ng al tude 10 000 3 048m PA 220R Next Gen Firewall Hardware Reference 34 2021 Palo Alto Networks Inc ...

Page 35: ...ribes PA 220R firewall miscellaneous specifica ons Specifica on Value Storage capacity One 32GB solid state drive SSD for the PAN OS system files system logs and network traffic logs Mean me between failures MTBF 29 years PA 220R Next Gen Firewall Hardware Reference 35 2021 Palo Alto Networks Inc ...

Page 36: ...PA 220R Firewall Specifica ons PA 220R Next Gen Firewall Hardware Reference 36 2021 Palo Alto Networks Inc ...

Page 37: ...y with the laws and regula ons in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagne c compa bility when used for their intended purpose To view compliance statements for the PA 220R firewall see PA 220R Firewall Hardware Compliance Statements 37 ...

Page 38: ...on This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruc ons may cause harmful interference to radio communica ons However there is no guarantee that interference will not occur in a par cular installa on If this equipment does cause harmful interference to radio or television recep on which can be determined by turning th...

Page 39: ...ogy Equipment VCCI which governs radio frequency emissions in Japan The following informa on is in accordance to VCCI Class A requirements Transla on This is a Class A product In a domes c environment this product may cause radio interference in which case the user may be required to take correc ve ac ons PA 220R Next Gen Firewall Hardware Reference 39 2021 Palo Alto Networks Inc ...

Page 40: ...PA 220R Firewall Hardware Compliance Statements Overview PA 220R Next Gen Firewall Hardware Reference 40 2021 Palo Alto Networks Inc ...