PaloAlto Networks PA-3200 Series, Hardware Reference Manual

Page 1: ...PA 3200 Series Next Gen Firewall Hardware Reference docs paloaltonetworks com...

Page 2: ...tworks com search html Have feedback or ques ons for us Leave a comment on any page in the portal or write to us at documenta on paloaltonetworks com Copyright Palo Alto Networks Inc www paloaltonetwo...

Page 3: ...Series Firewall 26 Connect DC Power to a PA 3200 Series Firewall 28 Service the PA 3200 Series Firewall 31 Interpret the PA 3200 Series Status LEDs 32 Replace a PA 3200 Series Fan Tray 35 Replace a PA...

Page 4: ...Table of Contents PA 3200 Series Next Gen Firewall Hardware Reference 4 2021 Palo Alto Networks Inc...

Page 5: ...to Networks next genera on rewall or appliance The following topics apply to all Palo Alto Networks rewalls and appliances except where noted Upgrade Downgrade Considera ons for Firewalls and Applianc...

Page 6: ...terface for the Data Services service route n a Upgrading a PA 7000 Series Firewall with a rst genera on switch management card PA 7050 SMC or PA 7080 SMC PAN OS 8 0 and later Before upgrading the rew...

Page 7: ...ct matches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used to seal the box or crate is not compromised The integrity of the warranty labe...

Page 8: ...arty Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Component Support statement PA 3200 Series Next Gen Firewall Hardware Reference 8 202...

Page 9: ...grounded and shielded Ethernet cables to ensure agency compliance with electromagne c compliance EMC regula ons French Transla on Des c bles Ethernet blind s reli s la terre doivent tre u lis s pour...

Page 10: ...ng the en re fan tray This allows the fans to stop spinning and helps you avoid serious injury when removing the fan tray You can replace a fan tray while the rewall is powered on but you must replac...

Page 11: ...le conducteur lectrode de mise la terre du syst me d alimenta on c c est raccord The rewall must be in the same immediate area such as adjacent cabinets as any other equipment that has a connec on bet...

Page 12: ...qu dans la proc dure d installa on de votre pare feu pare feu The rewall permits the connec on of the earthed conductor of the DC supply circuit to the earthing conductor at the equipment as described...

Page 13: ...help you meet your deployment requirements All models in this series provide next genera on security features to help you secure your organiza on through advanced visibility and control of applica on...

Page 14: ...These ports vary depending on your rewall model PA 3220 rewall Ports 13 through 16 are SFP 1Gbps and ports 17 through 20 are SFP or SFP 10Gbps based on the installed transceiver PA 3250 and PA 3260 re...

Page 15: ...appropriate cable length 5 HA1 A and HA1 B ports Two RJ 45 10Mbps 100Mbps 1000Mbps ports for high availability HA control To support high availability over a long distance you must use an external de...

Page 16: ...sh drive with a bootstrap bundle PAN OS con gura on Bootstrapping speeds up the process of con guring and licensing the rewall to make it opera onal on the network with or without internet access 9 CO...

Page 17: ...fan tray Provides ven la on and cooling for the rewall 3 Ground studs Use the two post ground stud to connect the rewall to earth ground The rewall ships with a 6AWG two post ground lug a ached to the...

Page 18: ...PA 3200 Series Firewall Overview PA 3200 Series Next Gen Firewall Hardware Reference 18 2021 Palo Alto Networks Inc...

Page 19: ...n a two post or four post 19 equipment rack If you install the rewall in a four post rack you can purchase and install the op onal four post rack kit to secure the rewall to the back rack posts for ad...

Page 20: ...rly anchored and can support the weight of the installed equipment without pping STEP 1 A ach one rack mount bracket to each side of the rewall using four 8 32 x 5 16 screws for each bracket and torqu...

Page 21: ...pment Rack 10 32 x 3 4 or 12 24 x 1 2 for your rack and torque each screw to 25 in lbs Use cage nuts not provided to secure the screws if the rack has square holes PA 3200 Series Next Gen Firewall Har...

Page 22: ...led For details about the front rack mount brackets see Install the PA 3200 Series Firewall Using the Rack Mount Brackets STEP 2 A ach one four post side rack mount rail to each side of the rewall Use...

Page 23: ...an Equipment Rack 12 24 x 1 2 for your rack and torque each screw to 25 in lbs Use cage nuts not provided to secure the screws if the rack has square holes PA 3200 Series Next Gen Firewall Hardware Re...

Page 24: ...il into each of the two previously installed side rack mount rails and secure the back rails to the back rack posts using two screws for each bracket 10 32 x 3 4 or 12 24 x 1 2 screws and torque each...

Page 25: ...walls have either two AC or two DC power supplies the second power supply is for redundancy Before you connect power read the PA 3200 Series Electrical Speci ca ons Connect AC Power to a PA 3200 Serie...

Page 26: ...rks hardware or the data that resides on the hardware read the Product Safety Warnings STEP 1 Remove the two nuts and star washers from the ground studs on the back of the rewall and then remove the t...

Page 27: ...is connected the power supply powers on the input and output LEDs on the power supply turn green and the PWR LED and the power supply LED PWR 1 or PWR 2 on the front of the rewall turns green Connect...

Page 28: ...ground lug and then a ach the ground lug to the ground studs on the rewall Replace the star washers and nuts and torque to 25 in lbs Connect the other end of the ground cable to earth ground Power o...

Page 29: ...si ve to posi ve and nega ve to nega ve Connect the second set of power cables through a di erent DC circuit to provide power redundancy and to allow for electrical circuit maintenance STEP 4 A er all...

Page 30: ...Connect Power to a PA 3200 Series Firewall PA 3200 Series Next Gen Firewall Hardware Reference 30 2021 Palo Alto Networks Inc...

Page 31: ...describe how to interpret the PA 3200 Series rewall status LEDs and how to replace the serviceable components Interpret the PA 3200 Series Status LEDs Replace a PA 3200 Series Fan Tray Replace a PA 32...

Page 32: ...ra on the HA LED only indicates HA status for the local rewall and has two possible states green or o it does not indicate HA connec vity of the peer Green indicates that the rewall is either ac ve pr...

Page 33: ...ly Red The power supply is present but is not working Ethernet Port LEDs RJ 45 These ports have two LEDs Le LED Solid green indicates a network link Right LED Blinking green indicates network ac vity...

Page 34: ...Overvoltage or undervoltage warning O Exceeded the overvoltage or undervoltage threshold or no input power Output LED Bo om Solid green Main output and standby output enabled no power supply warnings...

Page 35: ...within 45 seconds or the thermal protec on circuit automa cally shuts down the rewall To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides on the hardwar...

Page 36: ...the front of the rewall turn green If the thermal protec on circuit powered o the rewall due to overhea ng or fan failures you need to disconnect and reconnect power On an AC model disconnect both po...

Page 37: ...y To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides on the hardware read the Product Safety Warnings STEP 1 Iden fy the failed power supply by viewing...

Page 38: ...g the Velcro strap The power supply powers on the input and output LEDs on the power supply turn green and the PWR LED and the power supply LED PWR 1 or PWR 2 on the front of the rewall turns green Re...

Page 39: ...Power o the DC power source that is connected to the failed power supply before you con nue to the next step STEP 2 Remove the plas c cover that protects the DC input terminals and then use a Phillips...

Page 40: ...he le and pull the power supply outward to remove it STEP 4 Remove the replacement power supply from the packaging and slide it into the empty power supply slot Push the power supply all the way in un...

Page 41: ...nega ve to nega ve STEP 6 When all DC power cables are securely connected and the plas c guard is properly rea ached power on the DC power source The power supplies powers on the input and output LEDs...

Page 42: ...the failed rewall to restore your con gura on To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides on the hardware read the Product Safety Warnings STEP...

Page 43: ...ver and pull it out un l it is fully open 2 Slide the replacement drive and carrier assembly into the empty drive bay un l it is about 1 4 6cm from being fully inserted 3 Before fully inser ng the dri...

Page 44: ...gura on For informa on on how to upgrade or downgrade PAN OS see the New Features Guide for the PAN OS version that your rewall is running The New Features Guides are located on the Technical Documen...

Page 45: ...rewall hardware speci ca ons For feature capacity and performance informa on refer to the PA 3200 Series rewall datasheet PA 3200 Series Physical Speci ca ons PA 3200 Series Electrical Speci ca ons P...

Page 46: ...ca on Value Rack units and dimensions Rack units 2U Dimensions 3 5 H x 20 53 D x 17 34 W 8 89cm H x 52 15cm D x 44 04cm W The depth dimension includes hardware that protrudes from the back of the rewa...

Page 47: ...er supply is for redundancy Input voltage AC power supplies 100 240VAC 50 60Hz DC power supplies 48 to 60VDC Power consump on Maximum AC power supplies 240W DC power supplies 228W Average AC and DC po...

Page 48: ...C to 70 C Humidity tolerance non condensing Opera ng and non opera ng rela ve humidity 10 to 90 Air ow Front to back Maximum BTU hr All PA 3200 Series rewalls 819BTU hr Electromagne c Interference EMI...

Page 49: ...he following table describes PA 3200 Series rewall miscellaneous speci ca ons Speci ca on Value Storage capacity One 240GB SSD for system les and log storage Mean me between failures MTBF 14 years PA...

Page 50: ...PA 3200 Series Firewall Speci ca ons PA 3200 Series Next Gen Firewall Hardware Reference 50 2021 Palo Alto Networks Inc...

Page 51: ...h the laws and regula ons in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagne c compa bility when used for their int...

Page 52: ...This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruc ons may cause harmful interference to radio communica ons However the...

Page 53: ...uipment VCCI which governs radio frequency emissions in Japan The following informa on is in accordance to VCCI Class A requirements Transla on This is a Class A product In a domes c environment this...

Page 54: ...PA 3200 Series Firewall Hardware Compliance Statements PA 3200 Series Next Gen Firewall Hardware Reference 54 2021 Palo Alto Networks Inc...