PaloAlto Networks PA-3400 Series, Hardware Reference Manual

Page 1: ...PA 3400 Series Next Gen Firewall Hardware Reference docs paloaltonetworks com...

Page 2: ...networks com search html Have feedback or ques ons for us Leave a comment on any page in the portal or write to us at documenta on paloaltonetworks com Copyright Palo Alto Networks Inc www paloaltonet...

Page 3: ...on to the Firewall 28 Connect Power to a PA 3400 Series Firewall 30 Service the PA 3400 Series Firewall 33 Interpret the PA 3400 Series Status LEDs 34 Replace a PA 3400 Series Power Supply 37 Replace...

Page 4: ...Table of Contents PA 3400 Series Next Gen Firewall Hardware Reference 4 2022 Palo Alto Networks Inc...

Page 5: ...to Networks next genera on rewall or appliance The following topics apply to all Palo Alto Networks rewalls and appliances except where noted Upgrade Downgrade Considera ons for Firewalls and Applianc...

Page 6: ...terface for the Data Services service route n a Upgrading a PA 7000 Series Firewall with a rst genera on switch management card PA 7050 SMC or PA 7080 SMC PAN OS 8 0 and later Before upgrading the rew...

Page 7: ...ct matches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used to seal the box or crate is not compromised The integrity of the warranty labe...

Page 8: ...arty Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Component Support statement PA 3400 Series Next Gen Firewall Hardware Reference 8 202...

Page 9: ...grounded and shielded Ethernet cables to ensure agency compliance with electromagne c compliance EMC regula ons French Transla on Des c bles Ethernet blind s reli s la terre doivent tre u lis s pour...

Page 10: ...ng the en re fan tray This allows the fans to stop spinning and helps you avoid serious injury when removing the fan tray You can replace a fan tray while the rewall is powered on but you must replac...

Page 11: ...le conducteur lectrode de mise la terre du syst me d alimenta on c c est raccord The rewall must be in the same immediate area such as adjacent cabinets as any other equipment that has a connec on bet...

Page 12: ...qu dans la proc dure d installa on de votre pare feu pare feu The rewall permits the connec on of the earthed conductor of the DC supply circuit to the earthing conductor at the equipment as described...

Page 13: ...y to help you meet your deployment requirements All models in this series provide next genera on security features to help you secure your organiza on through advanced visibility and control of applic...

Page 14: ...be remapped as HA 1 ports via PAN OS or Panorama These remapped HA 1 ports o er high availability connec vity over a longer distance than what is permi ed by the HA1 A and HA1 B ports listed below 3...

Page 15: ...rts due to a failure or manual restart the HA1 B link will also restart If this occurs and the HA1 A link is not connected and con gured then a split brain condi on occurs Therefore we recommend that...

Page 16: ...his port to connect a management computer to the rewall using a standard Type A USB to micro USB cable The console connec on provides access to rewall boot messages the Maintenance Recovery Tool MRT a...

Page 17: ...low 3 zSFP ports 23 through 26 Four SFP28 25Gbps ports that also support 1G SFP and 10G SFP modules 4 zQSFP ports 27 through 36 Two form factor pluggable QSFP QSFP28 40Gbps 100Gbps Ethernet ports 5 HS...

Page 18: ...occurs and the HA1 A link is not connected and con gured then a split brain condi on occurs Therefore we recommend that you connect and con gure the HA1 A ports and the HA1 B ports to provide redundan...

Page 19: ...E port Micro USB Use this port to connect a management computer to the rewall using a standard Type A USB to micro USB cable The console connec on provides access to rewall boot messages the Maintenan...

Page 20: ...Fan assemblies Provides ven la on and cooling for the rewall The fans are not eld replaceable 2 Ground stud Use the single post ground stud to connect the rewall to earth ground ground cable not incl...

Page 21: ...ies Firewall in an Equipment Rack The PA 3400 Series next genera on rewall ships with rack mount brackets for installa on in a four post 19 equipment rack Install the PA 3400 Series Firewall Using the...

Page 22: ...to install the PA 3400 Series rewall in a 19 four post equipment rack using the four post rack kit PAN PA 1RU RACK4 STEP 1 A ach one rack mount bracket to each side of the rewall in the front mount p...

Page 23: ...o 6 32 x 5 16 screws for each rail and torque to 9 in lbs STEP 3 With help from another person hold the rewall in the rack and secure the front rack mount brackets to the front rack posts using two sc...

Page 24: ...an Equipment Rack screws 10 32 x 3 4 or 12 24 x 1 2 for your rack and torque to 25 in lbs Use cage nuts to secure the screws if the rack has square holes PA 3400 Series Next Gen Firewall Hardware Ref...

Page 25: ...cket into each of the two previously installed side rack mount rails and secure the brackets to the back rack posts using the appropriate screws for your rack 10 32 x 3 4 or 12 24 x 1 2 and torque to...

Page 26: ...Install the PA 3400 Series Firewall in an Equipment Rack PA 3400 Series Next Gen Firewall Hardware Reference 26 2022 Palo Alto Networks Inc...

Page 27: ...es the second power supply is for redundancy Before you connect power read the PA 3400 Series Electrical Speci ca ons Learn how to Set Up a Connec on to the Firewall based on your desired boot mode pr...

Page 28: ...abled If the rewall boots with FIPS CC mode enabled the rewall will automa cally boot in standard mode STEP 1 Use an RJ 45 Ethernet cable to connect the device to the correct port The port s connected...

Page 29: ...Standard Mode and the rewall will begin reboo ng in standard mode ZTP mode Stand by as the rewall boots up STEP 5 Set up the rewall manually if using standard mode If using ZTP mode the device group...

Page 30: ...works hardware or the data that resides on the hardware read the Product Safety Warnings STEP 1 Remove the nut and star washer from the ground stud on the back of the rewall STEP 2 Crimp a 14AWG groun...

Page 31: ...a Connec on to the Firewall STEP 5 Connect the other end of the power cords to an AC power source A er the power supply is connected the power supply powers on the input and output LEDs on the power s...

Page 32: ...Connect Power to a PA 3400 Series Firewall PA 3400 Series Next Gen Firewall Hardware Reference 32 2022 Palo Alto Networks Inc...

Page 33: ...following topics describe how to interpret the PA 3400 Series rewall status LEDs and how to replace the serviceable components Interpret the PA 3400 Series Status LEDs Replace a PA 3400 Series Power S...

Page 34: ...en The rewall is powered on O The rewall is not powered on or an error occurred with the internal power system for example power is not within tolerance levels Status Green The rewall is opera ng norm...

Page 35: ...ailure or the hardware overheated and exceeded the high temperature threshold O The rewall is opera ng normally Fans Green The fan tray and all fans are opera ng normally Red A fan failed If one of th...

Page 36: ...output Input LED Top Solid green Input voltage opera ng within the normal speci ed range Blinking green Overvoltage or undervoltage warning O Exceeded the overvoltage or undervoltage threshold or no i...

Page 37: ...escribes how to replace a PA 3400 Series power supply To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides on the hardware read the Product Safety Warning...

Page 38: ...ly slot Push the power supply all the way in un l the release lever clicks and secures the power supply STEP 5 Connect the AC power cord to the power supply input and secure it to the power supply usi...

Page 39: ...ed to obtain a backup con gura on that you saved from the failed rewall to restore your con gura on To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides o...

Page 40: ...1 0 24 network such as 192 168 1 2 STEP 7 From a web browser go to h ps 192 168 1 1 and when prompted log in to the web interface using the default username and password admin admin STEP 8 Con gure m...

Page 41: ...ies rewall hardware speci ca ons For feature capacity and performance informa on refer to the PA 3400 Series datasheet PA 3400 Series Physical Speci ca ons PA 3400 Series Electrical Speci ca ons PA 34...

Page 42: ...n Value Rack units and dimensions Rack units 1RU Dimensions 1 7 H x 14 23 D x 17 12 W 4 32 cm H x 36 14 cm D x 43 49 cm W The depth dimension includes hardware that protrudes from the back of the rewa...

Page 43: ...are the same for all models in the series Speci ca on Value Power Supplies Two 450W AC power supplies the second power supply is for redundancy Input voltage 100 240VAC 50 60Hz Power consump on Maximu...

Page 44: ...40 C Non opera ng temperature 4 F to 158 F 20 C to 70 C Humidity tolerance non condensing Opera ng and non opera ng rela ve humidity 10 to 90 Air ow Front to back Maximum BTU hr 819BTU hr Electromagne...

Page 45: ...he following table describes PA 3400 Series rewall miscellaneous speci ca ons Speci ca on Value Storage capacity One 480GB SSD for system les and log storage Mean me between failures MTBF 14 years PA...

Page 46: ...PA 3400 Series Firewall Speci ca ons PA 3400 Series Next Gen Firewall Hardware Reference 46 2022 Palo Alto Networks Inc...

Page 47: ...h the laws and regula ons in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagne c compa bility when used for their int...

Page 48: ...This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruc ons may cause harmful interference to radio communica ons However the...

Page 49: ...uipment VCCI which governs radio frequency emissions in Japan The following informa on is in accordance to VCCI Class A requirements Transla on This is a Class A product In a domes c environment this...

Page 50: ...PA 3400 Series Firewall Hardware Compliance Statements PA 3400 Series Next Gen Firewall Hardware Reference 50 2022 Palo Alto Networks Inc...