background image

PA-800 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE   |   Before You Begin   

9

©

 2019 Palo Alto Networks, Inc.

Product Safety Warnings

To avoid personal injury or death for yourself and others and to avoid damage to your Palo Alto Networks

hardware, be sure you understand and prepare for the following warnings before you install or service the

hardware. You will also see warning messages throughout the hardware reference where potential hazards

exist.

All Palo Alto Networks products with laser-based optical interfaces comply with 21 CFR
1040.10 and 1040.11.

The following safety warnings apply to all Palo Alto Networks firewalls and appliances, unless a specific

hardware model is specified.
• When installing or servicing a Palo Alto Networks firewall or appliance hardware component that has

exposed circuits, ensure that you wear an electrostatic discharge (ESD) strap. Before handling the

component, make sure the metal contact on the wrist strap is touching your skin and that the other end

of the strap is connected to earth ground.

French Translation:

 Lorsque vous installez ou que vous intervenez sur un composant matériel de

pare-feu ou de dispositif Palo Alto Networks qui présente des circuits exposés, veillez à porter un

bracelet antistatique. Avant de manipuler le composant, vérifiez que le contact métallique du bracelet

antistatique est en contact avec votre peau et que l’autre extrémité du bracelet est raccordée à la terre.

• Use grounded and shielded Ethernet cables to ensure agency compliance with electromagnetic

compliance (EMC) regulations.

French Translation:

 D es câbles Ethernet blindés reliés à la terre doivent être utilisés pour garantir la

conformité de l'organisme aux émissions électromagnétiques (CEM).

• (

PA-220 firewalls only

) The PA-220 firewall meets the requirements of IEC 61000-4-5 surge immunity

test. To prevent damage from electrical surges on Ethernet ports, we recommend that you use an

Ethernet surge protection device with the following specifications:
• Rated for Gigabit Ethernet up to category 5E and minimum 1Gbps.
• Protection provided on all eight signal leads.
• Both line-to-line and line-to-ground/shield are provided.
• Protection device must be connected to earth ground and use shielded category 5E or higher

Ethernet cable.

Technical Specifications:

• Protective circuit complies with IEC test classifications B2, C1, C2, C3, and D1.
• Normal discharge current (core to earth ground) is 2kA per signal pair.
• Normal discharge current (core to core) is 100A.
• Total discharge current is 10kA.

French Translation:

 (

PA-220 uniquement

) Les pare-feux PA-220 sont conformes aux exigences du test

d’immunité aux surtensions IEC 61000-4-5. Pour éviter les dommages résultant de surtension électrique

sur les ports Ethernet, il est recommandé d’utiliser un dispositif de protection contre les surtensions aux

caractéristiques suivantes:
• Gigabit Ethernet jusqu’à la catégorie 5E, débit 1 Go/s minimum.
• Protection sur les huit câbles signal.
• Le blindage et la mise à la terre “ligne à ligne” et “ligne à la terre” sont fournis.
• Le dispositif de protection doit être raccordé à la terre et un câble Ethernet blindé de catégorie 5E ou

supérieure doit être utilisé.

Caractéristiques techniques:

Summary of Contents for PA-800 Series

Page 1: ...PA 800 Series Next Gen Firewall Hardware Reference paloaltonetworks com documentation...

Page 2: ...arch for a specific topic go to our search page www paloaltonetworks com documentation document search html Have feedback or questions for us Leave a comment on any page in the portal or write to us a...

Page 3: ...Equipment Rack 22 Connect Power to a PA 800 Series Firewall Overview 25 Connect Power to a PA 800 Series Firewall 27 Service the PA 800 Series Firewall Hardware 29 Interpret the LEDs on a PA 800 Seri...

Page 4: ...iv TABLE OF CONTENTS...

Page 5: ...u install or service a Palo Alto Networks next generation firewall or appliance The following topics apply to all Palo Alto Networks firewalls and appliances except where noted Tamper Proof Statement...

Page 6: ...6 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Before You Begin 2019 Palo Alto Networks Inc...

Page 7: ...uct The tracking number provided to you electronically when ordering the product matches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used...

Page 8: ...FIREWALL HARDWARE REFERENCE Before You Begin 2019 Palo Alto Networks Inc Third Party Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Comp...

Page 9: ...re agency compliance with electromagnetic compliance EMC regulations French Translation D es c bles Ethernet blind s reli s la terre doivent tre utilis s pour garantir la conformit de l organisme aux...

Page 10: ...firewall is powered on but you must replace it within 45 seconds and you can only replace one fan tray at a time to prevent the thermal protection circuit from shutting down the firewall French Transl...

Page 11: ...is granted only to craft service personnel using a special tool lock and key or other means of security and that is controlled by the authority responsible for the location French Translation Tous les...

Page 12: ...12 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Before You Begin...

Page 13: ...elp you meet your deployment requirements All models in this series provide next generation security features to help you secure your organization through advanced visibility and control of applicatio...

Page 14: ...14 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE PA 800 Firewall Overview 2019 Palo Alto Networks Inc...

Page 15: ...A 820 Firewalls Four 1Gbps SFP ports you cannot reconfigure these ports PA 850 Firewalls Four 1Gbps SFP ports or four 10Gbps SFP ports default you can specify which you want to use but you cannot mix...

Page 16: ...ccess to firewall boot messages the Maintenance Recovery Tool MRT and the command line interface CLI If your management computer does not have a serial port use a USB to serial converter Use the follo...

Page 17: ...E REFERENCE PA 800 Firewall Overview 17 2019 Palo Alto Networks Inc Item Component Description 9 LED status indicators Six LEDs that indicate the status of the firewall hardware components see Interpr...

Page 18: ...850 firewall has two hot swappable power supplies the second power supply is for redundancy Figure 1 PA 820 Back Panel Figure 2 PA 850 Back Panel Item Component Description 1 Power inputs Use the powe...

Page 19: ...in a two post 19 equipment rack If you install the firewall in a four post rack purchase and install the four post rack kit PAN PA 1RU RACK4 to secure the firewall to the back rack posts Install the...

Page 20: ...20 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Install the PA 800 Series Firewall 2019 Palo Alto Networks Inc...

Page 21: ...support the weight of the installed equipment STEP 1 Attach one rack mount bracket to each side of the firewall using four 6 32 x 5 16 screws for each bracket and torque to 9 in lbs For a two post ra...

Page 22: ...ws for each bracket and torque to 9 in lbs STEP 2 Attach one rack mount rail to each side of the firewall using two 6 32 x 5 16 screws for each rail and torque to 9 in lbs STEP 3 With help from anothe...

Page 23: ...PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Install the PA 800 Series Firewall 23 2019 Palo Alto Networks Inc...

Page 24: ...24 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Install the PA 800 Series Firewall...

Page 25: ...s a 100 240VAC 50 60 Hz power source The PA 820 firewall has one power supply and the PA 850 firewall has two power supplies the second power supply is for redundancy For details on power requirements...

Page 26: ...26 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Connect Power to a PA 800 Series Firewall Overview 2019 Palo Alto Networks Inc...

Page 27: ...to 25 in lbs Connect the other end of the cable to earth ground STEP 3 Connect the AC power cord to the power input on the back of the firewall On a PA 850 firewall connect a second power cord to the...

Page 28: ...28 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Connect Power to a PA 800 Series Firewall Overview...

Page 29: ...topics describe how to interpret the PA 800 Series firewall status LEDs and how to replace a PA 850 power supply The PA 820 firewall does not have serviceable components Interpret the LEDs on a PA 800...

Page 30: ...30 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Service the PA 800 Series Firewall Hardware 2019 Palo Alto Networks Inc...

Page 31: ...w The firewall is booting HA High Availability Green The firewall is the active peer in an active passive configuration Yellow The firewall is the passive peer in an active passive configuration Off H...

Page 32: ...indicates a network link Blinking green indicates network activity Back Panel LEDs PA 850 firewall only Power supply LED Green The power supply is operating normally Off The system detected a loss of...

Page 33: ...g the power supply LEDs on the back of the firewall the LED on the failed power supply will be off STEP 2 Remove the Velcro strap that secures the AC power cord to the power supply and remove the powe...

Page 34: ...34 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE Service the PA 800 Series Firewall Hardware...

Page 35: ...irewall hardware specifications For feature capacity and performance information refer to the PA 800 Series firewall datasheet PA 800 Series Physical Specifications PA 800 Series Electrical Specificat...

Page 36: ...36 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE PA 800 Series Firewall Specifications 2019 Palo Alto Networks Inc...

Page 37: ...Rack units 1U Dimensions 1 75 H X 14 D X 17 125 W 4 44cm X 35 56cm X 43 49cm PA 850 firewall Rack units 1U Dimensions 1 75 H X 14 5 D X 17 125 W 4 44cm X 36 83cm X 43 49cm The depth dimension includes...

Page 38: ...lies PA 820 firewall One fixed AC 200W power supply PA 850 firewall Two AC 500W power supplies One power supply is redundant Input voltage 100 240VAC 50 60Hz Power consumption PA 820 firewall Average...

Page 39: ...nge 32 F to 104 F 0 to 40 C Non operating temperature 4 F to 158 F 20 to 70 C Humidity tolerance 5 to 90 non condensing Airflow Front to back Maximum BTUs hour PA 820 firewall 153 BTUs hour PA 850 fir...

Page 40: ...ewall Specifications PA 800 Series Miscellaneous Specifications The following table describes PA 800 Series firewall miscellaneous specifications Specification Value Storage capacity One 240GB SSD for...

Page 41: ...rtifications to comply with the laws and regulations in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagnetic compatib...

Page 42: ...42 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE PA 800 Series Firewall Compliance Statements Overview 2019 Palo Alto Networks Inc...

Page 43: ...issions in Japan The following information is in accordance to VCCI Class A requirements Translation This is a Class A product In a domestic environment this product may cause radio interference in wh...

Page 44: ...44 PA 800 SERIES NEXT GEN FIREWALL HARDWARE REFERENCE PA 800 Series Firewall Compliance Statements Overview...

Reviews: