background image

Before You Begin

Upgrade/Downgrade Considerations for Firewalls and

Appliances

The following table lists hardware features that have upgrade or downgrade impact. Make sure

you understand all upgrade/downgrade considerations before you upgrade or downgrade from

the specified version of PAN-OS.

Feature

Release

Upgrade Considerations

Downgrade

Considerations

PA-7000 Log

Forwarding Card (LFC)

10.0

If you are using an LFC

with a PA-7000 Series

Firewall, when you

upgrade to PAN-OS

10.0, you must configure

the management plane

or dataplane interface

for the service route

because the LFC ports

do not support the

requirements for the

service route. We

recommend using the

dataplane interface for

the Data Services service

route.

n/a

Upgrading a PA-7000

Series Firewall with a

first generation switch

management card

(PA-7050-SMC or

PA-7080-SMC)

PAN-OS 8.0

and later

Before upgrading

the firewall, run the

following CLI command

to check the flash drive’s

status: 

debug system

disk-smart-info

disk-1

.

If the value for

attribute ID #232,

Available_Reservd_Space

0x0000

, is greater than

20, then proceed with

the upgrade. If the value

is less than 20, then

contact support for

assistance.

Before downgrading

the firewall, run the

following CLI command

to check the flash drive’s

status: 

debug system

disk-smart-info

disk-1

.

If the value for

attribute ID #232,

Available_Reservd_Space

0x0000

, is greater than

20, then proceed with

the downgrade. If the

value is less than 20,

then contact support for

assistance.

PA-1400 Series Next-Gen Firewall Hardware Reference

6

©

2022 Palo Alto Networks, Inc.

Summary of Contents for PA-1400 Series

Page 1: ...PA 1400 Series Next Gen Firewall Hardware Reference docs paloaltonetworks com ...

Page 2: ...tworks com search html Have feedback or questions for us Leave a comment on any page in the portal or write to us at documentation paloaltonetworks com Copyright Palo Alto Networks Inc www paloaltonetworks com 2022 2022 Palo Alto Networks Inc Palo Alto Networks is a registered trademark of Palo Alto Networks A list of our trademarks can be found at www paloaltonetworks com company trademarks html ...

Page 3: ... Up a Connection to the Firewall 26 Connect Power to a PA 1400 Series Firewall 28 Service the PA 1400 Series Firewall 31 Interpret the PA 1400 Series Status LEDs 32 Replace a PA 1400 Series Power Supply 35 Replace a PA 1400 Series Power Supply 35 PA 1400 Series Firewall Specifications 37 PA 1400 Series Physical Specifications 38 PA 1400 Series Electrical Specifications 39 PA 1400 Series Environmen...

Page 4: ...Table of Contents PA 1400 Series Next Gen Firewall Hardware Reference 4 2022 Palo Alto Networks Inc ...

Page 5: ... Networks next generation firewall or appliance The following topics apply to all Palo Alto Networks firewalls and appliances except where noted Upgrade Downgrade Considerations for Firewalls and Appliances Tamper Proof Statement Third Party Component Support Product Safety Warnings 5 ...

Page 6: ...rface for the Data Services service route n a Upgrading a PA 7000 Series Firewall with a first generation switch management card PA 7050 SMC or PA 7080 SMC PAN OS 8 0 and later Before upgrading the firewall run the following CLI command to check the flash drive s status debug system disk smart info disk 1 If the value for attribute ID 232 Available_Reservd_Space 0x0000 is greater than 20 then proc...

Page 7: ...matches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used to seal the box or crate is not compromised The integrity of the warranty label on the firewall or appliance is not compromised PA 7000 Series firewalls only PA 7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall PA 1400 Series N...

Page 8: ...Party Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Component Support statement PA 1400 Series Next Gen Firewall Hardware Reference 8 2022 Palo Alto Networks Inc ...

Page 9: ...shielded Ethernet cables to ensure agency compliance with electromagnetic compliance EMC regulations French Translation Des câbles Ethernet blindés reliés à la terre doivent être utilisés pour garantir la conformité de l organisme aux émissions électromagnétiques CEM PA 3200 PA 5200 PA 5400 PA 7050 and PA 7080 firewalls only At least two people are recommended for unpacking handling and relocating...

Page 10: ... entire fan tray This allows the fans to stop spinning and helps you avoid serious injury when removing the fan tray You can replace a fan tray while the firewall is powered on but you must replace it within 45 seconds and you can only replace one fan tray at a time to prevent the thermal protection circuit from shutting down the firewall French Translation Pare feu PA 7000 uniquement Lors du retr...

Page 11: ...tte d un bus à bornes de mise à la terre auquel le conducteur à électrode de mise à la terre du système d alimentation c c est raccordé The firewall must be in the same immediate area such as adjacent cabinets as any other equipment that has a connection between the earthing conductor of the DC supply circuit and the earthing of the DC system French Translation Le pare feu doit se trouver dans la ...

Page 12: ...ge AWG indiqué et serrez les écrous au couple indiqué dans la procédure d installation de votre pare feu pare feu The firewall permits the connection of the earthed conductor of the DC supply circuit to the earthing conductor at the equipment as described in the installation procedure for your firewall French Translation Ce pare feu permet de raccorder le conducteur de mise à la terre du circuit d...

Page 13: ...of its features include Power Over Ethernet PoE capability power redundancy and Multi Gig ports The PA 1400 Series provides next generation security features to help you secure your organization through advanced visibility and control of applications users and content First Supported Software Release PAN OS 11 0 The following topics describe the hardware features of PA 1400 Series firewalls To vie...

Page 14: ...bps 5Gbps PA 1420 Ports 1 through 4 10Mbps 100Mbps 1Gbps Ports 5 through 12 10Mbps 100Mbps 1Gbps 2 5Gbps 5Gbps On both the PA 1410 and PA 1420 ports 9 10 11 and 12 are Power Over Ethernet PoE ports They can be configured to transfer power to a connected device Refer to the PAN OS Networking Admin Guide for PoE configuration information 2 SFP ports 13 through 22 Ten SFP 1Gbps or SFP 10Gbps ports ba...

Page 15: ... and HA3 HA3 is used for packet forwarding for asymmetrically routed sessions that require Layer 7 inspection for App ID and Content ID The HSCI ports must be connected directly between the two firewalls in the HA configuration without a switch or router between them When directly connecting the HSCI ports between two PA 1400 Series firewalls that are physically located near each other Palo Alto N...

Page 16: ...6 CONSOLE port RJ 45 Use this port to connect a management computer to the firewall using a 9 pin serial to RJ 45 cable and terminal emulation software The console connection provides access to firewall boot messages the Maintenance Recovery Tool MRT and the command line interface CLI If your management computer does not have a serial port use a USB to serial converter Use the following settings t...

Page 17: ...messages the Maintenance Recovery Tool MRT and the command line interface CLI Refer to the Micro USB Console Port page for more information and to download the Windows driver or to learn how to connect from a Mac or Linux computer 9 LED status indicators Nine LEDs that indicate the status of the firewall hardware components see Interpret the PA 1400 Series Status LEDs PA 1400 Series Next Gen Firew...

Page 18: ... field replaceable 2 Ground stud Use the single post ground stud to connect the firewall to earth ground ground cable not included 3 PS1 and PS2 Use the power supply inputs to connect AC power to the firewall The second power supply is for redundancy When facing the back of the firewall PS1 is on the left and PS2 is on the right When you receive the PA 1400 Series firewall the PS2 slot has a blank...

Page 19: ...es Firewall in an Equipment Rack The PA 1400 Series next generation firewall ships with rack mount brackets for installation in a four post 19 equipment rack Install the PA 1400 Series Firewall Using the Four Post Rack Kit 19 ...

Page 20: ... install the PA 1400 Series firewall in a 19 four post equipment rack using the four post rack kit PAN PA 1400 RACK4 STEP 1 Attach one rack mount bracket to each side of the firewall in the front mount position using four 6 32 x 5 16 screws for each bracket and torque to 9 in lbs PA 1400 Series Next Gen Firewall Hardware Reference 20 2022 Palo Alto Networks Inc ...

Page 21: ...two 6 32 x 5 16 screws for each rail and torque to 9 in lbs STEP 3 With help from another person hold the firewall in the rack and secure the front rack mount brackets to the front rack posts using two screws for each bracket Use the appropriate PA 1400 Series Next Gen Firewall Hardware Reference 21 2022 Palo Alto Networks Inc ...

Page 22: ...n an Equipment Rack screws 10 32 x 3 4 or 12 24 x 1 2 for your rack and torque to 25 in lbs Use cage nuts to secure the screws if the rack has square holes PA 1400 Series Next Gen Firewall Hardware Reference 22 2022 Palo Alto Networks Inc ...

Page 23: ...acket into each of the two previously installed side rack mount rails and secure the brackets to the back rack posts using the appropriate screws for your rack 10 32 x 3 4 or 12 24 x 1 2 and torque to 25 in lbs PA 1400 Series Next Gen Firewall Hardware Reference 23 2022 Palo Alto Networks Inc ...

Page 24: ...Install the PA 1400 Series Firewall in an Equipment Rack PA 1400 Series Next Gen Firewall Hardware Reference 24 2022 Palo Alto Networks Inc ...

Page 25: ...the second power supply is for redundancy Before you connect power read the PA 1400 Series Electrical Specifications Learn how to Set Up a Connection to the Firewall based on your desired boot mode prior to powering on the firewall for the first time Connect Power to a PA 1400 Series Firewall 25 ...

Page 26: ...ll to Panorama The ZTP firewall is unable to connect to the Palo Alto Networks ZTP service to facilitate onboarding without a DHCP server ZTP mode is disabled if FIPS CC mode is enabled If the firewall boots with FIPS CC mode enabled the firewall will automatically boot in standard mode STEP 1 Use an RJ 45 Ethernet cable to connect the device to the correct port The port s connected will depend on...

Page 27: ...ooting in standard mode ZTP mode Stand by as the firewall boots up STEP 5 Set up the firewall manually if using standard mode If using ZTP mode the device group and template configuration defined on the Panorama management server are automatically pushed to the firewall by the ZTP service Standard mode Change the IP address on your computer to an address in the 192 168 1 0 24 network such as 192 1...

Page 28: ...etworks hardware or the data that resides on the hardware read the Product Safety Warnings STEP 1 Remove the nut and star washer from the ground stud on the back of the firewall STEP 2 Crimp a 14AWG ground cable to a ring lug cable and lug not included and then attach the ring lug to the ground stud on the firewall Replace the star washers and nuts and torque to 25 in lbs Connect the other end of ...

Page 29: ...her end of the power cords to an AC power source After the power supply is connected the power supply powers on the input and output LEDs on the power supply turn green and the PWR LED and the power supply LED PWR 1 or PWR 2 on the front of the firewall turns green Connect the second power cord through a different circuit breaker to provide power redundancy and to allow for electrical circuit main...

Page 30: ...Connect Power to a PA 1400 Series Firewall PA 1400 Series Next Gen Firewall Hardware Reference 30 2022 Palo Alto Networks Inc ...

Page 31: ...es Firewall The following topics describe how to interpret the PA 1400 Series firewall status LEDs and how to replace the serviceable components Interpret the PA 1400 Series Status LEDs Replace a PA 1400 Series Power Supply 31 ...

Page 32: ...his LED Power Green The firewall is powered on Red The firewall has encountered a hardware failure Off The firewall is not powered on Status Green The firewall is operating normally Yellow The firewall is booting High Availability Green The firewall is the active peer in an active passive configuration Yellow The firewall is the passive peer in an active passive configuration Off High availability...

Page 33: ...ilure or the hardware overheated and exceeded the high temperature threshold Off The firewall is operating normally Fans Green The fan tray and all fans are operating normally Red A fan failed If one of the three fans fail the firewall will continue to operate but if two fans fail the firewall will shut down Power Supplies 1 and 2 When facing the back of the firewall power supply 1 PS 1 is on the ...

Page 34: ...e normal specified range Blinking green Overvoltage or undervoltage warning Off Exceeded the overvoltage or undervoltage threshold or no input power Output LED Bottom Solid green Main output and standby output enabled no power supply warnings or faults Blinking green Standby output enabled with no power supply warning or fault detected Blinking yellow Power supply warning detected Solid yellow Pow...

Page 35: ...describes how to replace a PA 1400 Series power supply To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides on the hardware read the Product Safety Warnings STEP 1 Identify the failed power supply by viewing the System logs or by viewing the power supply status LEDs described in Interpret the PA 1400 Series Status LEDs STEP 2 Remove the cord retainer t...

Page 36: ...ly slot Push the power supply all the way in until the release lever clicks and secures the power supply STEP 5 Connect the AC power cord to the power supply input and secure it to the power supply using the cord retainer Once the power supply powers on the input and output LEDs on the power supply turn green Similarly the PWR LED and the power supply LED PWR 1 or PWR 2 on the front of the firewal...

Page 37: ...firewall hardware specifications For feature capacity and performance information refer to the PA 1400 Series datasheet PA 1400 Series Physical Specifications PA 1400 Series Electrical Specifications PA 1400 Series Environmental Specifications PA 1400 Series Miscellaneous Specifications 37 ...

Page 38: ...on Value Rack units and dimensions Rack units 1RU Dimensions 1 7 H x 14 23 D x 17 12 W 4 32 cm H x 36 14 cm D x 43 49 cm W The depth dimension does not include hardware that protrudes from the back of the firewall Weight Firewall weight 14 lbs 6 35 kg Shipping weight 23 5 lbs 10 66 kg PA 1400 Series Next Gen Firewall Hardware Reference 38 2022 Palo Alto Networks Inc ...

Page 39: ...s are the same for all models in the series Specification Value Power Supplies Two 450W AC power supplies the second power supply is for redundancy Input voltage 100 240V AC 50 60Hz Power consumption Maximum 180W not including PoE load Maximum current consumption 3 37A 90VAC Maximum inrush current 8A 110V PA 1400 Series Next Gen Firewall Hardware Reference 39 2022 Palo Alto Networks Inc ...

Page 40: ... 40ºC Non operating temperature 4ºF to 158ºF 20ºC to 70ºC Humidity tolerance non condensing Operating and non operating relative humidity 10 to 90 Airflow Front to back Maximum BTU hr 819BTU hr Electromagnetic Interference EMI FCC Class A CE Class A VCCI Class A Acoustic noise Average 51 dB A Maximum 65 dB A Maximum operating altitude 10 000ft 3 048m PA 1400 Series Next Gen Firewall Hardware Refer...

Page 41: ...400 Series firewall miscellaneous specifications Specification Value Storage capacity PA 1410 One 128GB SSD for system files and log storage PA 1420 One 256GB SSD for system files and log storage Mean time between failures MTBF 14 years PA 1400 Series Next Gen Firewall Hardware Reference 41 2022 Palo Alto Networks Inc ...

Page 42: ...PA 1400 Series Firewall Specifications PA 1400 Series Next Gen Firewall Hardware Reference 42 2022 Palo Alto Networks Inc ...

Page 43: ...th the laws and regulations in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose To view compliance statements for the PA 1400 Series firewalls see PA 1400 Series Firewall Compliance Statements 43 ...

Page 44: ...on This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turni...

Page 45: ...uipment VCCI which governs radio frequency emissions in Japan The following information is in accordance to VCCI Class A requirements Translation This is a Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take corrective actions PA 1400 Series Next Gen Firewall Hardware Reference 45 2022 Palo Alto Networks Inc ...

Page 46: ...PA 1400 Series Firewall Hardware Compliance Statements PA 1400 Series Next Gen Firewall Hardware Reference 46 2022 Palo Alto Networks Inc ...

Reviews: