PaloAlto Networks PA-5000 Series Hardware Reference Manual

Brand: PaloAlto Networks

Model: PA-5000 Series

Type: Hardware Reference Manual

PaloAlto Networks PA-5000 Series is a high-performance firewall designed to protect your network from a variety of threats. With its powerful hardware and advanced software features, the PA-5000 Series can provide comprehensive protection for businesses of all sizes.

Some of the key features of the PA-5000 Series include:

High-speed performance: The PA-5000 Series can process up to 10 Gbps of traffic, making it ideal for even the most demanding networks.
Advanced security features: The PA-5000 Series includes a variety of advanced security features, such as intrusion prevention, anti-malware, and URL filtering. These features work together to protect your network from a wide range of threats.

Some of the key features of the PA-5000 Series include:

High-speed performance: The PA-5000 Series can process up to 10 Gbps of traffic, making it ideal for even the most demanding networks.
Advanced security features: The PA-5000 Series includes a variety of advanced security features, such as intrusion prevention, anti-malware, and URL filtering. These features work together to protect your network from a wide range of threats.

PA-5000 Series 

Hardware Reference Guide

11/30/10 Third/Final Review Draft - Palo Alto Networks

COMPANY CONFIDENTIAL

Palo Alto Networks, Inc.

www.paloaltonetworks.com

Palo Alto Networks and PAN-OS are trademarks of Palo Alto Networks, Inc. All other trademarks are the property

of their respective owners.

Part number: 810-000056-00E

Palo Alto Networks Table of Contents • 5

April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL

Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Organization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Typographical Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Notes, Cautions, and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Obtaining More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Chapter 1 

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Chapter 2 

Installing the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Equipment Rack Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Connecting Cables to the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Connecting Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Connecting a DC Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Chapter 3 

Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Cautions and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Replacing a Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Replacing an AC Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Replacing a DC Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Replacing a Hard Disk or Solid State Drive . . . . . . . . . . . . . . . . . . . . . . . . . 24

Choosing System Options for the Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Replacing the Fan Tray and Air Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Replacing the Air Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Interpreting the Device LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Table of Contents

6 • Table of Contents Palo Alto Networks

Interpreting the Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Chapter 4 

Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Interface Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Chapter 5 

Compliance Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

NEBS Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

VCCI Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

BSMI EMC Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Palo Alto Networks Preface • 7

April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL

Preface

This preface contains the following sections:

•“About This Guide” in the next section

•“Organization” on page 7

•“Typographical Conventions” on page 8

•“Notes, Cautions, and Warnings” on page 8

•“Related Documentation” on page 9

•“Obtaining More Information” on page 9

•“Technical Support” on page 9

About This Guide

This guide describes the PA-5000 Series firewall hardware, provides instructions on installing the

hardware and performing maintenance procedures, and provides product specifications. This guide is

intended for system administrators responsible for installing and maintaining the PA-5000 Series.

All PA-5000 Series run PAN-OS, a purpose-built operating system with extensive functionality. Please

refer to the PAN-OS Command Line Interface Reference Guide and Palo Alto Networks Administrator’s

Guide for information on using PAN-OS.

Organization

This guide is organized as follows:

•Chapter 1, “Overview”—Describes the features of the front and back panel of the 

PA-5000 Series.

•Chapter 2, “Installing the Hardware”—Describes how to install the PA-5000 Series hardware.

•Chapter 3, “Maintaining the Hardware”—Describes how to replace power supplies, fan tray, and

air filter. This chapter also describes how to interpret the device and port LEDs.

•Chapter 4, “Specifications”—Provides specifications for the PA-5000 Series.

•Chapter 5, “Compliance Statement”—Presents the compliance statement for the Voluntary Control

Council for Interference by Information Technology Equipment (VCCI).

Typographical Conventions

8 • Preface Palo Alto Networks

Typographical Conventions

This guide uses the following typographical conventions for special terms and instructions.

Notes, Cautions, and Warnings

This guide uses the following symbols for notes, cautions, and warnings.

Convention Meaning Example

boldface Names of commands,

keywords, and

selectable items in the

web interface

Use the configure command to enter Configuration mode.

italics Name of variables,

files, configuration

elements, directories,

or Uniform Resource

Locators (URLs)

The address of the Palo Alto Networks home page is 

http://www.paloaltonetworks.com.

element2 is a required variable for the move command.

courier

font Command syntax, code

examples, and screen

output

The show ntp command yields this output:

admin@PA-HDF> show ntp

NTP state:

NTP synched to 10.44.2.10

NTP server 10.43.2.10 connected: True

NTP server 10.44.2.10 connected: True

courier

bold font Text that you enter at

the command prompt Enter the following command to exit from the current PAN-OS

CLI level:

# exit

Symbol Description

NOTE

Indicates helpful suggestions or supplementary information.

CAUTION

Indicates information about which the reader should be careful to avoid data loss or

equipment failure.

WARNING

Indicates potential danger that could involve bodily injury.

Palo Alto Networks Preface • 9

Related Documentation

The following additional documentation is provided with the firewall:

•PA-5000 Series Quick Start

•Palo Alto Networks License and Warranty

You can find other related documentation in the Technical Documentation section at

http://support.paloaltonetworks.com.

Obtaining More Information

To obtain more information about the PA-5000 Series:

•Palo Alto Networks website—Go to http://www.paloaltonetworks.com.

•Online help—Click Help in the upper right corner of the GUI to access the online help system.

Technical Support

For technical support, use the following methods:

•Go to the KnowledgePoint online support community at http://live.paloaltonetworks.com

•Go to http://support.paloaltonetworks.com.

•Call 1-866-898-9087 (U.S, Canada, and Mexico), +1.408.738.7799 (outside North America)

•Email us at: [email protected].

Technical Support

10 • Preface Palo Alto Networks

Palo Alto Networks Overview • 11

April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL

Chapter 1 

Overview

This chapter describes the features of the front and back panel of the PA-5000 Series firewall. For more

information, refer to the following topics:

•“Front Panel” on page 12

•“Back Panel” on page 14

Front Panel

12 • Overview Palo Alto Networks

Front Panel

Figure 1 shows the front panel of the PA-5060 and PA-5050 and Table 1 describes the front panel

features.

Figure 1. PA-5060 and PA-5050 Front Panel

Table 1. PA-5060 and PA-5050 Front Panel Features

Item Description

Ethernet ports 12 RJ-45 10/100/1000 ports for network traffic.

SFP ports Eight Small Form-Factor Pluggable (SFP) ports for network traffic.

SFP+ ports Four SFP+ ports for network traffic.

Management port One RJ-45 port to access the device management interfaces through an

Ethernet interface.

Management console port One RJ-45 port for connecting a serial console.

High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and synchronization.

USB ports Two USB ports for future use.

LED dashboard Eight LEDs indicating system status. Refer to “Interpreting the Device

LEDs” on page 28 for LED definitions.

1357

2468

911

10 12

13 15 17 19

14 16 18 20

21 23

22 24 HA2

PWR

STS

TEMP

ALARM

FANS

PWR 1

PWR 2

HA1MGT CONSOLE

USB

PA-5060

Ethernet

ports

Management

console port

Management

port

SFP

ports

port 2

port 1

LEDs

USB

ports

SFP+

ports

Palo Alto Networks Overview • 13

Front Panel

Figure 2 shows the front panel of the PA-5020 Series and Table 2 describes the front panel features.

Figure 2. PA-5020 Front Panel

Table 2. PA-5020 Front Panel Features

Item Description

Ethernet ports 12 RJ-45 10/100/1000 ports for network traffic.

SFP ports Eight Small Form-Factor Pluggable (SFP) ports for network traffic.

Management ports One RJ-45 port to access the device management interfaces through an

Ethernet interface.

Management console port One RJ-45 port for connecting a serial console.

High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and synchronization.

USB ports Two USB ports for future use.

LED dashboard Eight LEDs indicating system status. Refer to “Interpreting the Device

LEDs” on page 28 for LED definitions.

1357

2468

911

10 12

13 15 17 19

14 16 18 20 HA2

PWR

STS

TEMP

ALARM

FANS

PWR 1

PWR 2

HA1MGT CONSOLE

USB

PA-5060

Ethernet

ports

Management

console port

Management

port

SFP

ports

port 2

port 1

LEDs

USB

ports

Back Panel

14 • Overview Palo Alto Networks

Back Panel

Figure 3 shows the back panel of the PA-5000 Series and Table 3 describes the back panel features.

Figure 3. Back Panel

The PA-5000 Series does not have a power button. The device is powered by plugging power cords into

the power supplies. Refer to “Replacing a Power Supply” on page 21 for instructions on replacing the

power supplies.

Table 3. Back Panel Features

Item Description

Power supplies 2 redundant, hot-swappable power supplies.

Fan tray Removable fan tray and filter.

Hard disk drive bay Hard drive bay for 2 x 2.5-inch hard disk drives.

Power

supplies

Hard drive bayFan tray

Palo Alto Networks Installing the Hardware • 15

April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL

Chapter 2 

Installing the Hardware

This chapter describes how to install the PA-5000 Series firewall. For more information, refer to the

following topics:

•“Before You Begin” in the next section

•“Equipment Rack Installation” on page 16

•“Connecting Cables to the Device” on page 17

•“Connecting Power” on page 19

Before You Begin

•It is recommended that two people be available to mount the PA-5000 Series in a 19-inch rack.

•Have a Phillips head screwdriver available.

•Verify that the intended location has adequate air circulation and meets the temperature

requirements. Refer to “Environmental Specifications” on page 33.

•Allow clear space on both sides of the device.

•Unpack the device.

•Verify that power is not connected to the device.

Equipment Rack Installation

16 • Installing the Hardware Palo Alto Networks

Equipment Rack Installation

Figure 4 illustrates how rack mounting brackets are attached to the PA-5000 Series. You can attach the

brackets using the holes at the front or the midpoint of the unit.

Figure 4. Attaching Rack Mounting Brackets

The following safety guidelines apply to rack installation:

•Elevated ambient operating temperature—If the PA-5000 Series is installed in a closed or

multi-unit rack assembly, the ambient operating temperature of the rack environment may be

greater than the ambient room temperature. Verify that the ambient temperature of the rack

assembly meets the maximum rated ambient temperature requirements listed in “Environmental

Specifications” on page 33.

•Reduced air flow—Ensure that the airflow required for safe device operation is not compromised

by the rack installation.

•Mechanical loading—Ensure that the rack-mounted device does not cause hazardous conditions

due to uneven mechanical loading.

CAUTION: Equipment may be affected by electrostatic discharge. ESD reduction

procedures (wearing a wrist strap) shall be implemented during the installation and

maintenance of equipment.

CAUTION: Shielded interface cables which are grounded shall be used to ensure

agency compliance with electromagnetic emissions (EMC).

WARNING: Laser radiation exposure should be avoided. Cover any unused fiber

optical ports. Do not look directly at exposed fiber optical transmitters or cables.

1 3 5 7 9 11

2 4 6 8 10 12

13 15 17 19 21 23

14 16 18 20 22 24

Palo Alto Networks Installing the Hardware • 17

Connecting Cables to the Device

•Circuit overloading—Ensure that the circuit that supplies power to the device is sufficiently rated

to avoid circuit overloading or excess load on supply wiring. Refer to “Electrical Specifications”

on page 32.

•Reliable earthing—Maintain reliable earthing of rack mounted equipment. Pay special attention

to supply connections other than direct connections to the branch circuit (such as use of power

strips).

To install the PA-5000 Series in a grounded 19-inch rack:

1. Screw the rack mounting brackets onto the front or midpoint of the unit using a Phillips head

screwdriver.

2. Lift the device and position it in the rack. It is recommended that two people perform this function.

3. Align the mounting holes on the side of the device with holes in the rack rail. Make sure that rack

rail holes are selected so that the PA-5000 Series is level.

4. Insert mounting screws into the aligned holes. Tighten with a Phillips head screwdriver.

Connecting Cables to the Device

Figure 5 shows the cable connections of the PA-5060 and PA-5050. Refer to Table 1 for descriptions of

the front panel interfaces.

Figure 5. Cable Connections for the PA-5060 and PA-5050

1 3 5 7 9 11 13 15 17 19 21 23

2 4 6 8 10 12 14 16 18 20 22 24

USB

SFP

HA2

HA1 Console

Management

Network

Connecting Cables to the Device

18 • Installing the Hardware Palo Alto Networks

Figure 6 shows the cable connections of the PA-5020. Refer to Table 2 for descriptions of the front

panel interfaces.

Figure 6. Cable Connections for the PA-5020

LASER PRODUCT WARNING:



PRODUCT COMPLIES WITH FDA RULE 21 CFR SUBCHAPTER J IN EFFECT AT DATE OF

MANUFACTURE



CLASS 1: (Cl. 5.2 of IEC 60825-1)



CLASS 1 LASER PRODUCT

1 3 5 7 9 11 13 15 17 19

2 4 6 8 10 12 14 16 18 20

USB

SFP

HA2

HA1 Console

Management

Network

Palo Alto Networks Installing the Hardware • 19

Connecting Power

Figure 7 shows the AC power connections for the PA-5000 Series.

Figure 7. Power Connection for the PA-5000 Series

To power up the PA-5000 Series, attach a power cable to each of the power supplies and plug each into

a grounded wall outlet. The device has no power switch and is automatically powered when one or more

power cables are connected to the device and to an AC power source.

Connecting a DC Power Supply

Figure 8 shows the DC power connections for the PA-5000 Series.

DC Power Safety

WARNING: You must shut off the electric current to the DC feed wires before

connecting or disconnecting the wires to the power supplies.

DC Power Safety

CAUTION: All devices with DC power supplies are intended for installation in

restricted access areas only. A restricted access area is where access can be gained

only by service personnel through the use of a special tool, lock and key, or other

means of security, and is controlled by the authority responsible for the location.

CAUTION: For the DC input circuit, make sure there is a 15 amp circuit

breaker, minimum 48Vdc, double pole, on the input to the power supply. The input

wiring for connection to the product should be Listed copper wire, 14 American

Wire Gauge (AWG), marked VW-1, and rated minimum 90 C.

CAUTION: For a DC system, use a grounding wire of at least 14 American Wire

Gauge (AWG). The 14 AWG wire should be attached to an agency-approved crimp

connector (Tyco 34120 or certified Lug), crimped with the proper crimping tool and

attached to the protective grounding lug, using a size #8-32 nut and a star washer

(supplied), on the chassis with the other end connected to the building ground.

Torque the nut to 15 in.-lbs. Do not over tighten.

Connecting Power

20 • Installing the Hardware Palo Alto Networks

Wind the power wires around the screws and tighten to secure. The -48VDC connection is on the left

and the 0VDC connection is on the right, as labeled when facing the power supply. Turn on the electric

current to the DC feed.

Figure 8. DC Power Supply - Attachment

Important notes on connecting the DC power supply

•This equipment is designed to permit the connection of the earthed conductor of the DC power

supply circuit to the earthing conductor at the equipment.

•If this connection is made, all of the following conditions must be met:

– This equipment shall be connected directly to the DC supply system earthing electrode

conductor or to a bonding jumper from an earthing terminal bar or bus to which the DC supply

system earthing electrode conductor is connected.

– This equipment shall be located in the same immediate area (such as adjacent cabinets) as any

other equipment that has a connection between the earthed conductor of the same DC supply

circuit and the earthing conductor, and also the point of earthing of the DC system.

– The DC system shall not be earthed elsewhere.

– The DC supply source shall be located within the same premises as this equipment.

– Switching or disconnecting devices shall not be in the earthed circuit conductor between the DC

source and the point of connection of the earthing electrode conductor.

Palo Alto Networks Maintaining the Hardware • 21

April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL

Chapter 3 

Maintaining the Hardware

This chapter describes how to replace power supplies, interpret LEDs, and troubleshoot hardware

problems. For more information, refer to the following topics:

•“Cautions and Warnings” in the next section

•“Replacing a Power Supply” on page 21

•“Replacing a Hard Disk or Solid State Drive” on page 24

•“Replacing the Fan Tray and Air Filter” on page 26

•“Interpreting the Device LEDs” on page 28

•“Interpreting the Port LEDs” on page 30

Cautions and Warnings

Replacing a Power Supply

The PA-5000 Series firewall has two hot-swappable AC or DC power supplies. Both power supplies

should be connected during normal operations. If the system detects a loss of power, either due to loss

of power connection, failure of the power supply, or incorrect input voltage being supplied, the power

supply LED located above the power plug will go off and the front panel PWR LED and ALARM LED

turn red. If enabled, an audible alert will be sound until both power supplies are operational. The audible

alert is disabled by default and can be enabled by running set system setting power-

supply audible-alarm enable yes.

WARNING: To reduce the risk of electric shock, disconnect all power supply cords

before servicing the system (the system might have more than one).

WARNING: Risk of explosion if battery is replaced by an incorrect type. Dispose of used

batteries according to the battery manufacturer’s instructions.

Replacing a Power Supply

22 • Maintaining the Hardware Palo Alto Networks

Replacing an AC Power Supply

To replace the AC PWR1 or PWR2 power supply:

1. While the PA-5000 Series is running, unplug the power cord from the power supply that you need

to replace.

2. Push the lever to the right and use the handle to slide the power supply out of the device, as shown

in Figure 9.

3. Slide a replacement power supply into the device.

4. Connect the power cable to the power supply and to an AC power source.

Figure 9. AC Power Supply Replacement

Note: If enabled, an audible alert will be sound until two power supplies are

installed and operational. The audible alert is disabled by default and can be

enabled by running set system setting power-supply audible-

alarm enable yes.

Page is loading ...

PaloAlto Networks PA-5000 Series Hardware Reference Manual

Brand: PaloAlto Networks

Model: PA-5000 Series

Type: Hardware Reference Manual

Some of the key features of the PA-5000 Series include:

High-speed performance: The PA-5000 Series can process up to 10 Gbps of traffic, making it ideal for even the most demanding networks.
Advanced security features: The PA-5000 Series includes a variety of advanced security features, such as intrusion prevention, anti-malware, and URL filtering. These features work together to protect your network from a wide range of threats.

Download PDF

report

PaloAlto Networks PA-5000 Series Hardware Reference Manual

PaloAlto Networks PA-5000 Series Hardware Reference Manual

Related papers

Other documents