2 •PA‐220Next‐GenFirewallHardwareReference ©PaloAltoNetworks,Inc.
ContactInformation
CorporateHeadquarters:
PaloAltoNetworks
4401GreatAmericaParkway
SantaClara,CA95054
www.paloaltonetworks.com/company/contact‐support
AboutthisGuide
ThisguidedescribesthePA‐220next‐generationfirewallhardware,providesinstructionsoninstallingthehardware,
describeshowtoperformmaintenanceprocedures,andprovidesproductspecifications.Thisguideisintendedfor
systemadministratorsresponsibleforinstallingandmaintainingaPA‐220firewall.AllPA‐220firewallsrun
PAN‐OS®,apurpose‐builtoperatingsystemwithextensivesecurityandnetworkingfunctionality.Foradditional
information,refertothefollowingresources:
Forinformationontheadditionalcapabilitiesandforinstructionsonconfiguringthefeaturesonthefirewall,
refertohttps://www.paloaltonetworks.com/documentation.
ForcapacityandperformanceinformationforallPaloAltoNetworksfirewalls,referto
https://www.paloaltonetworks.com/products/product‐selection.html.
Forfeature,capacity,andperformanceinformation,referto
https://www.paloaltonetworks.com/resources/datasheets.html.
Foraccesstotheknowledgebase,discussionforums,andvideos,refertohttps://live.paloaltonetworks.com.
Forinformationonsupportprogramsrefertohttps://www.paloaltonetworks.com/services/supportandfor
informationonhowtomanageyouraccountordevices,ortoopenasupportcase,referto
https://www.paloaltonetworks.com/company/contact‐support.
ForthemostcurrentPAN‐OSandPanoramareleasenotes,refertotheTechnicalDocumentationPortaland
selectthereleaseversionthatisinstalledonyourfirewallorPanoramaserver.
ForinformationonthesupportedOSreleasesbymodel,referto
https://www.paloaltonetworks.com/documentation/global/compatibility‐matrix.
FordetailsonthePaloAltoNetworksReturnMaterialAuthorization(RMA)processandpolicy,referto
https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/support/rma‐process‐policy.pdf.
Toprovidefeedbackonthedocumentation,pleasewritetousat:[email protected].
PaloAltoNetworks,Inc.
www.paloaltonetworks.com
©2017PaloAltoNetworks,Inc.PaloAltoNetworksisaregisteredtrademarkofPaloAltoNetworks.Alistofourtrademarkscanbefound
at
https://www.paloaltonetworks.com/company/trademarks.html
.Allothermarksmentionedhereinmaybetrademarksoftheir
respectivecompanies.
RevisionDate:October16,2017
©PaloAltoNetworks,Inc. PA‐220Next‐GenFirewallHardwareReference•13
InstallthePA‐220Firewall
ThePA‐220next‐generationfirewallshipswiththehardwarerequiredtoinstallthefirewallonaflatsurface
oronawall.YoucanalsoorderarackmountkittoInstallthePA‐220Firewallina19”EquipmentRack.
InstallthePA‐220FirewallonaFlatSurface
InstallthePA‐220FirewallonaWall
InstallthePA‐220Firewallina19”EquipmentRack
Copyright © 2007-2017 Palo Alto Networks
14•PA‐220Next‐GenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA‐220FirewallonaFlatSurface InstallthePA‐220Firewall
InstallthePA‐220FirewallonaFlatSurface
Attachtherubberpadstotherecessedcirclesonthebottomofthefirewallandthenplacethefirewallona
flatstablesurface.
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA‐220Next‐GenFirewallHardwareReference•15
InstallthePA‐220Firewall InstallthePA‐220FirewallonaWall
InstallthePA‐220FirewallonaWall
InstallaPA‐220firewallonadrywallorplywoodwallusingthewall‐mountkitasdescribeinthefollowing
procedure.
InstallthePA‐220FirewallonaWall
Step1Ifthefourrubberpadsareinstalledonthebottomofthefirewall,removethem.
Step2Markthreelocationsonthewallthatlineupwiththewallmountholesonthebottomofthefirewall.
Toensurethewallmountscrewslineupwiththefirewallmountholes,usethePA‐220QuickStart
Guidethatshipswiththefirewallasatemplate.IfyoudonothaveacopyoftheQuickStart,
downloadandprintit.Whenprinting,selectlandscapeandactualsizeintheprintoptionstoensure
thescrewholemarkerslineupcorrectly.
Ensuretherearenobuildingservices(water,gas,orwiring)behindthewallwhereyouintendto
installthefirewall.
Step3Usea#1Phillips‐headscrewdrivertoinstalltheappropriatescrewsintoeachofthethreemarkedlocations:
•Drywall—Pressadrywallanchorslightlyintothecenterofatemplatemark.Thenuseyourscrewdriverto
applypressurewhileturningtheanchorclockwiseuntilthesurfaceoftheanchorisflushwiththewall.
Afterthedrywallanchorissecure,installa1.25”anchorscrewintotheanchoruntilthebottomofthe
screwheadprotrudes1/4”(.6cm)fromthewall.Repeatthisstepfortheothertwoscrewlocationsunless
eitherislocatedoverwood,inwhichcase,usea.75”woodscrewinsteadofadrywallanchorandscrew.
•Plywoodwall—Useyourscrewdrivertoinserta.75”woodscrewintothecenterofeachtemplatemark
thatislocatedoverwooduntilthebottomofthescrewheadsprotrude1/4”(.6cm)fromthewall.
Copyright © 2007-2017 Palo Alto Networks
16•PA‐220Next‐GenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA‐220FirewallonaWall InstallthePA‐220Firewall
Step4Alignthethreeholesonthebottomofthefirewallwiththethreescrewsonthewallandhangthefirewallon
thescrews.Makesurethefirewallissecurelyconnectedtoeachofthethreescrewsbeforeyouletgo.
InstallthePA‐220FirewallonaWall(Continued)
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA‐220Next‐GenFirewallHardwareReference•17
InstallthePA‐220Firewall InstallthePA‐220FirewallonaWall
Step5Installthepoweradapterinthepoweradapterwall‐mountbracketusingtheVelcrostrapandcabletie.Make
suretoalignthecabletiewiththenotchesinthebrackettopreventthepowercordfromfallingout.
Afteryousecurethepoweradaptertothebracket,mountthebracketnexttothefirewallusingwoodor
drywallscrewsasappropriate.Youcaninstallanoptionalsecondpoweradapternexttothefirstpower
adapter.
Connectthesecondpoweradapterthroughadifferentcircuitbreakertoprovidepowerredundancy
andallowforelectricalcircuitmaintenance.
ThefollowingimageshowsacompletedinstallationforaPA‐220firewallwithonlyasinglepoweradapter.
InstallthePA‐220FirewallonaWall(Continued)
Copyright © 2007-2017 Palo Alto Networks
18•PA‐220Next‐GenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA‐220Firewallina19”EquipmentRack InstallthePA‐220Firewall
InstallthePA‐220Firewallina19”EquipmentRack
ThePA‐220firewallone‐unit(1U)racktraykit(PAN‐PA‐220‐RACKTRAY)enablesyoutoinstalloneortwo
PA‐220firewallsina19"equipmentrack.Theinstallationhardware(screwsandbrackets)fortheleftside
ofthetrayarecontainedinbagsandtheinstallationhardwarefortherightsideofthetrayarepre‐installed.
Thisenablesyoutostoretherightsidehardwareinthetray(forfutureuse)ifyouareinstallingonlyone
firewall.
Toeaseinstallation,firstinstallthefirewall(s)intheracktrayandtheninstalltheassembledracktray
intotheequipmentrack.
InstallthePA‐220Firewallina19”EquipmentRack
Step1Attachoneracktraybrackettoeachsideofthefirewallusingtwo4‐40x1/4”screwsforeachbracket.The
bracketsarelabeledleftandrightasshownintheillustration.
Step2Attachthepoweradapterbrackettothebackofthefirewallusingtwo4‐40x1/4”screws.
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA‐220Next‐GenFirewallHardwareReference•19
InstallthePA‐220Firewall InstallthePA‐220Firewallina19”EquipmentRack
Step3InstallthePA‐220poweradapterinthepoweradapterbracketandsecureitwiththeVelcrostrap.(Optional)
Installasecondpoweradapterforredundancy.
InstallthePA‐220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
20•PA‐220Next‐GenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA‐220Firewallina19”EquipmentRack InstallthePA‐220Firewall
Step4Slidethefirewall(withpoweradapterbracket)intotheracktrayandattachtheracktraybracketstotherack
trayusingone4‐40x1/4”screwforeachbracket.
InstallthePA‐220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA‐220Next‐GenFirewallHardwareReference•21
InstallthePA‐220Firewall InstallthePA‐220Firewallina19”EquipmentRack
Step5(Optional)InstallasecondPA‐220firewallintotherightsideoftheracktray:
Firstremovethepre‐installedracktrayinstallationhardwareandsetasidethishardwareforusewhen
youinstallthesecondfirewall.
1.Removeone4‐40x1/4”screw(locatedoneachsideofthefrontcover)fromeachracktraybracketto
detachtheracktrayinstallationhardwarefromtheracktray.
2.Slidetheemptyracktrayinstallationhardwareassemblyoutoftheequipmentracktray.
3.Removethetwoscrewsthatsecurethefrontcovertothepoweradapterbracket.
4.Removethetwoscrewsfromeachfirewallracktraybracketandremovethebracketsfromthefrontcover.
Storethefrontcoverforfutureuse.
5.Installtheracktrayhardwareforthesecondfirewall(Step 1throughStep 4)andtheninstallitintheright
sideoftheracktray.
InstallthePA‐220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
22•PA‐220Next‐GenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA‐220Firewallina19”EquipmentRack InstallthePA‐220Firewall
Step6(Four‐postrackinstallationonly)Installtheoptionalfour‐postrackkit(PAN‐PA‐1RU‐RACK4)toprovide
additionalsupporttothebackoftheracktray.Firstattachonerack‐mountrailtoeachsideofthefirewall
usingtwo#6‐32x5/16”screwsforeachrailandtorqueto9in‐lbs(youwillcompletetheinstallationafter
youinstalltheracktrayintherackasdescribedinthenextstep).
Step7Withthehelpofanotherperson,holdtheassembledPA‐220firewallracktrayinplaceintheequipmentrack
andsecuretheracktraybracketstothefrontrackpostsusinga#2Phillips‐headscrewdriver.Usethe
appropriatescrews(#10‐32x3/4”or#12‐24x3/4”)foryourrackandtorqueto25in‐lbs.Usecagenutsto
securethescrewsiftherackhassquareholes.
InstallthePA‐220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA‐220Next‐GenFirewallHardwareReference•23
InstallthePA‐220Firewall InstallthePA‐220Firewallina19”EquipmentRack
Step8(Four‐postrackinstallationonly)Ifyouinstalledtheoptionalfour‐postrackkit,completetheinstallationyou
startedinStep 6.Slideonebackrack‐mountbracketintoeachofthetwopreviouslyinstalledrack‐mountrails
andsecurethebracketstotheback‐rackpostsusingtheappropriatescrewsforyourrack(#10‐32x3/4”or
#12‐24x1/2”)andtorqueto25in‐lbs.Usecagenutstosecurethescrewsiftherackhassquareholes.
InstallthePA‐220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
/
