Palo Alto PA-220 Hardware Reference Manual

Type
Hardware Reference Manual

Palo Alto PA-220 is a next-generation firewall that provides comprehensive security and networking capabilities for small and medium-sized businesses. With its powerful hardware and advanced software features, the PA-220 can protect your network from a wide range of threats, including viruses, malware, phishing attacks, and data breaches.

The PA-220 is easy to install and manage, and it can be deployed in a variety of environments, including on-premises, in the cloud, or as a hybrid solution. It offers a wide range of features, including:

  • Threat prevention: The PA-220 can identify and block a wide range of threats, including viruses, malware, phishing attacks, and data breaches. It uses a variety of techniques to detect and prevent threats, including signature-based detection, anomaly-based detection, and machine learning.

Palo Alto PA-220 is a next-generation firewall that provides comprehensive security and networking capabilities for small and medium-sized businesses. With its powerful hardware and advanced software features, the PA-220 can protect your network from a wide range of threats, including viruses, malware, phishing attacks, and data breaches.

The PA-220 is easy to install and manage, and it can be deployed in a variety of environments, including on-premises, in the cloud, or as a hybrid solution. It offers a wide range of features, including:

  • Threat prevention: The PA-220 can identify and block a wide range of threats, including viruses, malware, phishing attacks, and data breaches. It uses a variety of techniques to detect and prevent threats, including signature-based detection, anomaly-based detection, and machine learning.
PA220
NextGenFirewall
HardwareReference
Install the PA-220 Firewall
2PA220NextGenFirewallHardwareReference ©PaloAltoNetworks,Inc.
ContactInformation
CorporateHeadquarters:
PaloAltoNetworks
4401GreatAmericaParkway
SantaClara,CA95054
www.paloaltonetworks.com/company/contactsupport
AboutthisGuide
ThisguidedescribesthePA220nextgenerationfirewallhardware,providesinstructionsoninstallingthehardware,
describeshowtoperformmaintenanceprocedures,andprovidesproductspecifications.Thisguideisintendedfor
systemadministratorsresponsibleforinstallingandmaintainingaPA220firewall.AllPA220firewallsrun
PANOS®,apurposebuiltoperatingsystemwithextensivesecurityandnetworkingfunctionality.Foradditional
information,refertothefollowingresources:
Forinformationontheadditionalcapabilitiesandforinstructionsonconfiguringthefeaturesonthefirewall,
refertohttps://www.paloaltonetworks.com/documentation.
ForcapacityandperformanceinformationforallPaloAltoNetworksfirewalls,referto
https://www.paloaltonetworks.com/products/productselection.html.
Forfeature,capacity,andperformanceinformation,referto
https://www.paloaltonetworks.com/resources/datasheets.html.
Foraccesstotheknowledgebase,discussionforums,andvideos,refertohttps://live.paloaltonetworks.com.
Forinformationonsupportprogramsrefertohttps://www.paloaltonetworks.com/services/supportandfor
informationonhowtomanageyouraccountordevices,ortoopenasupportcase,referto
https://www.paloaltonetworks.com/company/contactsupport.
ForthemostcurrentPANOSandPanoramareleasenotes,refertotheTechnicalDocumentationPortaland
selectthereleaseversionthatisinstalledonyourfirewallorPanoramaserver.
ForinformationonthesupportedOSreleasesbymodel,referto
https://www.paloaltonetworks.com/documentation/global/compatibilitymatrix.
FordetailsonthePaloAltoNetworksReturnMaterialAuthorization(RMA)processandpolicy,referto
https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/support/rmaprocesspolicy.pdf.
Toprovidefeedbackonthedocumentation,pleasewritetousat:[email protected].
PaloAltoNetworks,Inc.
www.paloaltonetworks.com
©2017PaloAltoNetworks,Inc.PaloAltoNetworksisaregisteredtrademarkofPaloAltoNetworks.Alistofourtrademarkscanbefound
at
https://www.paloaltonetworks.com/company/trademarks.html
.Allothermarksmentionedhereinmaybetrademarksoftheir
respectivecompanies.
RevisionDate:October16,2017
©PaloAltoNetworks,Inc. PA220NextGenFirewallHardwareReference13
InstallthePA220Firewall
ThePA220nextgenerationfirewallshipswiththehardwarerequiredtoinstallthefirewallonaflatsurface
oronawall.YoucanalsoorderarackmountkittoInstallthePA220Firewallina19”EquipmentRack.
InstallthePA220FirewallonaFlatSurface
InstallthePA220FirewallonaWall
InstallthePA220Firewallina19”EquipmentRack
Copyright © 2007-2017 Palo Alto Networks
14PA220NextGenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA220FirewallonaFlatSurface InstallthePA220Firewall
InstallthePA220FirewallonaFlatSurface
Attachtherubberpadstotherecessedcirclesonthebottomofthefirewallandthenplacethefirewallona
flatstablesurface.
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA220NextGenFirewallHardwareReference15
InstallthePA220Firewall InstallthePA220FirewallonaWall
InstallthePA220FirewallonaWall
InstallaPA220firewallonadrywallorplywoodwallusingthewallmountkitasdescribeinthefollowing
procedure.
InstallthePA220FirewallonaWall
Step1Ifthefourrubberpadsareinstalledonthebottomofthefirewall,removethem.
Step2Markthreelocationsonthewallthatlineupwiththewallmountholesonthebottomofthefirewall.
Toensurethewallmountscrewslineupwiththefirewallmountholes,usethePA220QuickStart
Guidethatshipswiththefirewallasatemplate.IfyoudonothaveacopyoftheQuickStart,
downloadandprintit.Whenprinting,selectlandscapeandactualsizeintheprintoptionstoensure
thescrewholemarkerslineupcorrectly.
Ensuretherearenobuildingservices(water,gas,orwiring)behindthewallwhereyouintendto
installthefirewall.
Step3Usea#1Phillipsheadscrewdrivertoinstalltheappropriatescrewsintoeachofthethreemarkedlocations:
Drywall—Pressadrywallanchorslightlyintothecenterofatemplatemark.Thenuseyourscrewdriverto
applypressurewhileturningtheanchorclockwiseuntilthesurfaceoftheanchorisflushwiththewall.
Afterthedrywallanchorissecure,installa1.25”anchorscrewintotheanchoruntilthebottomofthe
screwheadprotrudes1/4”(.6cm)fromthewall.Repeatthisstepfortheothertwoscrewlocationsunless
eitherislocatedoverwood,inwhichcase,usea.75”woodscrewinsteadofadrywallanchorandscrew.
Plywoodwall—Useyourscrewdrivertoinserta.75”woodscrewintothecenterofeachtemplatemark
thatislocatedoverwooduntilthebottomofthescrewheadsprotrude1/4”(.6cm)fromthewall.
Copyright © 2007-2017 Palo Alto Networks
16PA220NextGenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA220FirewallonaWall InstallthePA220Firewall
Step4Alignthethreeholesonthebottomofthefirewallwiththethreescrewsonthewallandhangthefirewallon
thescrews.Makesurethefirewallissecurelyconnectedtoeachofthethreescrewsbeforeyouletgo.
InstallthePA220FirewallonaWall(Continued)
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA220NextGenFirewallHardwareReference17
InstallthePA220Firewall InstallthePA220FirewallonaWall
Step5InstallthepoweradapterinthepoweradapterwallmountbracketusingtheVelcrostrapandcabletie.Make
suretoalignthecabletiewiththenotchesinthebrackettopreventthepowercordfromfallingout.
Afteryousecurethepoweradaptertothebracket,mountthebracketnexttothefirewallusingwoodor
drywallscrewsasappropriate.Youcaninstallanoptionalsecondpoweradapternexttothefirstpower
adapter.
Connectthesecondpoweradapterthroughadifferentcircuitbreakertoprovidepowerredundancy
andallowforelectricalcircuitmaintenance.
ThefollowingimageshowsacompletedinstallationforaPA220firewallwithonlyasinglepoweradapter.
InstallthePA220FirewallonaWall(Continued)
Copyright © 2007-2017 Palo Alto Networks
18PA220NextGenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA220Firewallina19”EquipmentRack InstallthePA220Firewall
InstallthePA220Firewallina19”EquipmentRack
ThePA220firewalloneunit(1U)racktraykit(PANPA220RACKTRAY)enablesyoutoinstalloneortwo
PA220firewallsina19"equipmentrack.Theinstallationhardware(screwsandbrackets)fortheleftside
ofthetrayarecontainedinbagsandtheinstallationhardwarefortherightsideofthetrayarepreinstalled.
Thisenablesyoutostoretherightsidehardwareinthetray(forfutureuse)ifyouareinstallingonlyone
firewall.
Toeaseinstallation,firstinstallthefirewall(s)intheracktrayandtheninstalltheassembledracktray
intotheequipmentrack.
InstallthePA220Firewallina19”EquipmentRack
Step1Attachoneracktraybrackettoeachsideofthefirewallusingtwo440x1/4”screwsforeachbracket.The
bracketsarelabeledleftandrightasshownintheillustration.
Step2Attachthepoweradapterbrackettothebackofthefirewallusingtwo440x1/4screws.
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA220NextGenFirewallHardwareReference19
InstallthePA220Firewall InstallthePA220Firewallina19”EquipmentRack
Step3InstallthePA220poweradapterinthepoweradapterbracketandsecureitwiththeVelcrostrap.(Optional)
Installasecondpoweradapterforredundancy.
InstallthePA220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
20PA220NextGenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA220Firewallina19”EquipmentRack InstallthePA220Firewall
Step4Slidethefirewall(withpoweradapterbracket)intotheracktrayandattachtheracktraybracketstotherack
trayusingone440x1/4”screwforeachbracket.
InstallthePA220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA220NextGenFirewallHardwareReference21
InstallthePA220Firewall InstallthePA220Firewallina19”EquipmentRack
Step5(Optional)InstallasecondPA220firewallintotherightsideoftheracktray:
Firstremovethepreinstalledracktrayinstallationhardwareandsetasidethishardwareforusewhen
youinstallthesecondfirewall.
1.Removeone440x1/4”screw(locatedoneachsideofthefrontcover)fromeachracktraybracketto
detachtheracktrayinstallationhardwarefromtheracktray.
2.Slidetheemptyracktrayinstallationhardwareassemblyoutoftheequipmentracktray.
3.Removethetwoscrewsthatsecurethefrontcovertothepoweradapterbracket.
4.Removethetwoscrewsfromeachfirewallracktraybracketandremovethebracketsfromthefrontcover.
Storethefrontcoverforfutureuse.
5.Installtheracktrayhardwareforthesecondfirewall(Step 1throughStep 4)andtheninstallitintheright
sideoftheracktray.
InstallthePA220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
22PA220NextGenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA220Firewallina19”EquipmentRack InstallthePA220Firewall
Step6(Fourpostrackinstallationonly)Installtheoptionalfourpostrackkit(PANPA1RURACK4)toprovide
additionalsupporttothebackoftheracktray.Firstattachonerackmountrailtoeachsideofthefirewall
usingtwo#632x5/16”screwsforeachrailandtorqueto9inlbs(youwillcompletetheinstallationafter
youinstalltheracktrayintherackasdescribedinthenextstep).
Step7Withthehelpofanotherperson,holdtheassembledPA220firewallracktrayinplaceintheequipmentrack
andsecuretheracktraybracketstothefrontrackpostsusinga#2Phillipsheadscrewdriver.Usethe
appropriatescrews(#1032x3/4”or#1224x3/4”)foryourrackandtorqueto25inlbs.Usecagenutsto
securethescrewsiftherackhassquareholes.
InstallthePA220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
©PaloAltoNetworks,Inc. PA220NextGenFirewallHardwareReference23
InstallthePA220Firewall InstallthePA220Firewallina19”EquipmentRack
Step8(Fourpostrackinstallationonly)Ifyouinstalledtheoptionalfourpostrackkit,completetheinstallationyou
startedinStep 6.Slideonebackrackmountbracketintoeachofthetwopreviouslyinstalledrackmountrails
andsecurethebracketstothebackrackpostsusingtheappropriatescrewsforyourrack(#1032x3/4”or
#1224x1/2”)andtorqueto25inlbs.Usecagenutstosecurethescrewsiftherackhassquareholes.
InstallthePA220Firewallina19”EquipmentRack(Continued)
Copyright © 2007-2017 Palo Alto Networks
24PA220NextGenFirewallHardwareReference ©PaloAltoNetworks,Inc.
InstallthePA220Firewallina19”EquipmentRack InstallthePA220Firewall
Copyright © 2007-2017 Palo Alto Networks
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14

Palo Alto PA-220 Hardware Reference Manual

Type
Hardware Reference Manual

Palo Alto PA-220 is a next-generation firewall that provides comprehensive security and networking capabilities for small and medium-sized businesses. With its powerful hardware and advanced software features, the PA-220 can protect your network from a wide range of threats, including viruses, malware, phishing attacks, and data breaches.

The PA-220 is easy to install and manage, and it can be deployed in a variety of environments, including on-premises, in the cloud, or as a hybrid solution. It offers a wide range of features, including:

  • Threat prevention: The PA-220 can identify and block a wide range of threats, including viruses, malware, phishing attacks, and data breaches. It uses a variety of techniques to detect and prevent threats, including signature-based detection, anomaly-based detection, and machine learning.

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI