PaloAlto Networks PA-3200 Series Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. PA-3200 Series
  6. Hardware reference manual

PaloAlto Networks PA-3200 Series Hardware Reference Manual

Next-gen firewall
Hide thumbs Also See for PA-3200 Series:
Table of Contents

Advertisement

Quick Links

PA-3200 Series Next-Gen Firewall
Hardware Reference
paloaltonetworks.com/documentation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PA-3200 Series and is the answer not in the manual?

Questions and answers

Related Manuals for PaloAlto Networks PA-3200 Series

Summary of Contents for PaloAlto Networks PA-3200 Series

  • Page 1 PA-3200 Series Next-Gen Firewall Hardware Reference paloaltonetworks.com/documentation...
  • Page 2 2018-2018 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo © Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised April 30, 2018 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE |...

  • Page 3: Table Of Contents

    Install the PA-3200 Series Firewall in an Equipment Rack..... 19 Install the PA-3200 Series Firewall Using the Rack-Mount Brackets.......... 21 Install the PA-3200 Series Firewall Using the Four-Post Rack Kit..........23 Connect Power to a PA-3200 Series Firewall........... 27 Connect AC Power to a PA-3200 Series Firewall................29 Connect DC Power to a PA-3200 Series Firewall................31...
  • Page 4 TABLE OF CONTENTS...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next-generation ® firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Tamper Proof Statement >...
  • Page 6 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2018 Palo Alto Networks, Inc. ©...

  • Page 7: Tamper Proof Statement

    • The integrity of the warranty label on the firewall or appliance is not compromised. (PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and therefore do not include a warranty label on the firewall. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2018 Palo Alto Networks, Inc. ©...

  • Page 8: Third-Party Component Support

    Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2018 Palo Alto Networks, Inc. ©...

  • Page 9: Product Safety Warnings

    • Le dispositif de protection doit être raccordé à la terre et un câble Ethernet blindé de catégorie 5E ou supérieure doit être utilisé. Caractéristiques techniques: PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2018 Palo Alto Networks, Inc. ©...
  • Page 10 • The DC battery return wiring on the firewall must be connected as an isolated DC (DC-I) return. French Translation: Le câblage de retour de batterie c.c. sur le pare-feu doit être raccordé en tant que retour c.c. isolé (CC-I). PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2018 Palo Alto Networks, Inc. ©...
  • Page 11 • A suitably-rated DC mains disconnect device must be provided as part of the building installation. French Translation: Un interrupteur d'isolement suffisant doit être fourni pendant l'installation du bâtiment. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin 2018 Palo Alto Networks, Inc. ©...
  • Page 12 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Before You Begin...

  • Page 13: Pa-3200 Series Firewall Overview

    First Supported Software Release: PAN-OS ® The following topics describe the hardware features of PA-3200 Series firewalls. To view or compare performance and capacity information, refer to the Product Selection tool. > PA-3200 Series Front Panel...
  • Page 14 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Overview 2018 Palo Alto Networks, Inc. ©...

  • Page 15: Pa-3200 Series Front Panel

    PA-3200 Series Front Panel The following image shows the front panel of the PA-3200 Series firewall and the table describes each front panel component. The only differences between the PA-3220, PA-3250, and PA-3260 (shown) front panels are the model name and the Ethernet ports, as described in the table.
  • Page 16 USB-to-serial converter. Use the following settings to configure your terminal emulation software to connect to the console port: PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Overview 2018 Palo Alto Networks, Inc. ©...
  • Page 17 Mac or Linux computer. LED status indicators Eight LEDs that indicate the status of the firewall hardware components (see Interpret the PA-3200 Series Status LEDs). PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Overview 2018 Palo Alto Networks, Inc. ©...

  • Page 18: Pa-3200 Series Back Panel

    PA-3200 Series Back Panel The following image shows the back panel of the PA-3200 Series firewall and the table describes each back-panel component. The PA-3220, PA-3250, and PA-3260 back-panel components are identical. Item Component Description System drive One 240GB solid-state drive (SSD) used to store the PAN-OS system files, system logs, and network traffic logs.

  • Page 19: Install The Pa-3200 Series Firewall In An Equipment Rack

    Install the PA-3200 Series Firewall in an Equipment Rack The PA-3200 Series next-generation firewall ships with two rack-mount brackets for installation in a two-post or four-post 19” equipment rack. If you install the firewall in a four- post rack, you can purchase and install the optional four-post rack kit to secure the firewall to the back rack posts for additional support.
  • Page 20 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-3200 Series Firewall in an Equipment Rack 2018 Palo Alto Networks, Inc. ©...

  • Page 21: Install The Pa-3200 Series Firewall Using The Rack-Mount Brackets

    Install the PA-3200 Series Firewall Using the Rack-Mount Brackets The following procedure describes how to install the PA-3200 Series firewall in a two-post or four-post equipment rack using the front rack-mount brackets that ship with the firewall. If you install the firewall in...
  • Page 22 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-3200 Series Firewall in an Equipment Rack 2018 Palo Alto Networks, Inc. ©...

  • Page 23: Install The Pa-3200 Series Firewall Using The Four-Post Rack Kit

    Install the PA-3200 Series Firewall Using the Four-Post Rack Kit The following procedure describes how to install the PA-3200 Series firewall in a 19” four-post equipment rack using the optional four-post rack kit (PAN-PA-2RU-RACK4). This kit is designed to provide additional support for the back of the firewall.
  • Page 24 (#10-32 x 3/4” or #12-24 x 1/2” screws) and torque each screw to 25 in-lbs. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-3200 Series Firewall in an Equipment Rack 2018 Palo Alto Networks, Inc.
  • Page 25 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-3200 Series Firewall in an Equipment Rack 2018 Palo Alto Networks, Inc. ©...
  • Page 26 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Install the PA-3200 Series Firewall in an Equipment Rack...

  • Page 27: Connect Power To A Pa-3200 Series Firewall

    Connect Power to a PA-3200 Series Firewall PA-3200 Series firewalls have either two AC or two DC power supplies (the second power supply is for redundancy). Before you connect power, read the PA-3200 Series Electrical Specifications. > Connect AC Power to a PA-3200 Series Firewall...
  • Page 28 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-3200 Series Firewall 2018 Palo Alto Networks, Inc. ©...

  • Page 29: Connect Ac Power To A Pa-3200 Series Firewall

    Connect AC Power to a PA-3200 Series Firewall The following procedure describes how to connect AC power to a PA-3200 Series firewall with AC power supplies. The power configuration (AC or DC) can be changed in the field. However, you cannot install both an AC and DC power supply in the same firewall.
  • Page 30 Connect the second power cord through a different circuit breaker to provide power redundancy and to allow for electrical circuit maintenance. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-3200 Series Firewall 2018 Palo Alto Networks, Inc.

  • Page 31: Connect Dc Power To A Pa-3200 Series Firewall

    Connect DC Power to a PA-3200 Series Firewall The following procedure describes how to connect DC power to a PA-3200 Series firewall with DC power supplies. The power configuration (AC or DC) can be changed in the field. However, you cannot install both an AC and DC power supply in the same firewall.
  • Page 32 LEDs on the power supplies turn green, and the PWR LED and the power supply LEDs (PWR 1 and PWR 2) on the front of the firewall turns green. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Connect Power to a PA-3200 Series Firewall...

  • Page 33: Service The Pa-3200 Series Firewall

    Service the PA-3200 Series Firewall The following topics describe how to interpret the PA-3200 Series firewall status LEDs and how to replace the serviceable components. > Interpret the PA-3200 Series Status LEDs > Replace a PA-3200 Series Fan Tray > Replace a PA-3200 Series Power Supply...
  • Page 34 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc. ©...

  • Page 35: Interpret The Pa-3200 Series Status Leds

    Interpret the PA-3200 Series Status LEDs The following table describes how to interpret the status LEDs on a PA-3200 Series firewall. Description Front Panel LEDs PWR (Power) • Green—The firewall is powered on. • Off—The firewall is not powered on or an error occurred with the internal power system (for example, power is not within tolerance levels).
  • Page 36 • Green—The fan trays and all fans are operating normally. • Red—A fan in the fan tray failed (see Replace a PA-3200 Series Fan Tray). PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc. ©...

  • Page 37: Replace A Pa-3200 Series Fan Tray

    Replace a PA-3200 Series Fan Tray The PA-3200 Series firewalls have one fan tray with three fans. If one fan fails, the LED on the fan tray turns red and the firewall generates a system log. When this occurs, immediately replace the fan tray to avoid service interruption.
  • Page 38 DC circuit that is providing power to the firewall, wait at least five seconds, and then restore the power. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc. ©...

  • Page 39: Replace A Pa-3200 Series Power Supply

    Replace a PA-3200 Series Power Supply PA-3200 Series firewalls have either two AC or two DC power supplies (the second power supply is for redundancy). If one power supply fails, you can replace it without service interruption as described in the following procedures.

  • Page 40: Replace A Pa-3200 Series Dc Power Supply

    Remove the plastic cover that protects the DC input terminals and then use a Phillips-head screwdriver to remove the screws holding the positive and negative DC cables to the DC input terminals. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc. ©...
  • Page 41 Remove the replacement power supply from the packaging and slide it into the empty power supply slot. Push the power supply all the way in until the release lever clicks and secures the power supply. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc. ©...
  • Page 42 When all DC power cables are securely connected and the plastic guard is properly reattached, STEP 6 | power on the DC power source. The power supplies powers on, the input and output LEDs PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc. ©...
  • Page 43 PWR LED and the power supply LEDs (PWR 1 and PWR 2) on the front of the firewall turns green. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc.

  • Page 44: Replace A Pa-3200 Series Drive

    Replace a PA-3200 Series Drive The PA-3200 Series firewalls use a single solid-state drive (SSD) to store the PAN-OS system files, system logs, and network traffic logs. If this drive fails, you must replace it to restore functionality to the firewall.
  • Page 45 3. Before fully inserting the drive carrier, ensure that the lever attaches to the locking mechanism on the firewall and then close the lever to seat the carrier. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall 2018 Palo Alto Networks, Inc.
  • Page 46 For information on how to upgrade or downgrade PAN-OS, see the New Features Guide for the PAN-OS version that your firewall is running. The New Features Guides are located on the Technical Documentation portal. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-3200 Series Firewall...

  • Page 47: Pa-3200 Series Firewall Specifications

    PA-3200 Series Firewall Specifications The following topics describe the PA-3200 Series firewall hardware specifications. For feature, capacity, and performance information, refer to the PA-3200 Series firewall datasheet. > PA-3200 Series Physical Specifications > PA-3200 Series Electrical Specifications > PA-3200 Series Environmental Specifications...
  • Page 48 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Specifications 2018 Palo Alto Networks, Inc. ©...

  • Page 49: Pa-3200 Series Physical Specifications

    (8.89cm H x 52.15cm D x 44.04cm W) The depth dimension includes hardware that protrudes from the back of the firewall. Weight • Firewall weight—29lbs (13.15Kg) • Shipping weight—41.5lbs (18.82Kg) PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Specifications 2018 Palo Alto Networks, Inc. ©...

  • Page 50: Pa-3200 Series Electrical Specifications

    PA-3200 Series Electrical Specifications The following table describes PA-3200 Series firewall electrical specifications. The electrical specifications are the same for all models in the series (PA-3220, PA-3250, and PA-3260 firewalls). Specification Value Power Supplies Two 650W AC or DC power supplies; the second power supply is for redundancy.

  • Page 51: Pa-3200 Series Environmental Specifications

    All PA-3200 Series firewalls with AC or DC power supplies installed. • Average—51 dB(A) • Maximum—65 dB(A) All PA-3200 Series firewalls—10,000ft (3,048m) Maximum operating altitude PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Specifications 2018 Palo Alto Networks, Inc. ©...

  • Page 52: Pa-3200 Series Miscellaneous Specifications

    The following table describes PA-3200 Series firewall miscellaneous specifications. Specification Value Storage capacity One 240GB SSD for system files and log storage. Mean time between failures (MTBF) 14 years PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Specifications...

  • Page 53: Pa-3200 Series Firewall Hardware Compliance Statements

    Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose. To view compliance statements for the PA-3200 Series firewalls, see PA-3200 Series Firewall Compliance Statements.
  • Page 54 PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Hardware Compliance Statements 2018 Palo Alto Networks, Inc. ©...

  • Page 55: Pa-3200 Series Firewall Compliance Statements

    Interference by Information Technology Equipment (VCCI), which governs radio frequency emissions in Japan. The following information is in accordance to VCCI Class A requirements: PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Hardware Compliance Statements 2018 Palo Alto Networks, Inc.
  • Page 56 Translation: This is a Class A product. In a domestic environment this product may cause radio interference, in which case the user may be required to take corrective actions. PA-3200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-3200 Series Firewall Hardware Compliance Statements...

This manual is also suitable for:

Pa-3220Pa-3250Pa-3260

Table of Contents