Palo Alto Networks PA-200 Firewall User Manual

PA-200 Firewall
Hardware Reference Guide
Contact Information
http://www.paloaltonetworks.com/contact/contact/
About this Guide
This guide describes the PA-200 firewall hardware, provides instructions on installing the hardware,
describes how to perform maintenance procedures, and provides product specifications. This guide is
intended for system administrators responsible for installing and maintaining the PA-200 firewall.
All PA-200 firewalls run PAN-OS, a purpose-built operating system with extensive functionality. For
additional information, refer to the following resources:
•
For information on the additional capabilities and for instructions on configuring the features on
the firewall, refer to https://www.paloaltonetworks.com/documentation.
•
For access to the knowledge base, complete documentation set, discussion forums, and videos,
refer to https://live.paloaltonetworks.com.
•
For contacting support, for information on the support programs, or to manage your account or
devices, refer to https://support.paloaltonetworks.com.
•
For the latest release notes, go to the software downloads page at 
https://support.paloaltonetworks.com/Updates/SoftwareUpdates.
To provide feedback on the documentation, please write to us at:
[email protected].
Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2007–2015 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of
our trademarks can be found at http://www.paloaltonetworks.com/company/trademarks.html. All other marks
mentioned herein may be trademarks of their respective companies.
Revision Date: July 17, 2015
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL
Table of Contents
Chapter 1 
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5
Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 2 
Installing the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9
Tamper Proof Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Connecting Cables to the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Connecting Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9
9
10
10
Chapter 3 
Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11
Cautions and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Hardware Cautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Hardware Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Interpreting the Device LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Interpreting the Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Chapter 4 
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Interface Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 5 
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Palo Alto Networks
15
15
16
16
16
17
Table of Contents • 3
4 • Table of Contents
Palo Alto Networks
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL

Overview
Chapter 1
This chapter describes the front and back panels of the PA-200 firewall. For more information,
refer to the following topics:
•
“Front Panel” in the next section
•
“Back Panel” on page 7
Palo Alto Networks
Overview • 5
Front Panel
Front Panel
Figure 1 shows the front panel of the PA-200 firewall.
Ethernet
ports
LEDs
Management
port
USB Console
port
port
Figure 1. Front Panel
Table 1 describes the front panel features.
Table 1. Front Panel Features
6 • Overview
Item
Description
Ethernet ports
4 RJ-45 10/100/1000 ports for network traffic.
Management port
1 RJ-45 10/100 port used to access the device management interface.
Console port
1 RJ-45 port for connecting a serial console.
USB port
1 USB port for future use.
LED dashboard
6 LEDs indicating system status. Refer to “Interpreting the Device
LEDs” on page 12 for LED definitions.
Palo Alto Networks
Back Panel
Back Panel
Figure 2 shows the back panel of the PA-200 and Table 2 describes the back panel features.
DC power
Figure 2. Back Panel
Table 2. Back Panel Features
Item
Description
Power inlet
DC power inlet for powering the device.
Palo Alto Networks
Overview • 7
Back Panel
8 • Overview
Palo Alto Networks
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL

Installing the Hardware
Chapter 2
This chapter describes how to install the PA-200 firewall. For more information, refer to the
following topics:
•
“Tamper Proof Statement” on page 9
•
“Before You Begin” in the next section
•
“Connecting Cables to the Device” on page 10
•
“Connecting Power” on page 10
Tamper Proof Statement
To ensure that products purchased from Palo Alto Networks have not been tampered with
during shipping, verify the following upon receipt of each product:
•
The tracking number provided to you electronically when ordering the product matches
the tracking number that is physically labeled on the box or crate.
•
The integrity of the tamper-proof tape used to seal the box or crate has not been
compromised.
•
The warranty seals on the device itself do not show evidence of tampering.
Before You Begin
•
Verify that the intended location has adequate air circulation and meets the temperature
requirements. Refer to “Environmental Specifications” on page 16.
•
Unpack the device.
•
Verify that power is not connected to the firewall.
•
Allow clear space on all sides, back, and top of the firewall to allow for proper cooling. Do
not stack PA-200 firewalls.
Palo Alto Networks
Installing the Hardware • 9
Connecting Cables to the Device
Note: The PA-200 firewall uses a combination of passive and active cooling and
needs proper airflow on all surfaces to ensure proper operation. Do not install the
PA-200 firewall in a small, confined space such as a closed shelf or drawer, as this
could lead to insufficient cooling of the device.
Connecting Cables to the Device
Figure 3 shows the PA-200 cable connections. Refer to Table 1 for descriptions of the front
panel interfaces.
Network
Management
Console
Figure 3. Cable Connections for the PA-200 Firewall
Connecting Power
To power the PA-200 firewall:
1.
Attach a power cable to the external power supply.
2.
Plug the power supply into the PA-200 firewall.
3.
Plug the cable into a grounded wall outlet.
10 • Installing the Hardware
Palo Alto Networks
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL

Maintaining the Hardware
Chapter 3
This chapter provides maintenance information for the PA-200 hardware. For more
information, refer to the following topics:
•
“Cautions and Warnings” in the next section
•
“Interpreting the Device LEDs” on page 12
•
“Interpreting the Port LEDs” on page 13
Cautions and Warnings
This section describes the cautions and warnings that you must be familiar with before
working with the hardware:
•
“Hardware Cautions” on page 11
•
“Hardware Warnings” on page 11
Hardware Cautions
•
Disconnect the power cord before servicing the PA-200 firewall.
•
Shielded Ethernet interface cables should be used to ensure agency compliance with
electromagnetic emissions (EMC). Connecting a PoE enabled port to the firewall is not
recommended because the system does not support the PoE operating mode.
•
To prevent damage from electrical surges, use a Uninterruptible Power Supply (UPS) and
implement the facilities lightning protection requirements outlined in the National Fire
Protection Association (NFPA) 780: Standard for the Installation of Lightning Protection
Systems (or similar effective measures per local regulations).
Hardware Warnings
•
Risk of explosion if the battery is replaced with an incorrect type. Dispose of used
batteries in accordance with government regulations.
Palo Alto Networks
Maintaining the Hardware • 11
Interpreting the Device LEDs
•
Removal of equipment top cover is to be performed only by trained service person(s).
Interpreting the Device LEDs
Figure 4 shows the LEDs on the front panel of the PA-200 firewall.
Figure 4. Front Panel LEDs
Table 3 describes the LED functions and states.
Table 3. LED Functions and States
Interface
State
Description
POWER
Green
The device is powered.
Off
Power is off.
Green
The device is operating normally.
Yellow
The device is booting up.
Green
The fan is operating normally.
STATUS
FAN
Note: The fan is under the control of the firewall processor and may not
run all the time. This is normal.
HA
ALARM
TEMP
Red
The fan has failed.
Green
This device is the current active device.
Yellow
This device is the current passive device.
Off
High availability is not enabled on this device.
Red
There is a hardware failure, which may include power supply
detected but not working, fan failure, HA failover, or temperature
above high temperature threshold.
Off
The device is operating normally.
Green
The temperature is normal.
Yellow
The temperature is outside the normal tolerance.
12 • Maintaining the Hardware
Palo Alto Networks
Interpreting the Port LEDs
Interpreting the Port LEDs
Each Ethernet port on the PA-200 firewall has two LEDs. Table 4 describes the LEDs.
Table 4. Port LEDs
LED
Description
Left
Shows green if there is a network link.
Right
Blinks if there is network activity.
Palo Alto Networks
Maintaining the Hardware • 13
Interpreting the Port LEDs
14 • Maintaining the Hardware
Palo Alto Networks
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL

Specifications
Chapter 4
This chapter provides specifications for the PA-200 firewall. For more information, refer to the
following topics:
•
“Physical Specifications” in the next section
•
“Interface Specifications” on page 16
•
“Electrical Specifications” on page 16
•
“Environmental Specifications” on page 16
Physical Specifications
Table 5 lists the physical specifications for the PA-200 firewall.
Table 5. Physical Specifications
Specification
Description
Height
1.75 inches (4.5 cm) (1 RU).
Depth
6.5 inches (16.5 cm).
Width
9 inches (23 cm).
Weight
Firewall only: 2.8 lbs (1.3kg).
As shipped: 5.1 lbs (2.3kg).
Fan
Single fan.
Note: The fan is under control of the firewall’s processor and may not run
all of the time. This is normal.
Palo Alto Networks
Specifications • 15
Interface Specifications
Interface Specifications
Table 6 describes the interfaces for the PA-200 firewall.
Table 6. Interface Specifications
Specification
Description
Ethernet ports
4 RJ-45 10/100/1000 ports for network traffic.
Management port
1 RJ-45 port to access the device management interfaces through an
Ethernet interface.
Console port
1 RJ-45 port for connecting a serial console. Use these settings:
• Data rate: 9600
• Data bits: 8
• Parity: none
• Stop bits: 1
• Flow control: none
USB port
One USB port for future use.
Electrical Specifications
Table 7 lists the electrical specifications for the PA-200 firewall.
Table 7. Electrical Specifications
Specification
Description
Input frequency
50-60 Hz
Average/maximum power consumption
20W/30W
AC voltage
100-240 VAC
Environmental Specifications
Table 8 lists the environmental specifications for the PA-200 firewall.
Table 8. Environmental Specifications
Specification
Description
Operating temperature range
0° to 40° C
Storage temperature range
-20° to 70° C
System air flow
Side to side
16 • Specifications
Palo Alto Networks
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL

Compliance Statements
Chapter 5
CE
European Union (EU) Electromagnetic Compatibility Directive
This device is herewith confirmed to comply with the requirements set out in the Council
Directive on the Approximation of the Laws of the Member States relating to Electromagnetic
Compatibility Directive (2004/108/EC).
The above product conforms with Low Voltage Directive 2006/95/EC and complies with the
requirements in the Council Directive 2006/95/EC relating to electrical equipment designed
for use within certain voltage limits and the Amendment Directive 93/68/EEC.
KCC
TUV
Product Ambient Temperature: 0~40 degree C
Palo Alto Networks
Compliance Statements • 17
FCC
Federal Communications Commission (FCC) Statement:
For a Class B digital device or peripheral
NOTE: This equipment has been tested and found to comply with the limits for a Class B
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or television
reception, which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following measures:
•
Reorient or relocate the receiving antenna.
•
Increase the separation between the equipment and receiver.
•
Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
•
Consult the dealer or an experienced radio/TV technician for help.
VCCI
Japan Compliance Statement:
This is a Class B product based on the standard of the VCCI Council. If this is used near a
radio or television receiver in a domestic environment, it may cause radio Interference. Install
and use the equipment according to the instruction manual.
ICES
Canadian Department Compliance Statement:
This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de
la classe B est conforme à la norme NMB-003 du Canada.
18 • Compliance Statements
Palo Alto Networks
">