PaloAlto Networks PA-1400 Series User manual

PA-1400 Series
docs.paloaltonetworks.com
1
2Rack Mount the Firewall
The PA-1400 Series firewall ships with a rack mount kit for installation in a four-post 19” equipment rack.
Before You Begin
Use this document to install and begin setting up your Palo Alto Networks firewall. Refer to the Firewall Hardware Reference at
https://docs.paloaltonetworks.com/hardware for safety information, specifications, and more detailed procedures for installing
the firewall.
◼Verify that the installation site has adequate air circulation and AC power.
◼Have a #1 and #2 Phillips-head torque driver available. Use the #1 Phillips-head bit to attach the rack-mount brackets to the firewall and use
the #2 bit to secure the rack-mount brackets to the equipment rack posts.
◼Unpack the equipment and verify that you received the following items:
3Power on the Firewall
The PA-1400 Series firewalls ship with one AC power supply but can make use of a second (purchased separately) for power
redundancy.
1 Remove the nut and star washer from the ground stud on the back of the firewall as shown
in Figure 5.
2 Crimp a 14AWG ground cable to a ring lug (cable and lug not included) and then attach the
ring lug to the ground stud on the firewall.Replace the star washers and nuts and torque to
25 in-lbs. Connect the other end of the cable to earth ground.
3 Connect the AC power cord to the power input on the back of the firewall.
4 Secure the power cord to the power supply using the provided cord retainer.
5 Connect the other end of the power cord to an AC power source. After the power supply is
connected, the power supply powers on, the input and output LEDs on the power supply
turn green, and the PWR LED and the power supply LED (PWR 1 or PWR 2) on the front of
the firewall turns green.
Page 1 of 2
Quick Start Guide
Ensure that the equipment rack is properly anchored so it can support the weight of the installed equipment.
Connect the second power cord (optional) through a different circuit breaker to provide power redundancy and to allow for electrical
circuit maintenance.
Qty Description
1PA-1400 Series next-generation firewall.
1AC power cord
1Standard Type-A USB to micro USB console cable.
1Standard RJ-45 CAT6 Ethernet cable for management (MGT) port access.
1Velcro.
1Desiccant.
21RU mounting ears (left and right).
2Rear support brackets.
2Adjustable mounting brackets (left and right)
13 #6-32 x 5/16” rack-mount screws.
9#10-32 x 3/4” rack-mount screws.
9#12-24 x 1/2” rack-mount screws.
8#10-32 nut cages.
1End User License Agreement (EULA).
1China RoHS declaration.
1 Attach one rack-mount bracket to each side of the firewall using four #6-32 x 5/16” screws for each bracket as shown in Figure 1 and torque to
9 in-lbs.
2 Attach one side rack-mount rail to each side of the firewall using two #6-32 x 5/16” screws for each bracket and torque to 9 in-lbs. See Figure
2. The side rack-mount rail screws ship with the rack kit.
3 With help from another person, hold the firewall in the rack and secure the rack-mount brackets to the front rack posts using two screws for
each bracket, as shown in Figure 3. Use the appropriate screws (#10-32 x 3/4” or #12-24 x 1/2”) for your rack and torque to 25 in-lbs. Use cage
nuts (not provided) to secure the screws if the rack has square holes.
4 Slide one back rack-mount bracket into each of the two previously installed side rack-mount rails and secure the brackets to the back rack
posts using the appropriate screws for your rack (#10-32 x 3/4” or #12-24 x 1/2”) and torque to 25 in-lbs. See Figure 4.
Figure 1 Figure 2
Figure 3
Figure 4
If you are booting the firewall in non-ZTP mode (Standard mode), follow the instructions in Step 4: Connect to the Management
Interface before proceeding to power on the firewall.
Figure 5


docs.paloaltonetworks.com Page 2 of 2
Where To Go Next
To learn more about the firewall, refer to the Firewall Hardware Reference Guide:
https://docs.paloaltonetworks.com/hardware.
To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:
https://docs.paloaltonetworks.com.
(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)
Start here to Register and Set Up your firewall and access all resources and support tools:
https://go.paloaltonetworks.com/CustomerLaunchPad
4Connect to the Management Interface
Connect in ZTP Mode
1 Unbox the firewall.
2 Connect the ZTP port (Ethernet port 1) on the firewall to an active network switch.
3 Power on the firewall.
4 Follow the instructions provided by your Panorama administrator to register your ZTP firewall. You will have to enter the serial number
(12-digit number identified as S/N) and claim key (8-digit number). These numbers are on stickers attached to the back of the device.
5 Contact your Panorama administrator if you require further assistance.
Connect in Standard Mode (Via Web Interface)
1 Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall.
2 Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
3 Power on the firewall.
4 From a web browser, go to https://192.168.1.1.
5 On the firewall login screen, a prompt will ask if you wish to continue booting in ZTP
mode or if you would like to switch to standard mode. Select Standard Mode and the
firewall will begin rebooting in standard mode.
Connect in Standard Mode (Via CLI)
1 Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall.
2 Ensure that you have access to a terminal emulator such as PuTTY.
3 Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
4 Power on the firewall.
5 Access the firewall CLI using your terminal emulator. Watch for the following prompt:
Do you want to exit ZTP mode and configure your firewall in standard mode (yes/no)[no]?
Enter “yes.” The system will then ask you to confirm. Enter “yes” again to boot the firewall in standard mode
6 Stand by for approximately 5 minutes as the firewall boots up.
7 From a web browser, go to https://192.168.1.1.
8 When prompted, log in to the web interface using the default username and password (admin/admin).
If you have already booted up the firewall and selected the wrong mode, you must perform a factory reset or private-data-reset before
continuing.
For information on how to reset the firewall to its factory default settings, see the PAN-OS Administrator’s Guide.
To use the private-data-reset command, you must access the firewall CLI and enter the command request system private-data-reset. This
command will remove all logs and restore the default configuration.