PaloAlto Networks PA-3200 Series User manual

Before You Begin
Use this guide to install and begin setting up your Palo Alto Networks®PA-3220, PA-3250, or PA-3260 next-generation firewall.
Refer to the PA-3200 Series Next-Gen Firewall Hardware Reference at https://docs.paloaltonetworks.com/hardware for safety
information, specifications, and more detailed procedures for installing your firewall.
◼Verify that the installation site has an AC (or DC) power source. By default, the firewall ships with AC power supplies; if you need to use DC
power, contact your sales representative or contact the Palo Alto Networks Sales department
(https://paloaltonetworks.com/company/contact-support.html) to order two DC power supplies and then use the installation procedures in
the PA-3200 Series Next-Gen Firewall Hardware Reference to connect power to the firewall.
◼Ensure that you have both a #1 and #2 Phillips-head torque driver available. Use the #1 Phillips-head bit to attach the rack-mount brackets to
the firewall and use the #2 bit to secure the rack-mount brackets to the equipment rack posts.
◼Unpack the equipment and verify that you received the following items:
Rack Mount the Firewall
The PA-3200 Series firewall ships with two rack-mount brackets for an installation in a two-post or four-post 19-inch
equipment rack. If you install the firewall in a four-post equipment rack and you require additional support, you can purchase a
four-post rack kit from Palo Alto Networks that secures the firewall to the back posts of the rack. Both procedures are covered in
this guide.
Install the Firewall in a Two-Post or Four-Post Equipment Rack
1 Attach one rack-mount bracket to each side of the firewall using four #8-32 x 5/16” screws for each bracket and torque each screw to 15 in-lbs.
For a two-post rack, we recommend that you install the brackets in the mid-mount position as shown in
Figure 1. For a four-post rack, we recommend that you install the brackets in the front-mount position as shown in Figure 2.
2 With help from another person, hold the firewall in the rack and secure the rack-mount
brackets to the rack posts using four screws for each bracket (Figure 3). Use the appropriate
screws (#10-32 x 3/4” or #12-24 x 1/2”) for your rack and torque each screw to 25 in-lbs.
Use cage nuts (not provided) to secure the screws if the rack has square holes.
Figure 1 Figure 3
Figure 4
Figure 5
Qty Description
1PA-3200 Series next-generation firewall.
2AC power cords.
2Velcro straps to secure the AC power cords to the power supplies.
1DB-9 female to RJ-45 male console cable.
1Standard Type-A USB to micro USB console cable.
1Standard RJ-45 CAT6 Ethernet cable for management (MGT) port access.
2Rack-mount brackets to secure the firewall to a two-post or four-post equipment rack.
8#8-32 x 5/16” rack-mount bracket screws to attach the front rack-mount brackets to the firewall.
8#10-32 x 3/4” rack-mount screws to secure the front rack-mount brackets to a rack with #10-32 threaded holes.
8#12-24 x 1/2” rack-mount screws to secure the front rack-mount brackets to a rack with #12-24 threaded holes.
1End User License Agreement (EULA).
1China Restriction of Hazardous Substances (RoHS) declaration.
(Optional) Install the Firewall in a Four-Post Equipment Rack Using the Four-Post Kit
The four-post rack kit replaces the rack brackets that ship with the firewall to provide additional support to the back of the firewall. All
hardware (screws and brackets) required to install the rack kit is included with the kit.
1 Remove the front rack-mount brackets (if installed) from each side of the firewall. (Figure 1 shows the front brackets.)
2 Attach one four-post side rack-mount rail to each side of the firewall. Use four #8-32 x 5/16” screws for the front four screw holes of each side rail
and three #6-32 x 5/16” screws for the three back screw holes of each side rail (Figure 4) and torque each screw to 15 in-lbs.
3 With help from another person, hold the firewall in the rack and secure the side rails to the front rack posts using four screws for each rail (Figure 5).
Use the appropriate screws (#10-32 x 3/4” or #12-24 x 1/2”) for your rack and torque each screw to 25 in-lbs. Use cage nuts (not provided) to secure
the screws if the rack has square holes.
4 Slide one four-post back rack-mount rail into each of the two previously installed side rack-mount rails (Figure 6), and secure the back rails to the
back rack posts using four screws for each bracket (#10-32 x 3/4” or #12-24 x 1/2” screws), and torque each screw to 25 in-lbs (Figure 7).
Figure 6
Figure 7
#8-32 x 5/16”
Screws
#6-32 x 5/16”
Screws
Figure 2
PA-3200 Series Quick Start Guide
1
2
Ensure that the equipment rack is properly anchored so it can support the weight of the installed equipment without tipping.
docs.paloaltonetworks.com Page 1 of 2

Connect to the Management Interface
Connect with Standard Firewall
1 Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the
MGT port on the firewall (Figure 10).
2 Change the IP address on your computer to an address in the 192.168.1.0/24 network, such
as 192.168.1.2.
3 From a web browser, go to https://192.168.1.1.
4 When prompted, log in to the web interface using the default username and password
(admin/admin). Figure 10
3Power On the Firewall
The PA-3200 Series firewall operates on AC or DC power. By default, the firewall ships with two AC power supplies (the second
power supply is for redundancy).
Use the following procedure to power on the firewall using AC power:
1 Remove the nuts, star washers, and two-post ground lug (Figure 8) from the two-post ground studs on the back of the firewall and attach a
6-AWG ground cable (not included) to the two-post ground lug.
2 Reinstall the ground lug and secure it to the studs using the star washers and nuts and torque each screw to 25 in-lbs. Connect the other end
of the ground cable to earth ground.
3 Connect one of the AC power cords to power input 1 (PWR 1) on the back of the firewall and secure the cord to the power supply using the
Velcro strap (Figure 9).
4 Connect the other end of the power cord to an AC power source. After power is connected, the green OK LED on the power supply turns green
and the corresponding LED (PWR 1 or PWR2) on the front of the firewall also turns green.
5 Connect a second AC power cord to power input 2 (PWR 2), secure it to the power supply with the Velcro strap, and connect the other end of
the cord to an AC power source.
ABC
Two-Post Ground Studs
Ground Cable With
Two-Post Lug
AC Input (PWR 1) AC Input (PWR 2)
Figure 8
Figure 9
PA3200 SERIES QUICK START GUIDE CONTINUED
If you are using DC power supplies, follow the installation procedures in the PA-3200 Series Next-Gen Firewall Hardware Reference.
To provide power redundancy and allow for electrical circuit maintenance, connect the second power cord to a separate circuit breaker than
you used for the first power cord.
4
If you are not able to connect to the web interface, check the status of the firewall by connecting to the micro USB or RJ-45 console port.
The console connection provides access to firewall boot messages, maintenance mode, and to the command line interface (CLI). To
connect to the RJ-45 console port, use the DB-9 to RJ-45 serial cable (provided) and configure your terminal emulation software to 9600,
8, none, and 1. For information on connecting to the micro USB console port using a standard micro USB cable, refer to https://docs.
paloaltonetworks.com/resources/micro-usb-console-port.
Where To Go Next
To learn more about the firewall, refer to the PA-3200 Series Next-Gen Firewall Hardware Reference Guide:
https://docs.paloaltonetworks.com/hardware.
To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:
https://docs.paloaltonetworks.com.
(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)
Start here to Register and Set Up your firewall and access all resources and support tools:
https://go.paloaltonetworks.com/CustomerLaunchPad
Page 2 of 2
docs.paloaltonetworks.com | © 2020 | Palo Alto Networks, Inc. | Part Number: 810-000287-00C
Connect with ZTP Firewall
To connect your PA-3200 Series firewall using Zero Touch Provisioning (ZTP), you must have the PAN-PA-3220-ZTP, PAN-
PA-3250-ZTP, or PAN-3260-ZTP.
1 Unbox the firewall.
2 Connect the ZTP port (Ethernet port 1) on the firewall to the broadband connection. See Figure 11.
3 Power on the firewall.
4 Follow the instructions provided by your Panorama administrator to register your ZTP firewall. You will have to enter the serial number
(12-digit number identified as S/N) and claim key (8-digit number). These numbers are on stickers attached to the back of the device. See
Figure 12 for the location of the claim key.
5 Contact your Panorama administrator if you require further assistance.
Do not power on the firewall until Step 2 is complete.
Figure 11
99115901
Figure 12