PaloAlto Networks PA-4000 Series User manual

PA-4000 Series
Hardware Reference Guide

Contact Information
http://www.paloaltonetworks.com/contact/contact/
About this Guide
This guide describes the PA-4000 Series firewall hardware, provides instructions on installing the
hardware, describes how to perform maintenance procedures, and provides product specifications. This
guide is intended for system administrators responsible for installing and maintaining the PA-4000
Series firewall.
All PA-4000 Series devices run PAN-OS, a purpose-built operating system with extensive
functionality. For additional information, refer to the following resources:
•For information on the additional capabilities and for instructions on configuring the features on
the firewall, refer to https://www.paloaltonetworks.com/documentation.
•For access to the knowledge base, complete documentation set, discussion forums, and videos,
refer to https://live.paloaltonetworks.com.
•For contacting support, for information on the support programs, or to manage your account or
devices, refer to https://support.paloaltonetworks.com.
•For the latest release notes, go to the software downloads page at 
https://support.paloaltonetworks.com/Updates/SoftwareUpdates.
To provide feedback on the documentation, please write to us at:
[e-mail].
Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2014 Palo Alto Networks. All rights reserved.
Palo Alto Networks and PAN-OS are trademarks of Palo Alto Networks, Inc.
Part number: 810-000002-00I

Palo Alto Networks Table of Contents • 3
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL
Chapter 1 
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Chapter 2 
Installing the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Tamper Proof Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Equipment Rack Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Connecting Cables to the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Connecting Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 3 
Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Cautions and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Replacing a Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Interpreting the Device LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Interpreting the Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Chapter 4 
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Interface Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Chapter 5 
Compliance Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Table of Contents

4• Table of Contents Palo Alto Networks

Palo Alto Networks Overview • 5
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL
Chapter 1 
Overview
This chapter describes the features of the front and back panel of the PA-4000 Series firewall. For more
information, refer to the following topics:
•“Front Panel” in the next section
•“Back Panel” on page 8

Front Panel
6• Overview Palo Alto Networks
Front Panel
Figure 1 shows the front panel of the PA-4050 and PA-4020 and Table 1 describes the front panel
features.
Figure 1. PA-4050 and PA-4020 Front Panel
Table 1. PA-4050 and PA-4020 Front Panel Features
Item Description
Ethernet ports 16 RJ-45 10/100/1000 ports for network traffic.
SFP ports Eight Small Form-Factor Pluggable (SFP) ports for network traffic.
Management ports One RJ-45 port to access the device management interfaces through an
Ethernet interface.
Management console port One DB-9 port for connecting a serial console.
High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and synchronization.
USB ports Two USB ports for future use.
LED dashboard Eight LEDs indicating system status. Refer to “Interpreting the Device
LEDs” on page 14 for LED definitions.
1357 9111315 17192123
2 4 6 8 10 12 14 16 18 20 22 24 HA2
POWER
STATUS
HA
TEMP
ALARM
FAN S
PWR 1
PWR 2
HA1MGTCONSOLEUSB 1/2
USB
ports
Ethernet
ports
Management
console port
Management
port
SFP
ports
HA
port 2
HA
port 1
LEDs

Palo Alto Networks Overview • 7
Front Panel
Figure 2 shows the front panel of the PA-4060 Series and Table 2 describes the front panel features.
Figure 2. PA-4060 Front Panel
Table 2. PA-4060 Front Panel Features
Item Description
SFP ports Four Small Form-Factor Pluggable (SFP) ports for network traffic.
XFP ports Four 10 Gigabit Small Form-Factor Pluggable (XFP) ports for network traffic.
Management ports One RJ-45 port to access the device management interfaces through an 
Ethernet interface.
Management console port One DB-9 port for connecting a serial console.
High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and synchronization.
USB ports Two USB ports for future use.
LED dashboard Eight LEDs indicating system status. Refer to “Interpreting the Device LEDs”
on page 14 for LED definitions.
57
68
POWER
STATUS
HA
TEMP
ALARM
FANS
PWR 1
PWR 2
HA1MGTCONSOLEUSB 1/2
HA2
12 34
USB
ports
XFP
ports
Management
console port
Management
port
SFP
ports
HA
port 2
HA
port 1
LEDs

Back Panel
8• Overview Palo Alto Networks
Back Panel
Figure 3 shows the back panel of the PA-4000 Series and Table 3 describes the back panel features.
Figure 3. Back Panel
The PA-4000 Series does not have a power button. The device is powered by plugging power cords into
the power supplies. Refer to “Replacing a Power Supply” on page 13 for instructions on replacing the
power supplies.
Table 3. Back Panel Features
Item Description
Fans 3 fans for cooling the device.
Power supplies 2 redundant, hot-swappable power supplies.
Power
supplies
Fans

Palo Alto Networks Installing the Hardware • 9
July 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL
Chapter 2 
Installing the Hardware
This chapter describes how to install the PA-4000 Series firewall. For more information, refer to the
following topics:
•“Tamper Proof Statement” on page 9
•“Before You Begin” in the next section
•“Equipment Rack Installation” on page 10
•“Connecting Cables to the Device” on page 11
•“Connecting Power” on page 12
Tamper Proof Statement
To ensure that products purchased from Palo Alto Networks have not been tampered with
during shipping, verify the following upon receipt of each product:
•The tracking number provided to you electronically when ordering the product matches
the tracking number that is physically labeled on the box or crate.
•The integrity of the tamper-proof tape used to seal the box or crate has not been
compromised.
•The warranty seals on the device itself do not show evidence of tampering.
Before You Begin
•It is recommended that two people be available to mount the PA-4000 Series in a 19-inch rack.
•Have a Phillips head screwdriver available.
•Verify that the intended location has adequate air circulation and meets the temperature
requirements. Refer to “Environmental Specifications” on page 19.
•Allow clear space at the front and back of the device.

Equipment Rack Installation
10 • Installing the Hardware Palo Alto Networks
•Unpack the device.
•Verify that power is not connected to the device.
Equipment Rack Installation
Figure 4 illustrates how rack mounting brackets are attached to the PA-4000 Series. You can attach the
brackets using the holes at the front or the midpoint of the unit.
Figure 4. Attaching Rack Mounting Brackets
The following safety guidelines apply to rack installation:
•Elevated ambient operating temperature—If the PA-4000 Series is installed in a closed or
multi-unit rack assembly, the ambient operating temperature of the rack environment may be
greater than the ambient room temperature. Verify that the ambient temperature of the rack
assembly meets the maximum rated ambient temperature requirements listed in “Environmental
Specifications” on page 19.
•Reduced air flow—Ensure that the airflow required for safe device operation is not compromised
by the rack installation.
•Mechanical loading—Ensure that the rack-mounted device does not cause hazardous conditions
due to uneven mechanical loading.
•Circuit overloading—Ensure that the circuit that supplies power to the device is sufficiently rated
to avoid circuit overloading or excess load on supply wiring. Refer to “Electrical Specifications”
on page 18.
•Reliable earthing—Maintain reliable earthing of rack mounted equipment. Pay special attention
to supply connections other than direct connections to the branch circuit (such as use of power
strips).