PaloAlto Networks PA-415 User manual

PA-415 and PA-445
docs.paloaltonetworks.com
1
2
Before You Begin
Use this document to install and begin setting up your Palo Alto Networks PA-415 or PA-445 Next-Generation firewall. Refer
to the PA-400 Series Next-Gen Firewall Hardware Reference at https://docs.paloaltonetworks.com/hardware for safety
information, specifications, and more detailed procedures for installing the firewall.
◼Verify that the installation site has adequate air circulation and AC power.
◼Have a #1 Phillips-head screwdriver available.
◼Unpack the equipment and verify that you received the following items:
Page 1 of 2
Quick Start Guide
Qty Description
1PA-415 or PA-445 next-generation firewall.
1Power adapter.
1Console cable.
1Power Cord, AC, North America, 10A/125V, 75C, 1.8M, St., SVT, NEMA-5-15P (YP-12) to IEC-C13 (YC-12).
1Shielded RJ-45 CAT6 Ethernet cable for management (MGT) port access.
1PAN-PA-400-POE-RACKTRAY.
7Wood screws (.75”) to mount the firewall and power adapter bracket to wood studs or plywood.
7Drywall anchors and screws (1.25”) to mount the firewall and power adapter bracket to a drywall or similar material that cannot
securely accommodate wood screws.
1Power adapter wall-mount kit (includes one (1) each of the following: a power adapter bracket, a Velcro strap, and a plastic
cable tie).
1Sheet, Limited Warranty.
1China RoHS declaration.
Install the Firewall
There are three ways to install the PA-415 and PA-445 firewalls:
◼On a flat surface
◼On a wall
◼In a 19” equipment rack
Install the Firewall on a Flat Surface
The PA-415 and PA-445 firewalls ship with rubber “feet” attached to the bottom of the device. The PA-415 and PA-445 can be
set horizontally upon a flat surface (Figure 1 — PA-415 pictured).
Figure 1
13 cm
13 cm
11.5 cm
11.5 cm
Install the Firewall on a Wall
1 Temporarily secure the Wall Mount Template (on this sheet) to the wall where you intend to mount the
firewall and use it to mark the location for each of the four wall-mount screws (Figure 2). Use a pointed
object to punch through the paper and visibly mark the wall; then remove the template and verify
measurements.
Ensure there are no building services (water, gas, or wiring) behind the wall where you intend to install the
firewall.
2 Use a Phillips-head screwdriver to install the appropriate screws into each of the four marked locations:
◼Drywall—First press a drywall anchor slightly into the center of a template mark. Then use your
screwdriver to apply pressure while turning the anchor clockwise until the surface of the anchor is
flush with the wall. After the drywall anchor is secure, install a 1.25” anchor screw into the anchor until
the bottom of the screw head protrudes ¼” from the wall. Repeat this step for the other three screw
locations. If any screw location is located over wood, use a .75” wood screw instead of a drywall anchor
and screw.
◼Plywood wall—Use your screwdriver to insert a .75” wood screw into the center of each template mark
that is located over wood until the bottom of the screw heads protrude ¼” from the wall.
3 Align the four holes on the bottom of the firewall with the four screws on the wall and hang the firewall on
the screws.
4 Install the power adapter in the power adapter wall mount bracket by first placing the power supply into the
bracket. Next, loop the two Velcro straps through the side openings on the wall mount and over the power
adaptor. Lastly, loop the Velcro strap back over the top of the power adaptor to secure it into place (Figures
3 and 4).
5 Mount the power adapter wall-mount bracket next to the firewall using wood or drywall screws as
appropriate.
Wall Mount Template
Figure 2


docs.paloaltonetworks.com
3
4Connect to the Management Interface
Page 2 of 2
Where To Go Next
To learn more about the firewall, refer to the PA-400 Series Next-Gen Firewall Hardware Reference Guide:
https://docs.paloaltonetworks.com/hardware.
To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:
https://docs.paloaltonetworks.com.
(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)
Start here to Register and Set Up your firewall and access all resources and support tools:
https://go.paloaltonetworks.com/CustomerLaunchPad
Power On the Firewall
1 Connect the DC connector from the power adapter into one of the power adapter ports on the firewall and tighten the thumb screw to secure
the cable to the firewall (Figure 5).
2 Plug the AC connector from the power adapter into your AC power source. After power is connected, the firewall powers on as indicated by the
green power LED on the front of the device. The LED shows green when a functioning power adapter is connected.
3 (Optional) Repeat Steps 1 and 2 for a second power adapter. The PA-415 and PA-445 use an optional second power adapter for redundancy.
Connect in ZTP Mode
1 Unbox the firewall.
2 Connect the ZTP port (Ethernet port 1) on the firewall to an active network switch.
3 Power on the firewall.
4 Follow the instructions provided by your Panorama administrator to register your ZTP firewall. You will have to enter the serial number
(12-digit number identified as S/N) and claim key (8-digit number). These numbers are on stickers attached to the back of the device.
5 Contact your Panorama administrator if you require further assistance.
Figure 3
Figure 4
Figure 5
If you are booting the firewall in non-ZTP mode (Standard mode), follow the instructions in Step 4 before proceeding to power on the
firewall.
Connect in Standard Mode (Via Web Interface)
1 Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall.
2 Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
3 Power on the firewall.
4 From a web browser, go to https://192.168.1.1.
5 On the firewall login screen, a prompt will ask if you wish to continue booting in ZTP
mode or if you would like to switch to standard mode. Select Standard Mode and the
firewall will begin rebooting in standard mode.
Connect in Standard Mode (Via CLI)
1 Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall.
2 Ensure that you have access to a terminal emulator such as PuTTY.
3 Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
4 Power on the firewall.
5 Access the firewall CLI using your terminal emulator. Watch for the following prompt:
Do you want to exit ZTP mode and configure your firewall in standard mode (yes/no)[no]?
Enter “yes.” The system will then ask you to confirm. Enter “yes” again to boot the firewall in standard mode
6 Stand by for approximately 5 minutes as the firewall boots up.
7 From a web browser, go to https://192.168.1.1.
8 When prompted, log in to the web interface using the default username and password (admin/admin).
Install the Firewall in a 19” Equipment Rack
Refer to the PA-400 Series Next-Gen Firewall Hardware Reference at https://docs.paloaltonetworks.com/hardware.