PaloAlto Networks PA-7000 Series Application guide

PA-7000 Series Firewall Hardware
Reference
docs.paloaltonetworks.com

Contact Informaon
Corporate Headquarters:
Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95054
www.paloaltonetworks.com/company/contact-support.html
About the Documentaon
• For the most recent version of this guide or for access to related documentaon, visit the
Technical Documentaon portal docs.paloaltonetworks.com.
• To search for a specific topic, go to our search page docs.paloaltonetworks.com/search.html.
• Have feedback or quesons for us? Leave a comment on any page in the portal, or write to us
at documenta[email protected]om.
Copyright
Palo Alto Networks, Inc.
www.paloaltonetworks.com
©2018–2021 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo
Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/
trademarks.html. All other marks menoned herein may be trademarks of their respecve
companies.
Last Revised
August 3, 2021
PA-7000 Series Firewall Hardware Reference 2©2021 Palo Alto Networks, Inc.

Table of Contents
Before You Begin................................................................................................7
Upgrade/Downgrade Consideraons for Firewalls and Appliances................................ 8
Tamper Proof Statement............................................................................................................ 9
Third-Party Component Support...........................................................................................10
Product Safety Warnings.........................................................................................................11
PA-7000 Series Firewall Overview..............................................................15
PA-7050 Front and Back Panel Descripons..................................................................... 16
PA-7050 Front Panel (AC)........................................................................................... 16
PA-7050 Back Panel (AC)............................................................................................ 19
PA-7050 Front Panel (DC)...........................................................................................20
PA-7050 Back Panel (DC)............................................................................................21
PA-7080 Front and Back Panel Descripons..................................................................... 23
PA-7080 Front Panel (AC)........................................................................................... 23
PA-7080 Back Panel (AC)............................................................................................ 27
PA-7080 Front Panel (DC)...........................................................................................29
PA-7080 Back Panel (DC)............................................................................................30
PA-7000 Series Firewall Module and Interface Card Informaon....... 33
PA-7000 Series Firewall Switch Management Cards (SMCs)..........................................34
PA-7000 Series Firewall SMC Component Descripons..................................... 34
PA-7000 Series Firewall SMC-B Component Descripons................................. 37
PA-7000 Series Firewall SMC-B Requirements......................................................41
Interpret the PA-7000 Series Firewall SMC LEDs................................................. 41
PA-7000 Series Firewall Log Cards.......................................................................................46
PA-7000 Series Firewall Log Processing Card (LPC)............................................. 46
PA-7000 Series Firewall Log Forwarding Card (LFC)............................................ 48
PA-7000 Series Firewall Network Processing Cards (NPCs)...........................................54
PA-7000 20G NPC........................................................................................................54
PA-7000 20GXM NPC................................................................................................. 57
PA-7000 20GQ NPC.....................................................................................................57
PA-7000 20GQXM NPC.............................................................................................. 60
PA-7000 100G NPC..................................................................................................... 60
Idenfy PA-7000 Series NPC Port Acvity and Link LEDs................................. 64
PA-7000 Series Firewall Data Processing Card (DPC)..................................................... 65
Interpret the PA-7000 Series DPC LEDS.................................................................65
PA-7000 Series Firewall Installaon...........................................................69
PA-7000 Series Firewall Equipment Rack Installaon......................................................70
PA-7000 Series Firewall Hardware Reference 3©2021 Palo Alto Networks, Inc.

Table of Contents
PA-7000 Series Firewall Rack Install Safety Informaon..................................... 70
Install the PA-7050 Firewall in the Mid-Mount Posion..................................... 70
Install the PA-7050 Firewall in the Front-Mount Posion...................................72
Install the PA-7080 Firewall in the Mid-Mount Posion..................................... 76
Install the PA-7080 Firewall in the Front-Mount Posion...................................79
Install the Mandatory PA-7000 Series Firewall Front Slot Cards...................................83
Install a PA-7000 Series Switch Management Card.............................................. 83
Install a PA-7000 Series Firewall Log Card............................................................. 88
Install a PA-7000 Series Firewall Network Processing Card (NPC)....................95
Configure Session Distribuon on a PA-7000 Series Firewall..........................102
Connect Power to a PA-7000 Series Firewall................................................................. 103
PA-7000 Series Power Configuraon Opons.................................................... 103
Determine PA-7000 Series Firewall Power Configuraon Requirements......104
Connect AC Power to a PA-7050 Firewall........................................................... 105
Connect DC Power to a PA-7050 Firewall...........................................................107
Connect AC Power to a PA-7080 Firewall........................................................... 109
Connect DC Power to a PA-7080 Firewall...........................................................111
View PA-7000 Series Firewall Power Stascs...................................................114
Connect Cables to a PA-7000 Series Firewall................................................................. 117
Verify the PA-7000 Series Firewall LPC and NPC Configuraon................................119
Verify the PA-7000 Series Firewall LPC Configuraon......................................119
Verify the PA-7000 Series Firewall NPC Configuraon.....................................120
Install the PA-7080 Firewall EMI Filter............................................................................. 122
Service the PA-7000 Series Firewall Hardware..................................... 123
Replace a PA-7000 Series Firewall AC or DC Power Supply....................................... 124
Interpret the PA-7000 Series Firewall Power Supply LEDs...............................124
Replace a PA-7000 Series AC Power Supply....................................................... 125
Replace a PA-7000 Series DC Power Supply....................................................... 129
Replace a PA-7080 DC PEM....................................................................................134
Replace a PA-7000 Series Firewall Fan Tray.................................................................... 136
Replace a PA-7050 Fan Tray.................................................................................... 136
Replace a PA-7080 Fan Tray.................................................................................... 141
Replace a PA-7000 Series Firewall Air Filter................................................................... 144
Replace a PA-7000 Series Firewall Front Slot Card........................................................148
Replace a PA-7000 Series Switch Management Card (SMC)............................ 148
Replace a PA-7000 Series Log Card....................................................................... 151
Replace a PA-7000 Series Network Processing Card (NPC)............................. 156
Replace a PA-7000 Series SMC Boot Drive.....................................................................166
Replace a PA-7000 Series Firewall LPC Drive.................................................................169
Re-Index the LPC Drives.......................................................................................................176
PA-7000 Series Firewall Hardware Reference 4©2021 Palo Alto Networks, Inc.

Table of Contents
Replace a PA-7050-SMC-B or PA-7080-SMC-B Drive................................................. 180
Increase the PA-7000 Series Firewall LPC Log Storage Capacity............................... 185
PA-7000 Series Firewall Specificaons....................................................195
PA-7000 Series Firewall Physical Specificaons............................................................. 196
PA-7000 Series Firewall Electrical Specificaons........................................................... 199
PA-7000 Series Firewall Component Electrical Specificaons......................... 199
PA-7000 Series Firewall Power Cord Types......................................................... 200
PA-7000 Series Firewall Environmental Specificaons................................................. 202
PA-7000 Series Firewall Hardware Compliance Statements.............. 203
PA-7000 Series Firewall Compliance Statements........................................................... 204
PA-7000 Series Firewall Hardware Reference 5©2021 Palo Alto Networks, Inc.

Table of Contents
PA-7000 Series Firewall Hardware Reference 6©2021 Palo Alto Networks, Inc.

Before You Begin
Read the following topics before you install or service a Palo Alto Networks® next-
generaon firewall or appliance. The following topics apply to all Palo Alto Networks
firewalls and appliances except where noted.
>Upgrade/Downgrade Consideraons for Firewalls and Appliances
>Tamper Proof Statement
>Third-Party Component Support
>Product Safety Warnings
7

Before You Begin
Upgrade/Downgrade Consideraons for Firewalls and
Appliances
The following table lists hardware features that have upgrade or downgrade impact. Make sure
you understand all upgrade/downgrade consideraons before you upgrade or downgrade from
the specified version of PAN-OS.
Feature Release Upgrade Consideraons Downgrade
Consideraons
PA-7000 Log
Forwarding Card (LFC)
10.0 If you are using an LFC
with a PA-7000 Series
Firewall, when you
upgrade to PAN-OS
10.0, you must configure
the management plane
or dataplane interface
for the service route
because the LFC ports
do not support the
requirements for the
service route. We
recommend using the
dataplane interface for
the Data Services service
route.
n/a
Upgrading a PA-7000
Series Firewall with a
first generaon switch
management card
(PA-7050-SMC or
PA-7080-SMC)
PAN-OS 8.0
and later
Before upgrading
the firewall, run the
following CLI command
to check the flash drive’s
status: debug system
disk-smart-info
disk-1.
If the value for
aribute ID #232,
Available_Reservd_Space
0x0000, is greater than
20, then proceed with
the upgrade. If the value
is less than 20, then
contact support for
assistance.
Before downgrading
the firewall, run the
following CLI command
to check the flash drive’s
status: debug system
disk-smart-info
disk-1.
If the value for
aribute ID #232,
Available_Reservd_Space
0x0000, is greater than
20, then proceed with
the downgrade. If the
value is less than 20,
then contact support for
assistance.
PA-7000 Series Firewall Hardware Reference 8©2021 Palo Alto Networks, Inc.

Before You Begin
Tamper Proof Statement
To ensure that products purchased from Palo Alto Networks were not tampered with during
shipping, verify the following upon receipt of each product:
• The tracking number provided to you electronically when ordering the product matches the
tracking number that is physically labeled on the box or crate.
• The integrity of the tamper-proof tape used to seal the box or crate is not compromised.
• The integrity of the warranty label on the firewall or appliance is not compromised.
(PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and
therefore do not include a warranty label on the firewall.
PA-7000 Series Firewall Hardware Reference 9©2021 Palo Alto Networks, Inc.

Before You Begin
Third-Party Component Support
Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party
Component Support statement.
PA-7000 Series Firewall Hardware Reference 10 ©2021 Palo Alto Networks, Inc.