PaloAlto Networks PA-7000 Series Operating and maintenance manual

Palo Alto Networks
PA-7000 Series Hardware Reference Guide

2• PA-7000 Series Hardware Reference Guide Palo Alto Networks
Contact Information
Corporate Headquarters:
Palo Alto Networks
4401 Great America Parkway
Santa Clara, CA 95054
www.paloaltonetworks.com/company/contact-us
About this Guide
This guide describes the PA-7050 and PA-7080 firewall hardware, provides instructions on installing the hardware,
describes how to perform maintenance procedures, and provides product specifications. This guide is intended for
system administrators responsible for installing and maintaining a PA-7000 Series firewall.
All PA-7000 Series firewalls run PAN-OS®, a purpose-built operating system with extensive security and networking
functionality. For additional information, refer to the following resources:
For information on the additional capabilities and for instructions on configuring the features on the firewall, refer
to https://www.paloaltonetworks.com/documentation.
For access to the knowledge base, discussion forums, and videos, refer to
https://live.paloaltonetworks.com.
To contact support for information on support programs, or to manage your account and devices, refer to
https://support.paloaltonetworks.com.
For the latest release notes, go to the software downloads page at
https://support.paloaltonetworks.com/Updates/SoftwareUpdates.
For capacity and performance information for all Palo Alto Networks firewalls, refer to
https://www.paloaltonetworks.com/products/product-selection.html.
To view the product specsheet, refer to
https://www.paloaltonetworks.com/resources/datasheets.html.
To provide feedback on the documentation, please write to us at: [e-mail].
Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2007–2016 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be
found at http://www.paloaltonetworks.com/company/trademarks.html . All other marks mentioned herein may be trademarks of their
respective companies.
Revision Date: September 1, 2016

Palo Alto Networks Table of Contents • 3
Chapter 1
PA-7000 Series Firewall Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
PA-7050 Front and Back Panel Descriptions . . . . . . . . . . . . . . . . . . . . . . . . 5
PA-7050 Front Panel (AC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
PA-7050 Back Panel (AC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
PA-7050 Front Panel (DC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
PA-7050 Back Panel (DC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
PA-7080 Front and Back Panel Descriptions . . . . . . . . . . . . . . . . . . . . . . . . 12
PA-7080 Front Panel (AC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
PA-7080 Back Panel (AC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
PA-7080 Front Panel (DC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
PA-7080 Back Panel (DC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Chapter 2
PA-7000 Series Module and Interface Card Information . . . . . . . . . . . . 23
Switch Management Card (SMC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Interpreting the SMC LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Log Processing Card (LPC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
LPC and AMC Component Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Interpreting the AMC LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Network Processing Cards (NPCs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
PA-7000 20G NPC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
PA-7000 20GXM NPC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
PA-7000 20GQ NPC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
PA-7000 20GQXM NPC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Identify NPC Port Activity and Link LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Chapter 3
Install the PA-7000 Series Firewall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Tamper Proof Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Rack Install Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Rack Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Rack Mount a PA-7050 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Rack Mount a PA-7080 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Install the Mandatory Front Slot Cards. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Install the Switch Management Card (SMC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Install the Log Processing Card (LPC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Install a Network Processing Card (NPC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Connect Power to a PA-7000 Series Firewall . . . . . . . . . . . . . . . . . . . . . . . 68
Power Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Determine Power Configuration Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Connect AC Power to a PA-7050 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Connect DC Power to a PA-7050 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Connect AC Power to a PA-7080 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Connect DC Power to a PA-7080 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
View Firewall Power Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Table of Contents

4• Table of Contents Palo Alto Networks
Connect Cables to a PA-7000 Series Firewall . . . . . . . . . . . . . . . . . . . . . . . 82
Verify the PA-7000 Series LPC and NPC Configuration . . . . . . . . . . . . . . . 85
Verify the LPC Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Verify the NPC Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Chapter 4
Service the PA-7000 Series Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Cautions and Warnings Related to Working with the Hardware . . . . . . . . 89
Hardware Cautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Hardware Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Replace a PA-7000 Series AC or DC Power Supply . . . . . . . . . . . . . . . . . . 93
Interpret the PA-7000 Series Firewall Power Supply LEDs . . . . . . . . . . . . . . . . . . 93
Replace a PA-7000 Series AC Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Replace a PA-7000 Series DC Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Replace a PA-7080 DC PEM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Replace a PA-7000 Series LPC Drive. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Increase Log Capacity on a PA-7000 Series Firewall . . . . . . . . . . . . . . . . 109
Replace a PA-7000 Series Fan Tray . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Replace a PA-7050 Fan Tray . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Replace a PA-7080 Fan Tray . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Replace a PA-7000 Series Air Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Replace a PA-7000 Series Front Slot Card . . . . . . . . . . . . . . . . . . . . . . . . 124
Replace a PA-7000 Series Switch Management Card (SMC) . . . . . . . . . . . . . . 124
Replace a PA-7000 Series Log Processing Card (LPC) . . . . . . . . . . . . . . . . . . . . 127
Replace a PA-7000 Series Network Processing Card (NPC) . . . . . . . . . . . . . . . 133
Chapter 5
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
Component Electrical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
Power Cord Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Chapter 6
Compliance Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
NEBS Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
VCCI Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
BSMI EMC Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

Palo Alto Networks PA-7000 Series Firewall Overview • 5
PA-7050 Front and Back Panel Descriptions
Chapter 1
PA-7000 Series Firewall Overview
The PA-7000 Series firewalls (PA-7050 and PA-7080) are high performance modular firewalls designed for large
enterprise and carrier class environments. These multi-blade chassis can leverage either AC or DC power and have
hot-swappable Network Processing Cards (NPCs) to allow for expansion as needs grow. You can install up to six
NPCs in the PA-7050 firewall and up to ten NPCs in the PA-7080 firewall. These firewalls also include a dedicated
high availability (HA) control port (HA1), as well as two dedicated 80Gb QSFP HA ports for HA2 (data link) and
HA3 (packet forwarding) functions. These dedicated HA ports enable PA-7000 Series firewalls to function with full
hardware redundancy in either an active/passive or active/active configuration. Additionally, to improve logging
performance, the firewalls use a dedicated log card to handle all log processing tasks.
•“PA-7050 Front and Back Panel Descriptions” on page 5
•“PA-7080 Front and Back Panel Descriptions” on page 12
PA-7050 Front and Back Panel Descriptions
•“PA-7050 Front Panel (AC)” on page 6
•“PA-7050 Back Panel (AC)” on page 8
•“PA-7050 Front Panel (DC)” on page 10
•“PA-7050 Back Panel (DC)” on page 11
Note: The minimum software version that you can install on a PA-7050 firewall is PAN-OS 6.0 and
the minimum software version for the PA-7080 firewall is PAN-OS 7.0.

PA-7050 Front and Back Panel Descriptions
6• PA-7000 Series Firewall Overview Palo Alto Networks
PA-7050 Front Panel (AC)
Figure 1 shows the front panel of the PA-7050 firewall with AC power supplies installed and Table 1 describes the
front panel features.
Figure 1. PA-7050 Front Panel (AC)
1
2
3
5
6
7
8
1
2
3
5
6
7
8
ACTIVITY
FAULT
PA-7000-20G-NPC
PA-7000-BLANK
PA-7000-BLANK
PA-7000-BLANK
PA-7050-SMC
PA-7000-BLANK
PA-7000-BLANK
PA-7000-AMC-1TB
POWER ACTIVITY
FAULT
1 3 5 7 9 11
2 4 6 8 10 12 14 16 18 20 22 24
13 15 17 19 21 23
PA-7000-AMC-1TB
POWER ACTIVITY
FAULT
PA-7000-AMC-1TB
POWER ACTIVITY
FAULT
PWR
STS
ALM
TMP
PWR
STS
HA
TMP
HA1-A HA1-B MGT
CONSOLE HSCI-A HSCI-B
USB
ALM
FAN
PS
LOG
POWER
PA-7050-FAN
FAULT
POWER
PA-7050-FAN
FAULT
PA-7000-AMC-1TB
POWER
PA-7050
4
SMC
4
SMC
1
2
3
5
6
7
4
8

Palo Alto Networks PA-7000 Series Firewall Overview • 7
PA-7050 Front and Back Panel Descriptions
Table 1. PA-7050 Front Panel Features (AC)
Item Description
1. Exhaust fan tray Provides ventilation and cooling for the chassis. The fan tray is
interchangeable, so you can install it in either fan tray slot.
During normal operation, the Power LED is green and the Fault LED is
off. If an individual fan fails on the fan tray, the Power LED turns off and
the red Fault LED illuminates.
For information on replacing a fan tray, see “Replace a PA-7050 Fan Tray”
on page 116.
2. Air intake fan tray Provides ventilation and cooling for the chassis. The fan tray is
interchangeable, so you can install it in either fan tray slot.
During normal operation, the Power LED is green and the Fault LED is
off. If an individual fan fails on the fan tray, the Power LED turns off and
the red Fault LED illuminates.
For information on replacing a fan tray, see “Replace a PA-7050 Fan Tray”
on page 116.
3. Switch Management
Card (SMC)
Provides management access to the chassis using a serial console cable
connected to the Console port or an RJ-45 cable connected to the
management (MGT) port. The SMC also contains high availability (HA)
ports and the LED indicators provide information on various chassis
components.
IMPORTANT: The SMC is required to operate the chassis and on a
PA-7050 firewall, it must be installed in slot 4.
For more information, see “Switch Management Card (SMC)” on page 24.
The PAN-OS® software is preinstalled on the embedded solid-
state drive (SSD) on the SMC; the SSD is not serviceable.
4. Air filter Filters air entering the chassis. Periodically inspect the filter to ensure it is
clean. The filter is not designed to be cleaned and it is recommended that
you replace it every six months.
5. Network Processing
Card (NPC)
Provides network connectivity.
IMPORTANT: On a PA-7050 firewall, you can install up to six NPCs (in
slots 1, 2, 3, 5, 6, and/or 7). You must have at least one NPC installed
before the firewall can process network traffic.
For more information, see “Network Processing Cards (NPCs)” on
page 32.
6. Log Processing Card
(LPC)
Manages and stores all logs generated by the firewall. The LPC contains
four disk drives that are configured in two separate RAID 1 pairs to
provide redundancy. Each drive is installed in an Advanced Mezzanine
Card (AMC), which physically connects the drive to the LPC. When
replacing a drive, the AMC and drives are ordered and installed as one
unit.
IMPORTANT: The LPC is required and must be installed in slot 8 for
chassis operation.
For more information, see “Log Processing Card (LPC)” on page 30.

PA-7050 Front and Back Panel Descriptions
8• PA-7000 Series Firewall Overview Palo Alto Networks
PA-7050 Back Panel (AC)
Figure 2 shows the back panel of the PA-7050 firewall and Table 2 describes the back panel features.
Figure 2. PA-7050 Back Panel (AC)
7. AC power supplies Provides power to the chassis using an AC power source.
For information on connecting power, see “Connect Power to a PA-7000
Series Firewall” on page 68.
8. Electrostatic Discharge
(ESD) ports
Provides a grounding point that you use when removing or installing
chassis components. Secure the provided wrist strap end of the ESD strap
around your wrist and plug the other end into one of the ESD ports.
Table 1. PA-7050 Front Panel Features (AC) (Continued)
Item Description
1
2
3

Palo Alto Networks PA-7000 Series Firewall Overview • 9
PA-7050 Front and Back Panel Descriptions
Table 2. PA-7050 Back Panel Features (AC)
Item Description
1. Ground stud Two-post stud used to ground the chassis to earth ground. Use the provided
6 AWG two-post ground lug to connect a grounded cable (not included) to
the two-post stud.
2. Power Entry Module
(PEM) AC power inlets
Connects the power source to the power supplies located on the front of the
chassis. The front power supplies then distributes power to all chassis
components.
The AC PEM contains four 20-amp AC power inlets—each accompanied
by a switch—one pair, inlet with switch, for each power supply.
If you are facing the back of the chassis, the inlet and switch on the far left
side provides power to the power supply on the far right side when facing
the front of the chassis.
For information on connecting power, see “Connect Power to a PA-7000
Series Firewall” on page 68.
The AC PEMs are not field-serviceable.
3. Power Entry Module
(PEM) AC power
switches
Provides switches to power on or off the AC power supplies. Each switch
has a circuit breaker that will trip if the load reaches 25-amps.

PA-7050 Front and Back Panel Descriptions
10 • PA-7000 Series Firewall Overview Palo Alto Networks
PA-7050 Front Panel (DC)
Figure 3 shows the front panel of the PA-7050 firewall with DC power supplies.
Figure 3. PA-7050 Front Panel (DC)
Note: The only difference between the front panel of the AC platform and the front panel of the DC
platform is that the DC platform has four front DC power supplies instead of four AC power supplies.
For descriptions of the front panel components, see “PA-7050 Front Panel (AC)” on page 6 and for
information on connecting DC power, see “Connect Power to a PA-7000 Series Firewall” on page 68.
1
2
3
5
6
7
8
1
2
3
5
6
7
8
ACTIVITY
FAULT
PA-7000-20G-NPC
PA-7000-BLANK
PA-7000-BLANK
PA-7000-BLANK
PA-7050-SMC
PA-7000-BLANK
PA-7000-BLANK
PA-7000-AMC-1TB
POWER ACTIVITY
FAULT
1 3 5 7 9 11
2 4 6 8 10 12 14 16 18 20 22 24
13 15 17 19 21 23
PA-7000-AMC-1TB
POWER ACTIVITY
FAULT
PA-7000-AMC-1TB
POWER ACTIVITY
FAULT
PWR
STS
ALM
TMP
PWR
STS
HA
TMP
HA1-A HA1-B MGT
CONSOLE HSCI-A HSCI-B
USB
ALM
FAN
PS
LOG
POWER
PA-7050-FAN
FAULT
POWER
PA-7050-FAN
FAULT
PA-7000-AMC-1TB
POWER
PA-7050
4
SMC
4
SMC
Four DC Power Supplies

Palo Alto Networks PA-7000 Series Firewall Overview • 11
PA-7050 Front and Back Panel Descriptions
PA-7050 Back Panel (DC)
Figure 4 shows the back panel of the PA-7050 firewall. The AC inlets and switches are not functional and must
remain covered using the provided cover plate.
Figure 4. PA-7050 Back Panel (DC)
Note: The only differences between the back panel of the AC platform and the
back panel of the DC platform is that the DC platform does not have a Power Entry
Modules (PEM); the DC power source connects directly to the front of the power
supplies. For descriptions of the back panel components, see “PA-7050 Back
Panel (AC)” on page 8.
Ground Studs AC Inlet and Power Switch Cover Plate
(Only used when DC power supplies are installed)

PA-7080 Front and Back Panel Descriptions
12 • PA-7000 Series Firewall Overview Palo Alto Networks
PA-7080 Front and Back Panel Descriptions
•“PA-7080 Front Panel (AC)” on page 13
•“PA-7080 Back Panel (AC)” on page 16
•“PA-7080 Front Panel (DC)” on page 18
•“PA-7080 Back Panel (DC)” on page 20

Palo Alto Networks PA-7000 Series Firewall Overview • 13
PA-7080 Front and Back Panel Descriptions
PA-7080 Front Panel (AC)
Figure 5 shows the front panel of the PA-7080 firewall with AC power supplies and Table 3 describes the front panel
features.
Figure 5. PA-7080 Front Panel (AC)
1
2
3
5
6
7
8
4
9
10
11

PA-7080 Front and Back Panel Descriptions
14 • PA-7000 Series Firewall Overview Palo Alto Networks
Table 3. PA-7080 Front Panel Features (AC)
Item Description
1. Exhaust fan tray Provides ventilation and cooling for the chassis. The fan trays is
interchangeable, so you can install it in either fan tray slot.
During normal operation, the Power LED is green and the Fault LED is
off. If an individual fan fails on the fan tray, the Power LED turns off and
the red Fault LED illuminates.
For information on replacing a fan tray, see “Replace a PA-7080 Fan Tray”
on page 119.
2. Upper cable guide (Optional) Provides cable management to route Ethernet cables and the
console cable. This item ships with the chassis but is not preinstalled.
3. Switch Management
Card (SMC)
Provides management access to the chassis using a serial console cable
connected to the Console port or an RJ-45 cable connected to the
management (MGT) port. The SMC also contains high availability (HA)
ports. The LED indicators provide information on various chassis
components.
IMPORTANT: The SMC is required to operate the chassis and a
PA-7080 firewall, it must be installed in slot 6.
For more information, see “Switch Management Card (SMC)” on page 24.
The PAN-OS® software is preinstalled on the embedded solid-
state drive (SSD) on the SMC; the SSD is not serviceable.
4. Log Processing Card
(LPC)
Manages and stores all logs generated by the firewall. The LPC contains
four disk drives that are configured in two separate RAID 1 pairs to
provide redundancy. Each drive is installed in an Advanced Mezzanine
Card (AMC), which physically connects the drive to the LPC. When
replacing a drive, the AMC and drives are ordered and installed as one
unit.
IMPORTANT: The LPC is required and on a PA-7080 firewall, it must be
installed in slot 7 for chassis operation.
For more information, see “Log Processing Card (LPC)” on page 30.
5. Network Processing
Card (NPC)
Provides network connectivity.
IMPORTANT: On a PA-7080 firewall, you can install up to 10 NPCs (in
slots 1, 2, 3, 4, 5, 8, 9, 10, 11, and/or slot 12). You must have at least one
NPC installed before the firewall can process network traffic.
For more information, see “Network Processing Cards (NPCs)” on
page 32.
6. Lower cable guide (Optional) Provides cable management to route fiber optic cables. This
item ships with the chassis but is not preinstalled.
7. Air intake fan tray Provides ventilation and cooling for the chassis. The fan tray is
interchangeable, so you can install it in either fan tray slot.
During normal operation, the Power LED is green and the Fault LED is
off. If an individual fan fail on the fan tray, the Power LED turns off and
the red Fault LED illuminates.
For information on replacing a fan tray, see “Replace a PA-7080 Fan Tray”
on page 119.
8. Electrostatic Discharge
(ESD) ports
Provides a grounding point that you use when removing or installing
chassis components. Secure the provided wrist strap end of the ESD strap
around your wrist and plug the other end into one of the ESD ports.

Palo Alto Networks PA-7000 Series Firewall Overview • 15
PA-7080 Front and Back Panel Descriptions
9. Air filter Filters air entering the chassis. Periodically inspect the filter to ensure it is
clean. The filter is not designed to be cleaned and it is recommended that
you replace it every six months.
10. Air intake vent Provides air circulation for chassis cooling. Do not obstruct this vent.
11. AC power supplies Provides power to the chassis using an AC power source.
For information on connecting power, see “Connect Power to a PA-7000
Series Firewall” on page 68.
Table 3. PA-7080 Front Panel Features (AC) (Continued)
Item Description

PA-7080 Front and Back Panel Descriptions
16 • PA-7000 Series Firewall Overview Palo Alto Networks
PA-7080 Back Panel (AC)
Figure 6 shows the back panel of the PA-7080 firewall with AC power supplies and Table 4 describes the back panel
features.
Figure 6. PA-7080 Back Panel (AC)
1
2
3
4

Palo Alto Networks PA-7000 Series Firewall Overview • 17
PA-7080 Front and Back Panel Descriptions
Table 4. PA-7080 Back Panel Features (DC)
Item Description
1. Exhaust vent Provides air circulation for chassis cooling. Do not obstruct this vent.
2. Ground stud Two-post stud used to ground the chassis to earth ground. Use the provided
6 AWG two-post ground lug to connect a grounded cable (not included) to
the two-post stud.
3. Power Entry Module
(PEM) AC power inlets
Connects the power source to the power supplies located on the front of the
chassis. The front power supplies then distributes power to all chassis
components.
The AC PEM contains four 20-amp AC power inlets—each accompanied
by a switch—one pair, inlet with switch, for each power supply.
If you are facing the back of the chassis, the inlet and switch on the far left
side provides power to the power supply on the far right side when facing
the front of the chassis.
The AC PEMs are not field-serviceable.
4. Power Entry Module
(PEM) AC power
switches
Provides switches to power on or off the AC power supplies. Each switch
has a circuit breaker that will trip if the load reaches 25-amps.

PA-7080 Front and Back Panel Descriptions
18 • PA-7000 Series Firewall Overview Palo Alto Networks
PA-7080 Front Panel (DC)
Figure 7 shows the front panel of the PA-7080 firewall with DC power supplies installed.
Note: The front AC and DC power supplies are almost identical, but they are keyed differently to
prevent you from installing them in the incorrect platform. You will also notice that the top two LEDs on
the power supplies are different; the DC platform has direct current symbols and the AC platform has
alternating current symbols. For an illustration, see Figure 42 on page 69.
Note: The only difference between the front panel of the AC platform and the front panel of the DC
platform is that the DC platform can hold up to eight DC power supplies instead of AC power supplies.
For descriptions of the front panel components, see “PA-7080 Front Panel (AC)” on page 13 and for
information on connecting power, see “Connect Power to a PA-7000 Series Firewall” on page 68.

Palo Alto Networks PA-7000 Series Firewall Overview • 19
PA-7080 Front and Back Panel Descriptions
Figure 7. Front Panel (DC)

PA-7080 Front and Back Panel Descriptions
20 • PA-7000 Series Firewall Overview Palo Alto Networks
PA-7080 Back Panel (DC)
Figure 4 shows the back panel of the PA-7080 firewall.
Note: The only differences between the back panel AC platform and the back panel DC platform is
that the DC platform has two DC Power Entry Modules (PEMs) as shown in Figure 8 instead of two
AC PEMs. Each DC PEM contains two terminal strips, which connect eight wires (4 red positive and
4 black negative). The DC PEMs are field replaceable. For information on replacing a DC PEM, see
“Replace a PA-7080 DC Power Entry Module (PEM)” on page 93 and for descriptions of the back
panel components, see “PA-7080 Back Panel (AC)” on page 16.