PaloAlto Networks PA-800 SERIES User manual

PA-800 SERIES NEXT-GEN FIREWALL QUICK START GUIDE
paloaltonetworks.com/documentaon
1
2
Before You Begin
Use this document to install and begin setting up your Palo Alto Networks PA-820 or PA-850 next-generation firewall. Refer to the
PA-800 Series Next Gen Firewall Hardware Reference at hps://www.paloaltonetworks.com/documentaon/plaorms for safety
information, specifications, and more detailed procedures for installing the firewall.
• Verify that the installation site has adequate air circulation and AC power.
• Have a #1 and #2 Phillips-head torque driver available. Use the #1 Phillips-head bit to attach the rack-mount brackets to the
firewall and use the #2 bit to secure the rack-mount brackets to the equipment rack posts.
• Unpack the equipment and verify that you received the following items:
Rack Mount the Firewall
The PA-800 Series firewall ships with two rack-mount brackets for an installation in a two-post or four-post 19” equipment
rack. If you install the rewall in a four-post rack, you can purchase an oponal four-post kit to secure the rewall to the
back rack posts to provide addional support. Both procedures are covered in this section.
Install the Firewall in a Two-Post Equipment Rack
1. Attach one rack-mount bracket to each side of the firewall using four #6-32 x 5/16” screws for each bracket (Figure 1) and
torque to 9 in-lbs. For a two-post rack, we recommend that you install the brackets in the mid-mount position as shown in
Figure 1. For a four-post rack or cabinet, install the rack-mount brackets in the front-mount position as shown in Figure 3.
Ensure that the equipment rack is properly anchored so it can support the weight of the installed equipment.
2. With help from another person, hold the firewall in place in the rack and secure the rack-mount brackets to the rack using
two screws for each bracket (Figure 2). Use the appropriate screws (#10-32 x 3/4” or #12-24 x 1/2”) for your rack and
torque to 25 in-lbs. Use cage nuts (not provided) to secure the screws if the rack has square holes.
Figure 1
Attach Front Rack-Mount Brackets
Figure 2
Secure the Firewall to the Rack
Figure 3
Attach Front Rack-Mount Brackets
Figure 4
Attach Side Rack-Mount Rails
Figure 6
Install the Back Brackets and Secure them to the Back Rack Posts
(Optional) Install the Four-Post Rack Kit
1. Attach one rack-mount bracket to each side of the firewall using four #6-32 x 5/16” screws for each bracket (Figure 3) and torque to
9 in-lbs.
2. Attach one side rack-mount rail to each side of the firewall using two #6-32 x 5/16” screws for each bracket (Figure 4) and torque to
9 in-lbs. The side rack-mount rail screws ship with the four-post rack kit.
3. With help from another person, hold the firewall in the rack and secure the rack-mount brackets to the front rack posts using two
screws for each bracket (Figure 5). Use the appropriate screws (#10-32 x 3/4” or #12-24 x 1/2”) for your rack and torque to 25 in-lbs.
Use cage nuts (not provided) to secure the screws if the rack has square holes.
4. Slide one back rack-mount bracket into each of the two previously installed side rack-mount rails and secure the brackets to the back
rack posts (Figure 6) using the appropriate screws for your rack (#10-32 x 3/4” or #12-24 x 1/2”) and torque to 25 in-lbs.
Figure 5
Secure the Firewall to the Front Rack Posts
Qty Descripon
1PA-800 Series next-generaon rewall.
1 or 2 AC power cord (the PA-820 rewall ships with 1 cord and the PA-850 ships with 2 cords).
2(PA-850 only) Velcro straps to secure the AC power cords to the power supplies.
1 Standard Type-A USB to micro USB console cable.
1Standard RJ-45 CAT6 Ethernet cable for management (MGT) port access.
2Front rack-mount brackets used to secure the rewall to a two-post or four-post equipment rack.
8#6-32 x 5/16” front rack-mount bracket screws to aach the front rack-mount brackets to the rewall.
4 #10-32 x 3/4” rack-mount screws to secure the front rack-mount brackets to a rack with #10-32 threaded holes.
4 #12-24 x 1/2” rack-mount screws to secure the front rack-mount brackets to a rack with #12-24 threaded holes.
1End User License Agreement (EULA).
1China RoHS declaraon.

PA-800 SERIES NEXT-GEN FIREWALL QUICK START GUIDE (CONTINUED)
paloaltonetworks.com/documentaon | © 2017 | Palo Alto Networks, Inc. | Part Number: 810-000261-00D
3Power On the Firewall
The PA-820 firewall has one power supply. The PA-850 firewall has two power supplies for power redundancy.
1. Remove the nut and star washer from the ground stud (Figure 7) and attach a 14-AWG ground cable (not included) to
the ground stud.
2. Secure the ground cable to the stud using the star washer and nut and torque to 25 in-lbs. Connect the other end of the
cable to earth ground.
3. Connect the AC power cord to the power input on the back of the firewall (Figure 8). On a PA-850 firewall, secure the
cord to the power supply using the Velcro strap (Figure 9).
4. Connect the other end of the power cord to an AC power source. After power is connected, the firewall powers on as
indicated by the PWR LED on the front of the firewall. On a PA-850 firewall, the LED on the power supply also shows
green.
5. (PA-850 firewall only) To provide power redundancy, connect a power cord to the second power supply, secure the
cord using the Velcro strap, and connect the other end of the cord to an AC power source.
Connect the second power cord through a different circuit breaker to provide power redundancy and allow for
electrical circuit maintenance.
Figure 9
Secure Power Cord
ABC
PA-820 Power Input PA-850 Power Inputs
Figure 8
Power Input
Figure 7
Ground Stud
4
Where to Go Next
• To learn more about the firewall, refer to the PA-800 Series Next-Gen Firewall Hardware Reference:
https://www.paloaltonetworks.com/documentation/platforms.
• To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:
https://www.paloaltonetworks.com/documentation.
(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)
• To contact support, go to:
https://www.paloaltonetworks.com/company/contact-support.
Connect to the Management Interface
1. Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the
firewall (Figure 10).
2. Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
3. From a web browser, go to https://192.168.1.1.
4. When prompted, log in to the web interface using the default username and password (admin/admin).
Figure 10
Connect to the Management (MGT) Port
(Optional) If you are not able to connect to the web interface, check the status of the firewall by connecting to the
micro USB or RJ-45 console port. The console connection provides access to firewall boot messages, maintenance
mode, and the command line interface (CLI). For information about downloading the micro USB Windows driver
and instructions on how to connect using a Mac or Linux computer, refer to hps://www.paloaltonetworks.com/
documentaon/misc/micro-usb-console.