PaloAlto Networks PA-400 Series User manual

PA-415-5G
docs.paloaltonetworks.com
1
3
Before You Begin
Use this document to install and begin setting up your Palo Alto Networks PA-415-5G Next-Generation firewall. Refer to the
PA-400 Series Next-Gen Firewall Hardware Reference at https://docs.paloaltonetworks.com/hardware for safety information,
specifications, and more detailed procedures for installing the firewall.
◼Verify that the installation site has adequate air circulation and AC power.
◼Have a #1 Phillips-head screwdriver available.
◼Unpack the equipment and verify that you received the following items:
Page 1 of 2
Quick Start Guide
Qty Description
1PA-415-5G next-generation firewall.
1Power adapter.
1Console cable.
1Power Cord, AC, North America, 10A/125V, 75C, 1.8M, St., SVT, NEMA-5-15P (YP-12) to IEC-C13 (YC-12).
1Shielded RJ-45 CAT6 Ethernet cable for management (MGT) port access.
6Wood screws (.75”) to mount the firewall and power adapter bracket to wood studs or plywood.
6Drywall anchors and screws (1.25”) to mount the firewall and power adapter bracket to a drywall or similar material that cannot
securely accommodate wood screws.
1Power adapter wall-mount kit (includes one (1) each of the following: a power adapter bracket, a Velcro strap, and a plastic
cable tie).
1Sheet, Limited Warranty.
1China RoHS declaration.
Install the Firewall
There are three ways to install the PA-415-5G firewall:
◼On a flat surface
◼On a wall
◼In a 19” equipment rack
Install the Firewall on a Flat Surface
The PA-415-5G firewall ships with rubber “feet” attached to the bottom of the device. The firewall can be set horizontally
upon a flat surface.
Install the Firewall on a Wall
1 Temporarily secure the Wall Mount Template (on the following page) to the wall where you intend to mount the firewall and use it to mark
the location for each of the four wall-mount screws (Figure 3). Use a pointed object to punch through the paper and visibly mark the wall;
then remove the template and verify measurements.
Ensure there are no building services (water, gas, or wiring) behind the wall where you intend to install the firewall.
2 Use a Phillips-head screwdriver to install the appropriate screws into each of the four marked locations:
◼Drywall—First press a drywall anchor slightly into the center of a template mark. Then use your screwdriver to apply pressure while
turning the anchor clockwise until the surface of the anchor is flush with the wall. After the drywall anchor is secure, install a 1.25”
anchor screw into the anchor until the bottom of the screw head protrudes ¼” from the wall. Repeat this step for the other three screw
locations. If any screw location is located over wood, use a .75” wood screw instead of a drywall anchor and screw.
◼Plywood wall—Use your screwdriver to insert a .75” wood screw into the center of each template mark that is located over wood until
the bottom of the screw heads protrude ¼” from the wall.
3 Align the four holes on the bottom of the firewall with the four screws on the wall and hang the firewall on the screws.
4 Install the power adapter in the power adapter wall mount bracket by first placing the power supply into the bracket. Next, loop the two
Velcro straps through the side openings on the wall mount and over the power adaptor. Lastly, loop the Velcro strap back over the top of the
power adaptor to secure it into place (Figures 4 and 5).
5 Mount the power adapter wall-mount bracket next to the firewall using wood or drywall screws as appropriate.
Figure 3
2Install the Firewall Antennas
The PA-415-5G supports four multi-band antennas that must be installed before you install the firewall in an equipment rack.
1 Secure the antennas to the SMA connectors located at the corners of the device.
2 Rotate the antennas at 180-degree movement about the SMA connectors. Tighten the antennas by hand. (Figure 1)
3 Adjust the antenna orientation to receive the optimal signal strength in your environment. (Figure 2)
Before installation, it is recommended that you conduct a cellular location assessment of the installation site to receive the best signal
strength.
If installing the firewall on a wall or flat surface, it is recommended that you orient the antennas upright and slanted slightly outwards, not
exceeding 45-degrees, to improve the signal quality.
Do not point the antennas towards one another or place them close to one another.
Ensure that power cables do not cross over the antennas as this can cause signal quality distortion and antenna performance degradation.
Figure 1 Figure 2

PA-415-5G QUICK START GUIDE (CONTINUED)
docs.paloaltonetworks.com | © 2023 | Palo Alto Networks, Inc. Page 2 of 3
Figure 4
Figure 5
Install the Firewall in a 19” Equipment Rack
The rack kit (PAN-1RU-RGD-RACK-KIT-4POST) is not included with the firewall and must be purchased separately.
The mounting equipment takes up 1RU of space. One rack kit holds a single PA-415-5G.
1 Slide one of the adjustable mounting brackets into one of the fixed mounting brackets to create a mounting rail. Repeat for the second
mounting rail. The adjustable and fixed brackets are the same for the left and right side. (Figure 6)
2 Align the bottom edge of the mounting rails to the bottom of the 1 RU reserved for your firewall. Align the slotted holes in the adjustable
mounting bracket to the holes on the rear of the equipment frame.
3 Secure the rails to the equipment frame with mounting screws (not provided) compatible with your equipment frame. Tighten the screws to
their recommended torque value. (Figure 7)
4 With the front of the firewall facing forward, align the four rubber feet on the bottom of the device to the slotted holes in the provided
mounting tray. (Figure 8)
5 While holding the firewall, carefully flip the mounting tray over to reveal its underside.
6 Secure the firewall in place using three of the provided #6-32 x 3/16” Long Flathead screws. (Figure 9)
7 Flip the mounting tray back into an upright position.
8 Slide the firewall power supply into the marked position. Fasten the provided velcro strap around the power supply until it is secure in place.
(Figure 10)
9 Plug the power supply connector into the back or front of the firewall depending on where the power input is located. Using the provided
tie-wraps, bind and secure the power supply cable to the metal hooks in the mounting tray.
10 Slide the mounting tray into the rails previously fixed to the equipment rack. Stop when the front flange on the mounting tray is flush with
the front of the rail.
11 Align the slotted holes in the mounting tray to the holes in the equipment frame. Secure the mounting tray to the equipment frame on both
sides using 3 screws each (not provided). The screws must be compatible with your equipment frame. (Figure 11)
Figure 6 Figure 7
Use the provided bracket on the mounting tray to keep the power adapter cable in place.
13 cm
13 cm
11.5 cm
11.5 cm
Wall Mount Template
Figure 8

PA-415-5G QUICK START GUIDE (CONTINUED)
docs.paloaltonetworks.com | © 2023 | Palo Alto Networks, Inc.
4
5Connect to the Management Interface
Page 3 of 3
Where To Go Next
To learn more about the firewall, refer to the PA-400 Series Next-Gen Firewall Hardware Reference Guide:
https://docs.paloaltonetworks.com/hardware.
To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:
https://docs.paloaltonetworks.com.
(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)
Start here to Register and Set Up your firewall and access all resources and support tools:
https://go.paloaltonetworks.com/CustomerLaunchPad
Power On the Firewall
1 Connect the DC connector from the power adapter into one of the power adapter ports on the firewall and tighten the thumb screw to secure
the cable to the firewall (Figure 12).
2 Plug the AC connector from the power adapter into your AC power source. After power is connected, the firewall powers on as indicated by the
green power LED on the front of the device. The LED shows green when a functioning power adapter is connected.
3 (Optional) Repeat Steps 1 and 2 for a second power adapter. The PA-415-5G can use an optional second power adapter for redundancy.
Connect in ZTP Mode
1 Unbox the firewall.
2 Connect the ZTP port (Ethernet port 1) on the firewall to an active network switch.
3 Power on the firewall.
4 Follow the instructions provided by your Panorama administrator to register your ZTP firewall. You will have to enter the serial number
(12-digit number identified as S/N) and claim key (8-digit number). These numbers are on stickers attached to the back of the device.
5 Contact your Panorama administrator if you require further assistance.
Figure 12
If you are booting the firewall in non-ZTP mode (Standard mode), follow the instructions in Step 5 before proceeding to power on the
firewall.
Connect in Standard Mode (Via Web Interface)
1 Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall.
2 Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
3 Power on the firewall.
4 From a web browser, go to https://192.168.1.1.
5 On the firewall login screen, a prompt will ask if you wish to continue booting in ZTP
mode or if you would like to switch to standard mode. Select Standard Mode and the
firewall will begin rebooting in standard mode.
Connect in Standard Mode (Via CLI)
1 Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall.
2 Ensure that you have access to a terminal emulator such as PuTTY.
3 Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
4 Power on the firewall.
5 Access the firewall CLI using your terminal emulator. Watch for the following prompt:
Do you want to exit ZTP mode and configure your firewall in standard mode (yes/no)[no]?
Enter “yes.” The system will then ask you to confirm. Enter “yes” again to boot the firewall in standard mode
6 Stand by for approximately 5 minutes as the firewall boots up.
7 From a web browser, go to https://192.168.1.1.
8 When prompted, log in to the web interface using the default username and password (admin/admin).
Figure 9
Figure 10
Figure 11