PaloAlto Networks PA-7000 Series Application guide

PA-7000 Series Firewall Hardware
Reference
docs.paloaltonetworks.com

Contact Information
Corporate Headquarters:
Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95054
www.paloaltonetworks.com/company/contact-support
About the Documentation
• For the most recent version of this guide or for access to related documentation, visit the Technical
Documentation portal docs.paloaltonetworks.com.
• To search for a specific topic, go to our search page docs.paloaltonetworks.com/search.html.
• Have feedback or questions for us? Leave a comment on any page in the portal, or write to us at
[email protected].
Copyright
Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2018-2023 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo
Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/
trademarks.html. All other marks mentioned herein may be trademarks of their respective companies.
Last Revised
July 21, 2023
PA-7000 Series Firewall Hardware Reference 2©2023 Palo Alto Networks, Inc.

Table of Contents
Before You Begin............................................................................................... 7
Upgrade/Downgrade Considerations for Firewalls and Appliances................................8
Tamper Proof Statement........................................................................................................... 9
Third-Party Component Support...........................................................................................10
Product Safety Warnings........................................................................................................ 11
PA-7000 Series Firewall Overview............................................................. 15
PA-7050 Front and Back Panel Descriptions.....................................................................16
PA-7050 Front Panel (AC)...........................................................................................16
PA-7050 Back Panel (AC)............................................................................................19
PA-7050 Front Panel (DC).......................................................................................... 20
PA-7050 Back Panel (DC)........................................................................................... 21
PA-7080 Front and Back Panel Descriptions.....................................................................23
PA-7080 Front Panel (AC)...........................................................................................23
PA-7080 Back Panel (AC)............................................................................................27
PA-7080 Front Panel (DC).......................................................................................... 29
PA-7080 Back Panel (DC)........................................................................................... 30
PA-7000 Series Firewall Module and Interface Card Information.......33
PA-7000 Series Firewall Switch Management Cards (SMCs).........................................34
PA-7000 Series Firewall SMC Component Descriptions.....................................34
PA-7000 Series Firewall SMC-B Component Descriptions.................................38
PA-7000 Series Firewall SMC-B Requirements..................................................... 41
Interpret the PA-7000 Series Firewall SMC LEDs.................................................41
PA-7000 Series Firewall Log Cards...................................................................................... 46
PA-7000 Series Firewall Log Processing Card (LPC).............................................46
PA-7000 Series Firewall Log Forwarding Card (LFC)........................................... 48
PA-7000 Series Firewall Network Processing Cards (NPCs)..........................................54
PA-7000 20G NPC........................................................................................................54
PA-7000 20GXM NPC................................................................................................. 57
PA-7000 20GQ NPC.................................................................................................... 57
PA-7000 20GQXM NPC..............................................................................................60
PA-7000 100G NPC..................................................................................................... 60
Identify PA-7000 Series NPC Port Activity and Link LEDs.................................64
PA-7000 Series Firewall Data Processing Card (DPC).....................................................65
Interpret the PA-7000 Series DPC LEDS................................................................ 65
PA-7000 Series Firewall Installation...........................................................69
PA-7000 Series Firewall Equipment Rack Installation..................................................... 70
PA-7000 Series Firewall Hardware Reference 3©2023 Palo Alto Networks, Inc.

Table of Contents
PA-7000 Series Firewall Rack Install Safety Information.....................................70
Install the PA-7050 Firewall in the Mid-Mount Position.....................................70
Install the PA-7050 Firewall in the Front-Mount Position.................................. 72
Install the PA-7080 Firewall in the Mid-Mount Position.....................................76
Install the PA-7080 Firewall in the Front-Mount Position.................................. 79
Install the Mandatory PA-7000 Series Firewall Front Slot Cards..................................83
Install a PA-7000 Series Switch Management Card..............................................83
Install a PA-7000 Series Firewall Log Card.............................................................88
Install a PA-7000 Series Firewall Network Processing Card (NPC)................... 95
Install a PA-7000 Series Firewall Data Processing Card (DPC)........................102
Configure Session Distribution on a PA-7000 Series Firewall......................... 107
Connect Power to a PA-7000 Series Firewall.................................................................108
PA-7000 Series Power Configuration Options....................................................108
Determine PA-7000 Series Firewall Power Configuration Requirements..... 109
Connect AC Power to a PA-7050 Firewall...........................................................110
Connect DC Power to a PA-7050 Firewall...........................................................112
Connect AC Power to a PA-7080 Firewall...........................................................114
Connect DC Power to a PA-7080 Firewall...........................................................116
View PA-7000 Series Firewall Power Statistics.................................................. 119
Connect Cables to a PA-7000 Series Firewall.................................................................122
Verify the PA-7000 Series Firewall LPC and NPC Configuration............................... 124
Verify the PA-7000 Series Firewall LPC Configuration..................................... 124
Verify the PA-7000 Series Firewall NPC Configuration.................................... 125
Install the PA-7080 Firewall EMI Filter.............................................................................127
Service the PA-7000 Series Firewall Hardware.....................................129
Replace a PA-7000 Series Firewall AC or DC Power Supply.......................................130
Interpret the PA-7000 Series Firewall Power Supply LEDs..............................130
Replace a PA-7000 Series AC Power Supply.......................................................131
Replace a PA-7000 Series DC Power Supply.......................................................135
Replace a PA-7080 DC PEM....................................................................................140
Replace a PA-7000 Series Firewall Fan Tray...................................................................142
Replace a PA-7050 Fan Tray................................................................................... 142
Replace a PA-7080 Fan Tray................................................................................... 147
Replace a PA-7000 Series Firewall Air Filter...................................................................150
Replace a PA-7000 Series Firewall Front Slot Card.......................................................154
Replace a PA-7000 Series Switch Management Card (SMC)........................... 154
Replace a PA-7000 Series Log Card.......................................................................158
Replace a PA-7000 Series Network Processing Card (NPC)............................ 163
Replace a PA-7000 Series Data Processing Card (DPC)....................................172
Replace a PA-7000 Series SMC Boot Drive.................................................................... 180
PA-7000 Series Firewall Hardware Reference 4©2023 Palo Alto Networks, Inc.

Table of Contents
Replace a PA-7000 Series Firewall LPC Drive................................................................ 183
Re-Index the LPC Drives...................................................................................................... 190
Replace a PA-7050-SMC-B or PA-7080-SMC-B Drive.................................................194
Increase the PA-7000 Series Firewall LPC Log Storage Capacity...............................199
PA-7000 Series Firewall Specifications................................................... 209
PA-7000 Series Firewall Physical Specifications.............................................................210
PA-7000 Series Firewall Electrical Specifications...........................................................213
PA-7000 Series Firewall Component Electrical Specifications.........................213
PA-7000 Series Firewall Power Cord Types........................................................ 214
PA-7000 Series Firewall Environmental Specifications.................................................216
PA-7000 Series Firewall Hardware Compliance Statements............. 217
PA-7000 Series Firewall Compliance Statements.......................................................... 218
PA-7000 Series Firewall Hardware Reference 5©2023 Palo Alto Networks, Inc.

Table of Contents
PA-7000 Series Firewall Hardware Reference 6©2023 Palo Alto Networks, Inc.

Before You Begin
Read the following topics before you install or service a Palo Alto Networks® next-generation
firewall or appliance.The following topics apply to all Palo Alto Networks firewalls and appliances
except where noted.
•Upgrade/Downgrade Considerations for Firewalls and Appliances
•Tamper Proof Statement
•Third-Party Component Support
•Product Safety Warnings
7

Before You Begin
Upgrade/Downgrade Considerations for Firewalls and
Appliances
The following table lists all hardware features that have upgrade or downgrade impact. Make
sure you understand all upgrade/downgrade considerations before you upgrade or downgrade
from the specified version of PAN-OS.
Feature Release Upgrade Considerations Downgrade
Considerations
PA-7000 Log
Forwarding Card (LFC)
10.0 If you are using an LFC
with a PA-7000 Series
Firewall, when you
upgrade to PAN-OS
10.0, you must configure
the management plane
or dataplane interface
for the service route
because the LFC ports
do not support the
requirements for the
service route. We
recommend using the
dataplane interface for
the Data Services service
route.
n/a
Upgrading a PA-7000
Series Firewall with a
first generation switch
management card
(PA-7050-SMC or
PA-7080-SMC)
PAN-OS 8.0
and later
Before upgrading
the firewall, run the
following CLI command
to check the flash drive’s
status: debug system
disk-smart-info
disk-1.
If the value for
attribute ID #232,
Available_Reservd_Space
0x0000, is greater than
20, then proceed with
the upgrade. If the value
is less than 20, then
contact support for
assistance.
Before downgrading
the firewall, run the
following CLI command
to check the flash drive’s
status: debug system
disk-smart-info
disk-1.
If the value for
attribute ID #232,
Available_Reservd_Space
0x0000, is greater than
20, then proceed with
the downgrade. If the
value is less than 20,
then contact support for
assistance.
PA-7000 Series Firewall Hardware Reference 8©2023 Palo Alto Networks, Inc.

Before You Begin
Tamper Proof Statement
To ensure that products purchased from Palo Alto Networks were not tampered with during
shipping, verify the following upon receipt of each product:
• The tracking number provided to you electronically when ordering the product matches the
tracking number that is physically labeled on the box or crate.
• The integrity of the tamper-proof tape used to seal the box or crate is not compromised.
• The integrity of the warranty label on the firewall or appliance is not compromised.
(PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and
therefore do not include a warranty label on the firewall.
PA-7000 Series Firewall Hardware Reference 9©2023 Palo Alto Networks, Inc.

Before You Begin
Third-Party Component Support
Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party
Component Support statement.
PA-7000 Series Firewall Hardware Reference 10 ©2023 Palo Alto Networks, Inc.

Before You Begin
Product Safety Warnings
To avoid personal injury or death for yourself and others and to avoid damage to your Palo Alto
Networks hardware, be sure you understand and prepare for the following warnings before you
install or service the hardware. You will also see warning messages throughout the hardware
reference where potential hazards exist.
All Palo Alto Networks products with laser-based optical interfaces comply with 21 CFR
1040.10 and 1040.11.
The following safety warnings apply to all Palo Alto Networks firewalls and appliances, unless a
specific hardware model is specified.
• When installing or servicing a Palo Alto Networks firewall or appliance hardware component
that has exposed circuits, ensure that you wear an electrostatic discharge (ESD) strap. Before
handling the component, make sure the metal contact on the wrist strap is touching your skin
and that the other end of the strap is connected to earth ground.
French Translation: Lorsque vous installez ou que vous intervenez sur un composant matériel
de pare-feu ou de dispositif Palo Alto Networks qui présente des circuits exposés, veillez
à porter un bracelet antistatique. Avant de manipuler le composant, vérifiez que le contact
métallique du bracelet antistatique est en contact avec votre peau et que l’autre extrémité du
bracelet est raccordée à la terre.
• Use grounded and shielded Ethernet cables (when applicable) to ensure agency compliance
with electromagnetic compliance (EMC) regulations.
French Translation: Des câbles Ethernet blindés reliés à la terre doivent être utilisés pour
garantir la conformité de l'organisme aux émissions électromagnétiques (CEM).
• (PA-3200, PA-5200, PA-5400, PA-7050, and PA-7080 firewalls only) At least two people are
recommended for unpacking, handling, and relocating the heavier firewalls.
• Do not connect a supply voltage that exceeds the input range of the firewall or appliance. For
details on the electrical range, refer to electrical specifications in the hardware reference for
your firewall or appliance.
French Translation: Veillez à ce que la tension d’alimentation ne dépasse pas la plage d’entrée
du pare-feu ou du dispositif. Pour plus d’informations sur la mesure électrique, consulter la
rubrique des caractéristiques électriques dans la documentation de votre matériel de pare-feu
ou votre dispositif.
• (Devices with serviceable batteries only) Do not replace a battery with an incorrect battery
type; doing so can cause the replacement battery to explode. Dispose of used batteries
according to local regulations.
French Translation: Ne remplacez pas la batterie par une batterie de type non adapté, cette
dernière risquerait d’exploser. Mettez au rebut les batteries usagées conformément aux
instructions.
• I/O ports are intended for intra-building connections only and not intended for OSP (Outside
Plant) connections or any network connections subject to external voltage surge events.
PA-7000 Series Firewall Hardware Reference 11 ©2023 Palo Alto Networks, Inc.

Before You Begin
•(All Palo Alto Networks appliances)
Caution: Hot surface
Hardware components are hot and can cause burnt
hands and fingers.
Wait at least one-half hour after switching power off
to handle the hardware.
•(All Palo Alto Networks appliances with two or more
power supplies)
Caution: Shock hazard
Disconnect all power cords (AC or DC) from the power
inputs to fully de-energize the hardware.
French Translation: (Tous les appareils Palo Alto
Networks avec au moins deux sources d’alimentation)
Débranchez tous les cordons d’alimentation (c.a. ou
c.c.) des entrées d’alimentation et mettez le matériel
hors tension.
•(PA-7000 Series firewalls only)
Caution: High touch current
Connect to earth before connecting to the power
supply.
Ensure that the protective earthing conductor is
connected to the provided ground lug on the rear side
of the firewall.
•(PA-7000 Series firewalls only) When removing a fan
tray from a PA-7000 Series firewall, first pull the fan
tray out about 1 inch (2.5cm) and then wait a minimum
of 10 seconds before extracting the entire fan tray.
This allows the fans to stop spinning and helps you
avoid serious injury when removing the fan tray. You
can replace a fan tray while the firewall is powered
on but you must replace it within 45 seconds and you
can only replace one fan tray at a time to prevent the
thermal protection circuit from shutting down the
firewall.
French Translation: (Pare-feu PA-7000 uniquement)
Lors du retrait d’un tiroir de ventilation d’un pare-
feu PA-7000, retirez tout d’abord le tiroir sur 2,5 cm,
puis patientez au moins 10 secondes avant de retirer
complètement le tiroir de ventilation. Cela permet aux
PA-7000 Series Firewall Hardware Reference 12 ©2023 Palo Alto Networks, Inc.

Before You Begin
ventilateurs d’arrêter de tourner et permet d’éviter des
blessures graves lors du retrait du tiroir. Vous pouvez
remplacer un tiroir de ventilation lors de la mise sous
tension du pare-feu. Toutefois, vous devez le faire dans
les 45 secondes et vous ne pouvez remplacer qu’un
tiroir à la fois, sinon le circuit de protection thermique
arrêtera le pare-feu.
The following applies only to Palo Alto Networks firewalls that support a direct current (DC)
power source:
French Translation: Les instructions suivantes s’appliquent uniquement aux pare-feux de Palo
Alto Networks prenant en charge une source d’alimentation en courant continu (c.c.):
• Do not connect or disconnect energized DC wires to the power supply.
French Translation: Ne raccordez ni débranchez de câbles c.c. sous tension à la source
d’alimentation.
• The DC system must be earthed at a single (central) location.
French Translation: Le système c.c. doit être mis à la terre à un seul emplacement (central).
• The DC supply source must be located within the same premises as the firewall.
French Translation: La source d’alimentation c.c. doit se trouver dans les mêmes locaux que ce
pare-feu.
• The DC battery return wiring on the firewall must be connected as an isolated DC (DC-I)
return.
French Translation: Le câblage de retour de batterie c.c. sur le pare-feu doit être raccordé en
tant que retour c.c. isolé (CC-I).
• The firewall must be connected either directly to the DC supply system earthing electrode
conductor or to a bonding jumper from an earthing terminal bar or bus to which the DC supply
system earthing electrode conductor is connected.
French Translation: Ce pare-feu doit être branché directement sur le conducteur à électrode
de mise à la terre du système d’alimentation c.c. ou sur le connecteur d'une barrette/d'un bus
à bornes de mise à la terre auquel le conducteur à électrode de mise à la terre du système
d'alimentation c.c. est raccordé.
• The firewall must be in the same immediate area (such as adjacent cabinets) as any other
equipment that has a connection between the earthing conductor of the DC supply circuit and
the earthing of the DC system.
French Translation: Le pare-feu doit se trouver dans la même zone immédiate (des armoires
adjacentes par exemple) que tout autre équipement doté d’un raccordement entre le
conducteur de mise à la terre du même circuit d’alimentation c.c. et la mise à la terre du
système c.c.
• Do not disconnect the firewall in the earthed circuit conductor between the DC source and the
point of connection of the earthing electrode conductor.
French Translation: Ne débranchez pas le pare-feu du conducteur du circuit de mise à la terre
entre la source d'alimentation c.c. et le point de raccordement du conducteur à électrode de
mise à la terre.
PA-7000 Series Firewall Hardware Reference 13 ©2023 Palo Alto Networks, Inc.

Before You Begin
• Install all firewalls that use DC power in restricted access areas only. A restricted access area
is where access is granted only to craft (service) personnel using a special tool, lock and key, or
other means of security, and that is controlled by the authority responsible for the location.
French Translation: Tous les pare-feux utilisant une alimentation c.c. sont conçus pour être
installés dans des zones à accès limité uniquement. Une zone à accès limité correspond à une
zone dans laquelle l’accès n’est autorisé au personnel (de service) qu'à l'aide d'un outil spécial,
cadenas ou clé, ou autre dispositif de sécurité, et qui est contrôlée par l'autorité responsable du
site.
• Install the firewall DC ground cable only as described in the power connection procedure
for the firewall that you are installing. You must use the American wire gauge (AWG) cable
specified and torque all nuts to the torque value specified in the installation procedure for your
firewall.
French Translation: Installez le câble de mise à la terre c.c. du pare-feu comme indiqué dans
la procédure de raccordement à l’alimentation pour le pare-feu que vous installez. Utilisez
le câble American wire gauge (AWG) indiqué et serrez les écrous au couple indiqué dans la
procédure d’installation de votre pare-feu pare-feu.
• The firewall permits the connection of the earthed conductor of the DC supply circuit to
the earthing conductor at the equipment as described in the installation procedure for your
firewall.
French Translation: Ce pare-feu permet de raccorder le conducteur de mise à la terre du circuit
d’alimentation c.c. au conducteur de mise à la terre de l’équipement comme indiqué dans la
procédure d’installation du pare-feu.
• A suitably-rated DC mains disconnect device must be provided as part of the building
installation.
French Translation: Un interrupteur d'isolement suffisant doit être fourni pendant l'installation
du bâtiment.
PA-7000 Series Firewall Hardware Reference 14 ©2023 Palo Alto Networks, Inc.

PA-7000 Series Firewall Overview
The PA-7000 Series firewalls (PA-7050 and PA-7080) are high performance modular firewalls
designed for large enterprise and carrier class environments. These multi-blade chassis can
leverage either AC or DC power and have hot-swappable Network Processing Cards (NPCs) to
allow for expansion as needs grow. You can install up to six NPCs in the PA-7050 firewall and
up to ten NPCs in the PA-7080 firewall. These firewalls also include a dedicated high availability
(HA) control port (HA1), as well as two dedicated 80Gb QSFP HA ports for HA2 (data link) and
HA3 (packet forwarding) functions. These dedicated HA ports enable PA-7000 Series firewalls to
function with full hardware redundancy in either an active/passive or active/active configuration.
Additionally, to improve logging performance, the firewalls use a dedicated log card to handle all
log processing tasks.
First Supported PAN-OS® Software Release:
•PAN-OS 6.0—PA-7050 firewall
•PAN-OS 7.0—PA-7080 firewall
The minimum supported PAN-OS software also varies based on the installed components. For
example, if you install a PA-7000 20GQXM NPC, the firewall must have PAN-OS 7.1 or later
installed. In the PAN-OS 9.0 release, there are also requirements to install newer components
based on the installed hardware. For example, if you install the PA-7000-100G-NPC in a PA-7050
firewall, you must also install the PA-7050 second-generation fan trays (PA-7050-FANTRAY-L-
A (left) and PA-7050-FANTRAY-R-A (right)). For more information on these requirements, see
PA-7000 Series Firewall Module and Interface Card Information.
•PA-7050 Front and Back Panel Descriptions
•PA-7080 Front and Back Panel Descriptions
15

PA-7000 Series Firewall Overview
PA-7050 Front and Back Panel Descriptions
•PA-7050 Front Panel (AC)
•PA-7050 Back Panel (AC)
•PA-7050 Front Panel (DC)
•PA-7050 Back Panel (DC)
PA-7050 Front Panel (AC)
The following image shows the front panel of the PA-7050 firewall (with AC power supplies
installed) and the table describes each front panel component.
Item Component Description
1 Exhaust and intake fan
trays (first-generation fan
tray shown)
Provides ventilation and cooling for the chassis. While
facing the front of the firewall, air enters from the left and
exits to the right.
There are two PA-7050 fan tray models:
PA-7000 Series Firewall Hardware Reference 16 ©2023 Palo Alto Networks, Inc.

PA-7000 Series Firewall Overview
Item Component Description
•PA-7050-FAN—First-generation fan tray. These fan
trays are interchangeable, so you can install them in
either fan tray slot.
•PA-7050-FANTRAY-L-A (left) and PA-7050-
FANTRAY-R-A (right)—Second-generation fan tray
that provides more cooling capacity than the first-
generation fan tray. While facing the front of the
firewall, install PA-7050-FANTRAY-L-A on the left and
the PA-7050-FANTRAY-R-A on the right. The right fan
tray also includes the air intake filter that slides into
the fan tray. This fan tray is required when installing
certain hardware components. For example, you must
install this fan tray if you install a PA-7000 100G
NPC. For more details, see the system and hardware
requirements in PA-7000 Series Firewall Module and
Interface Card Information.
During normal operation, the Power LED on the fan tray
is green and the Fault LED is off. If an individual fan fails
on the fan tray, the Power LED turns off and the Fault
LED turns red.
For information on replacing a fan tray, see Replace a
PA-7050 Fan Tray.
2 Switch Management Card
(SMC) (first-generation
SMC shown)
Provides management access to the chassis using a
serial console cable connected to the Console port
or an RJ-45 cable connected to the management
(MGT) port. The SMC also has high availability (HA)
ports and LED indicators that provide information on
various chassis components. The SMC also stores PAN-
OS, the configuration, and management logs (Alarm,
Configuration, and System).
IMPORTANT: The SMC is required to operate the chassis
and on a PA-7050 firewall, it must be installed in slot 4.
The SMC-B is shipped with four copper 1G
transceivers for use in the MGT-A, MGT-B,
HA1-A, and HA1-B ports. You can use these
or replace them with a transceiver of your
choice.
There are two PA-7050 SMC models as described in
PA-7000 Series Firewall Switch Management Cards
(SMCs).
PA-7000 Series Firewall Hardware Reference 17 ©2023 Palo Alto Networks, Inc.

PA-7000 Series Firewall Overview
Item Component Description
The PAN-OS® software is preinstalled on the
embedded solid-state drive (SSD) on the SMC.
3 Air filter Filters air entering the chassis. Periodically inspect the
filter to ensure it is clean. The filter is not designed to be
cleaned and it is recommended that you replace it every
six months (depending on the environment).
If the firewall has the second-generation fan trays
installed (PA-7050-FANTRAY-L-A on the left and the
PA-7050-FANTRAY-R-A), the air filter is inserted into the
right fan tray (PA-7050-FANTRAY-R-A).
4 Network Processing Card
(NPC)
Provides network connectivity.
On a PA-7050 firewall, you can install up to six NPCs (in
slots 1, 2, 3, 5, 6, and/or 7). You must have at least one
NPC installed before the firewall can process network
traffic.
For more information, see PA-7000 Series Firewall
Network Processing Cards (NPCs).
5 Log card
(LPC shown)
There are two log card models that you can install:
•LFC (PAN-OS 9.0 or later)—High-speed log forwarding
card that forwards all dataplane logs to an external log
collection system, such as Panorama or a syslog server.
The only logs that are stored locally are the Alarm
,Configuration, and System logs; these logs are stored
on the SMC.
•LPC—Manages and stores all dataplane logs generated
by the firewall. The LPC contains four disk drives that
are configured in two separate RAID 1 pairs to provide
redundancy. Each drive is installed in an Advanced
Mezzanine Card (AMC), which physically connects the
drive to the LPC. When replacing a drive, the AMC and
drives are ordered and installed as one unit.
IMPORTANT: You must have an LFC or LPC installed in
slot 8 for chassis operation.
For more information, see PA-7000 Series Firewall Log
Cards.
6AC power supplies Provides power to the chassis using an AC power source.
For information on connecting power, see Connect Power
to a PA-7000 Series Firewall.
PA-7000 Series Firewall Hardware Reference 18 ©2023 Palo Alto Networks, Inc.

PA-7000 Series Firewall Overview
Item Component Description
7Electrostatic Discharge
(ESD) ports
Provides a grounding point that you use when removing
or installing chassis components. Secure the provided
wrist strap end of the ESD strap around your wrist and
plug the other end into one of the ESD ports.
PA-7050 Back Panel (AC)
The following image shows the back panel of the PA-7050 firewall (with AC power supplies
installed) and the table describes each back panel component.
Item Component Description
1 Ground stud Two-post stud used to ground the chassis to earth ground.
Use the provided 6 AWG two#post ground lug to connect
a grounded cable (not included) to the two#post stud.
PA-7000 Series Firewall Hardware Reference 19 ©2023 Palo Alto Networks, Inc.

PA-7000 Series Firewall Overview
Item Component Description
2 Power Entry Module
(PEM) AC power inlets
Connects the power source to the power supplies located
on the front of the chassis. The front power supplies
distribute power to all chassis components.
The AC PEM contains four 20-amp AC power inlets—each
accompanied by a switch—one pair, inlet with switch, for
each power supply.
If you are facing the back of the chassis, the inlet and
switch on the far left side provides power to the power
supply on the far right side when facing the front of the
chassis.
For information on connecting power, see Connect Power
to a PA-7000 Series Firewall.
The AC PEMs are not field-serviceable.
3 Power Entry Module
(PEM) AC power switches
Provides switches to power on or off the AC power
supplies. Each switch has a circuit breaker that will trip if
the load reaches 25-amps.
PA-7050 Front Panel (DC)
The following image shows the front panel of the PA-7050 firewall (with DC power supplies
installed).
The only difference between the front panel of the AC model and the front panel of the
DC model is that the DC model has four front DC power supplies instead of four AC power
supplies. For descriptions of the front panel components, see PA-7050 Front Panel (AC)
and for information on connecting DC power, see Connect Power to a PA-7000 Series
Firewall.
PA-7000 Series Firewall Hardware Reference 20 ©2023 Palo Alto Networks, Inc.