PaloAlto Networks M-500 User manual

M-500 Appliance
Hardware Reference Guide

Contact Information
http://www.paloaltonetworks.com/contact/contact/
About this Guide
The Palo Alto Networks M-500 appliance is a multi-function appliance that you can configure to
function as a Panorama Manager, Panorama Log Collector, or PAN-DB Private Cloud used for URL
filtering. This guide provides instructions on installing the hardware and performing maintenance
procedures, and provides product specifications. This guide is intended for system administrators
responsible for installing and maintaining the M-500 appliance.
For information on using Panorama, refer to the Palo Alto Networks Panorama Administrator’s
Guide 7.0 or later. For information on using PAN-DB, refer to the Palo Alto Networks PAN-OS
Administrator’s Guide 7.0 or later.
For additional information, refer to the following resources:
•For information on the additional capabilities and for instructions on configuring the features on
the firewall, refer to https://www.paloaltonetworks.com/documentation.
•For access to the knowledge base, complete documentation set, discussion forums, and videos,
refer to https://live.paloaltonetworks.com.
•For contacting support, for information on the support programs, or to manage your account or
devices, refer to https://support.paloaltonetworks.com.
•For the latest release notes, go to the software downloads page at
https://support.paloaltonetworks.com/Updates/SoftwareUpdates.
To provide feedback on the documentation, please write to us at:
[e-mail].
Palo Alto Networks, Inc.
www.paloaltonetworks.com 
© 2007–2015 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of
our trademarks can be found at http://www.paloaltonetworks.com/company/trademarks.html . All other marks
mentioned herein may be trademarks of their respective companies.
Revision Date: February 29, 2016

Palo Alto Networks Table of Contents • 3
February 29, 2016 - Palo Alto Networks COMPANY CONFIDENTIAL
Chapter 1 
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Front Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Back Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Chapter 2 
Installing the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Tamper Proof Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Equipment Rack Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Rack Mount Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Connecting Cables to the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Connecting Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Chapter 3 
Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Cautions and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Interpreting the Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Replace a Disk Drive. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Power Supply Replacement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Chapter 4 
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Interface Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Table of Contents

4• Table of Contents Palo Alto Networks
Chapter 5 
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Appendix A 
General Safety Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Other Regulatory Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Palo Alto Networks Overview • 5
Chapter 1 
Overview
The Palo Alto Networks M-500 appliance is a multi-function appliance that you can configure
for one of the following three modes:
•Panorama mode—Performs both central management and log collection for Palo Alto
Networks firewalls. This is the default mode.
•Log Collector mode—Functions as a dedicated Log Collector, which either an M-100 or
M-500 appliance in Panorama mode or a Panorama virtual appliance can manage.
•PAN-DB Private Cloud mode—Functions as a private URL filtering solution that Palo
Alto Networks firewalls can use to perform URL filtering lookups. This solution is ideal
for organizations that restrict their firewalls from having direct access to the Internet.
Use the following topics to learn about the front and back panel components.
•“Front Panel Description” on page 6
•“Back Panel Description” on page 8
Note: The minimum Panorama version that you can install on a M-500 appliance
is 7.0.

Front Panel Description
6• Overview Palo Alto Networks
Front Panel Description
Figure 1 shows the front panel of the M-500 appliance and Table 1 describes the front panel
features.
Figure 1. Front Panel
1
5
6
7
8
3
4
2
Table 1. Front Panel Features
Item Description
1. Disk drives/bays The M-500 appliance has 24 disk drive bays. Starting from left to
right, the bays are labeled A1 to L2. Each pair of drives are in a
RAID1 configuration. For example, A1-A2 is a RAID1 pair, B1-B2 is
a RAID1 pair, and so on.
By default, the M-500 appliance ships with 8 1TB drives in RAID1
pairs installed in drive bays A1-D2 to provide 4TB of storage. You
can install additional RAID1 pairs from E1-H2 to add up to 8 more
drives (4 pairs) for a total of 8TB of storage.
Drive bays I1 to L2 are reserved for future use.
2. Drive LEDs •LeftLED—Illuminates red when a drive failure occurs.
• Right LED—Flashes blue when there is drive activity. A connec-
tion to the SATA backplane enables the LED to flash on and off
when the particular drive is being accessed.
3. Power button Main power button used to power the device on or to power it off.
Turning off system power with this button keeps the standby
power on. To completely power off the device, you must remove
the power source (AC plugs).
4. Reset button Reboots the system when pressed. A small object, such as a paper
clip, is required to access the button.
5. Power LED The LED is solid green when the appliance is powered on.
6. Power failure LED The LED flashes red when a power supply failure occurs or if a power
cord is removed.

Palo Alto Networks Overview • 7
Front Panel Description
7. HDD LED Indicates IDE channel activity (SAS/SATA drive).
8. Overheat/fan failure
LED
Modes:
• Continuously on red—An overheat condition occurred, possibly
due to cables blocking the air vents.
• Blinking red (1Hz)—Fan failure has occurred.
• Blinking red (.25Hz)—Power failure due to power supply failure
or the power cord is not connected to one of the power supplies.
• Solid blue—The Unique Identification (UID) function is on. This is
used to identify the appliance in a rack. For more information, see
the back panel description.
Table 1. Front Panel Features (Continued)
Item Description

Back Panel Description
8• Overview Palo Alto Networks
Back Panel Description
Figure 2 shows the back panel of the M-500 appliance and Table 2 describes the back panel
features.
Figure 2. Back Panel
1234567
Table 2. Back Panel Features
Item Description
1. Power supplies Two 1200W redundant hot-swappable power supplies.
2. Console DB-9 serial port for console access.
3. USB Four USB ports (reserved for future use).
4. MGT

1, 2, 3
RJ-45 10/100/1000 management port used for managing the device
and for data traffic.

RJ-45 10/100/1000 Ethernet Ports 1, 2, and 3. You can configure
ports 1 and 2 to distribute the Panorama or PAN-DB traffic load.
For information on configuring these ports for Panorama, refer to
the Panorama Administrator’s Guide 7.0 or later and for information
on configuring these ports for PAN-DB, refer to the PAN-OS
Administrator’s Guide 7.0 or later located on the Technical
Documentation Portal.
Port 3 is reserved for future use.
5. Graphics port VGA port (reserved for future use and covered).
6. UID The Unique Identification (UID) feature is a combination LED/
button that is used to assist a technician in locating a device when
moving from the back of a rack to the front of a rack. When you
push the button, the rear UID LED and the front panel LEDs will
illuminate bright blue, assisting the technician in identifying the
device in a rack. Push the button again to stop the LED from
flashing.
Note that the UID button is very small and is located slightly to the
left of the UID port hole. Use a small object, such as a paper clip, to
press the button.
7. SFP ports Two 10 Gigabit Ethernet Small Form-Factor Pluggable (SFP) ports.
Reserved for future use.

Palo Alto Networks Installing the Hardware • 9
Tamper Proof Statement
Chapter 2 
Installing the Hardware
This chapter describes how to install the M-500 appliance. See the following topics:
•“Tamper Proof Statement” on page 9
•“Before You Begin” in the next section
•“Equipment Rack Installation” on page 10
•“Connecting Cables to the Device” on page 17
•“Connecting Power” on page 17
Tamper Proof Statement
To ensure that products purchased from Palo Alto Networks have not been tampered with
during shipping, verify the following upon receipt of each product:
•The tracking number provided to you electronically when ordering the product matches
the tracking number that is physically labeled on the box or crate.
•The integrity of the tamper-proof tape used to seal the box or crate has not been
compromised.
•The warranty seals on the device itself do not show evidence of tampering.
Before You Begin
•It is recommended that two people rack mount the M-500 appliance.
•Have a Phillips-head screwdriver available and a small pliers or nut wrench.
•Verify that the intended location where you will install the appliance has adequate air
circulation and meets the temperature requirements. See “Environmental Specifications”
on page 24.
•Verify that power is not connected to the M-500 appliance.
•Allow clear space on all sides of the M-500 appliance.

Equipment Rack Installation
10 • Installing the Hardware Palo Alto Networks
Equipment Rack Installation
The M-500 appliance ships with a four-post rack kit with two sets of rail assemblies (one for
each side) and the mounting screws needed for installing the system into a four-post 19”rack.
This rail kit will fit a rack between 26.5” and 36.4” deep.
The following safety guidelines apply to rack installation:
•Elevated ambient operating temperature—If the M-500 appliance is installed in a closed
or multi-unit rack assembly, the ambient operating temperature of the rack environment
may be greater than the ambient room temperature. Verify that the ambient temperature
of the rack assembly meets the maximum rated ambient temperature requirements listed
in “Environmental Specifications” on page 24.
•Reduced airflow—Ensure that the airflow required for safe device operation is not
compromised by the rack installation and that you allow at least 30” of clearance in the
back of the rack to allow for sufficient airflow and ease in servicing.
•Mechanical loading—Ensure that the rack-mounted device does not cause hazardous
conditions due to uneven mechanical loading.
•Circuit overloading—Ensure that the circuit that supplies power to the device is
sufficiently rated to avoid circuit overloading or excess load on supply wiring. See
“Electrical Specifications” on page 24.
•Reliable earthing—Maintain reliable earthing of rack mounted equipment. Pay special
attention to supply connections other than direct connections to the branch circuit (such
as the use of power strips).
Rack Mount Procedures
The following sections describe the required steps to install the M-500 appliance in a two-post
or four-post 19” rack:
•“Four-post Rack Installation” in the next section
•“Two-Post Rack Installation” on page 14
Four-post Rack Installation
1. Unpack the rail kit, which contains two rail assemblies (one for each side of the M-500
appliance). Each assembly consists of three sections: An inner rail that secures directly to
the chassis, an outer rail that secures to the rack, and a middle rail that extends from the
outer rail. These assemblies are specifically designed for the left and right side of the
chassis.
Note: You can order a two-post rail kit from Palo Alto Networks for installation
in a two-post rack. See “Two-Post Rack Installation” on page 14 for installation
procedures.