PaloAlto Networks PA-3200 Series Guía de aplicación
PA-3200 Series Next-Gen Firewall
Hardware Reference
docs.paloaltonetworks.com
Contact Informaon
Corporate Headquarters:
Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95054
www.paloaltonetworks.com/company/contact-support.html
About the Documentaon
• For the most recent version of this guide or for access to related documentaon, visit the
Technical Documentaon portal docs.paloaltonetworks.com.
• To search for a specific topic, go to our search page docs.paloaltonetworks.com/search.html.
• Have feedback or quesons for us? Leave a comment on any page in the portal, or write to us
at documenta[email protected]om.
Copyright
Palo Alto Networks, Inc.
www.paloaltonetworks.com
©2018–2021 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo
Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/
trademarks.html. All other marks menoned herein may be trademarks of their respecve
companies.
Last Revised
September 18, 2020
PA-3200 Series Next-Gen Firewall Hardware Reference 2©2021 Palo Alto Networks, Inc.
Table of Contents
Before You Begin................................................................................................5
Upgrade/Downgrade Consideraons for Firewalls and Appliances................................ 6
Tamper Proof Statement............................................................................................................ 7
Third-Party Component Support............................................................................................. 8
Product Safety Warnings........................................................................................................... 9
PA-3200 Series Firewall Overview..............................................................13
PA-3200 Series Front Panel................................................................................................... 14
PA-3200 Series Back Panel.................................................................................................... 17
Install the PA-3200 Series Firewall in an Equipment Rack.................... 19
Install the PA-3200 Series Firewall Using the Rack-Mount Brackets............................20
Install the PA-3200 Series Firewall Using the Four-Post Rack Kit.................................22
Connect Power to a PA-3200 Series Firewall...........................................25
Connect AC Power to a PA-3200 Series Firewall.............................................................26
Connect DC Power to a PA-3200 Series Firewall.............................................................28
Service the PA-3200 Series Firewall...........................................................31
Interpret the PA-3200 Series Status LEDs..........................................................................32
Replace a PA-3200 Series Fan Tray...................................................................................... 35
Replace a PA-3200 Series Power Supply............................................................................ 37
Replace a PA-3200 Series AC Power Supply..........................................................37
Replace a PA-3200 Series DC Power Supply..........................................................38
Replace a PA-3200 Series Drive............................................................................................42
PA-3200 Series Firewall Specificaons......................................................45
PA-3200 Series Physical Specificaons............................................................................... 46
PA-3200 Series Electrical Specificaons............................................................................. 47
PA-3200 Series Environmental Specificaons................................................................... 48
PA-3200 Series Miscellaneous Specificaons....................................................................49
PA-3200 Series Firewall Hardware Compliance Statements.................51
PA-3200 Series Firewall Compliance Statements............................................................. 52
PA-3200 Series Next-Gen Firewall Hardware Reference 3©2021 Palo Alto Networks, Inc.
Table of Contents
PA-3200 Series Next-Gen Firewall Hardware Reference 4©2021 Palo Alto Networks, Inc.
Before You Begin
Read the following topics before you install or service a Palo Alto Networks® next-
generaon firewall or appliance. The following topics apply to all Palo Alto Networks
firewalls and appliances except where noted.
>Upgrade/Downgrade Consideraons for Firewalls and Appliances
>Tamper Proof Statement
>Third-Party Component Support
>Product Safety Warnings
5
Before You Begin
Upgrade/Downgrade Consideraons for Firewalls and
Appliances
The following table lists hardware features that have upgrade or downgrade impact. Make sure
you understand all upgrade/downgrade consideraons before you upgrade or downgrade from
the specified version of PAN-OS.
Feature Release Upgrade Consideraons Downgrade
Consideraons
PA-7000 Log
Forwarding Card (LFC)
10.0 If you are using an LFC
with a PA-7000 Series
Firewall, when you
upgrade to PAN-OS
10.0, you must configure
the management plane
or dataplane interface
for the service route
because the LFC ports
do not support the
requirements for the
service route. We
recommend using the
dataplane interface for
the Data Services service
route.
n/a
Upgrading a PA-7000
Series Firewall with a
first generaon switch
management card
(PA-7050-SMC or
PA-7080-SMC)
PAN-OS 8.0
and later
Before upgrading
the firewall, run the
following CLI command
to check the flash drive’s
status: debug system
disk-smart-info
disk-1.
If the value for
aribute ID #232,
Available_Reservd_Space
0x0000, is greater than
20, then proceed with
the upgrade. If the value
is less than 20, then
contact support for
assistance.
Before downgrading
the firewall, run the
following CLI command
to check the flash drive’s
status: debug system
disk-smart-info
disk-1.
If the value for
aribute ID #232,
Available_Reservd_Space
0x0000, is greater than
20, then proceed with
the downgrade. If the
value is less than 20,
then contact support for
assistance.
PA-3200 Series Next-Gen Firewall Hardware Reference 6©2021 Palo Alto Networks, Inc.
Before You Begin
Tamper Proof Statement
To ensure that products purchased from Palo Alto Networks were not tampered with during
shipping, verify the following upon receipt of each product:
• The tracking number provided to you electronically when ordering the product matches the
tracking number that is physically labeled on the box or crate.
• The integrity of the tamper-proof tape used to seal the box or crate is not compromised.
• The integrity of the warranty label on the firewall or appliance is not compromised.
(PA-7000 Series firewalls only) PA-7000 Series firewalls are modular systems and
therefore do not include a warranty label on the firewall.
PA-3200 Series Next-Gen Firewall Hardware Reference 7©2021 Palo Alto Networks, Inc.
Before You Begin
Product Safety Warnings
To avoid personal injury or death for yourself and others and to avoid damage to your Palo Alto
Networks hardware, be sure you understand and prepare for the following warnings before you
install or service the hardware. You will also see warning messages throughout the hardware
reference where potenal hazards exist.
All Palo Alto Networks products with laser-based opcal interfaces comply with 21 CFR
1040.10 and 1040.11.
The following safety warnings apply to all Palo Alto Networks firewalls and appliances, unless a
specific hardware model is specified.
• When installing or servicing a Palo Alto Networks firewall or appliance hardware component
that has exposed circuits, ensure that you wear an electrostac discharge (ESD) strap. Before
handling the component, make sure the metal contact on the wrist strap is touching your skin
and that the other end of the strap is connected to earth ground.
French Translaon: Lorsque vous installez ou que vous intervenez sur un composant matériel
de pare-feu ou de disposif Palo Alto Networks qui présente des circuits exposés, veillez
à porter un bracelet anstaque. Avant de manipuler le composant, vérifiez que le contact
métallique du bracelet anstaque est en contact avec votre peau et que l’autre extrémité du
bracelet est raccordée à la terre.
• Use grounded and shielded Ethernet cables to ensure agency compliance with electromagnec
compliance (EMC) regulaons.
French Translaon: Des câbles Ethernet blindés reliés à la terre doivent être ulisés pour
garanr la conformité de l'organisme aux émissions électromagnéques (CEM).
• (PA-3200, PA-5200, PA-5400, PA-7050, and PA-7080 firewalls only) At least two people are
recommended for unpacking, handling, and relocang the heavier firewalls.
• Do not connect a supply voltage that exceeds the input range of the firewall or appliance. For
details on the electrical range, refer to electrical specificaons in the hardware reference for
your firewall or appliance.
French Translaon: Veillez à ce que la tension d’alimentaon ne dépasse pas la plage d’entrée
du pare-feu ou du disposif. Pour plus d’informaons sur la mesure électrique, consulter la
rubrique des caractérisques électriques dans la documentaon de votre matériel de pare-feu
ou votre disposif.
• Do not replace a baery with an incorrect baery type; doing so can cause the replacement
baery to explode. Dispose of used baeries according to local regulaons.
French Translaon: Ne remplacez pas la baerie par une baerie de type non adapté, cee
dernière risquerait d’exploser. Meez au rebut les baeries usagées conformément aux
instrucons.
• I/O ports are intended for intra-building connecons only and not intended for OSP (Outside
Plant) connecons or any network connecons subject to external voltage surge events.
PA-3200 Series Next-Gen Firewall Hardware Reference 9©2021 Palo Alto Networks, Inc.
Before You Begin
•(All Palo Alto Networks appliances with two or more
power supplies)
Cauon: Shock hazard
Disconnect all power cords (AC or DC) from the power
inputs to fully de-energize the hardware.
French Translaon: (Tous les appareils Palo Alto
Networks avec au moins deux sources d’alimentaon)
Débranchez tous les cordons d’alimentaon (c.a. ou
c.c.) des entrées d’alimentaon et meez le matériel
hors tension.
•(PA-7000 Series firewalls only)
Cauon: High touch current
Connect to earth before connecng to the power
supply.
Ensure that the protecve earthing conductor is
connected to the provided ground lug on the rear side
of the firewall.
•(PA-7000 Series firewalls only) When removing a fan
tray from a PA-7000 Series firewall, first pull the fan
tray out about 1 inch (2.5cm) and then wait a minimum
of 10 seconds before extracng the enre fan tray.
This allows the fans to stop spinning and helps you
avoid serious injury when removing the fan tray. You
can replace a fan tray while the firewall is powered
on but you must replace it within 45 seconds and you
can only replace one fan tray at a me to prevent the
thermal protecon circuit from shung down the
firewall.
French Translaon: (Pare-feu PA-7000 uniquement)
Lors du retrait d’un roir de venlaon d’un pare-
feu PA-7000, rerez tout d’abord le roir sur 2,5 cm,
puis paentez au moins 10 secondes avant de rerer
complètement le roir de venlaon. Cela permet aux
venlateurs d’arrêter de tourner et permet d’éviter des
blessures graves lors du retrait du roir. Vous pouvez
remplacer un roir de venlaon lors de la mise sous
tension du pare-feu. Toutefois, vous devez le faire dans
les 45 secondes et vous ne pouvez remplacer qu’un
roir à la fois, sinon le circuit de protecon thermique
arrêtera le pare-feu.
PA-3200 Series Next-Gen Firewall Hardware Reference 10 ©2021 Palo Alto Networks, Inc.
Otros manuales para PA-3200 Series
3
Este manual sirve para los siguientes modelos
3
Tabla de contenidos
Otros manuales de Cortafuegos de PaloAlto Networks
PaloAlto Networks
PaloAlto Networks PA-800 SERIES Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-220R Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-220 Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-3200 Series Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-220R Guía de aplicación
PaloAlto Networks
PaloAlto Networks PA-7000 Series Guía de aplicación
PaloAlto Networks
PaloAlto Networks PA-5450 Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-400 Series Guía de aplicación
PaloAlto Networks
PaloAlto Networks PA-445 Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-5200 Series Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-7000 Series Guía de aplicación
PaloAlto Networks
PaloAlto Networks PA-5200 Series Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-7050 PAN-AIRDUCT Manual de lista de piezas
PaloAlto Networks
PaloAlto Networks PA-7050 PAN-AIRDUCT Manual de operación y mantenimiento
PaloAlto Networks
PaloAlto Networks PA-220 Guía de aplicación
PaloAlto Networks
PaloAlto Networks PA-5000 Series Manual de operación y mantenimiento
PaloAlto Networks
PaloAlto Networks PA-4000 Series Manual de usuario
PaloAlto Networks
PaloAlto Networks PA-3400 Series Guía de aplicación
PaloAlto Networks
PaloAlto Networks PA-200 Manual de operación y mantenimiento
PaloAlto Networks
PaloAlto Networks PA-7080 Manual de usuario
