PA-1400 Series Front Panel (2024)

PA-1400 Series Next-Gen Firewall Hardware Reference

: PA-1400 Series Front Panel

Updated on

Feb 7, 2024

Focus

Download PDF

Updated on

Feb 7, 2024

Focus

  1. Home
  2. PA-1400 Series Next-Gen Firewall Hardware Reference
  3. PA-1400 Series Firewall Overview
  4. PA-1400 Series Front Panel

Download PDF

PA-1400 Series Front Panel

Table of Contents

Learn about the PA-1400 Series firewall front-panel components.

The following image shows the front panel of the PA-1410and PA-1420 firewalls and the table describes each front panel component.

PA-1400 Series Front Panel (1)

Item

Component

Description

1

Ethernet ports 1 through 12

Twelve RJ-45 ports for network traffic.The link speed and link duplex are auto-negotiate only.

PA-1410

  • Ports 1 through 8 — 10Mbps/100Mbps/1Gbps

  • Ports 9 through 12 — 10Mbps/100Mbps/1Gbps/2.5Gbps/5Gbps

PA-1420

  • Ports 1 through 4 — 10Mbps/100Mbps/1Gbps

  • Ports 5 through 12 — 10Mbps/100Mbps/1Gbps/2.5Gbps/5Gbps

On both the PA-1410 and PA-1420, port 1 is a Zero Touch Provisioning (ZTP) port. The ZTP port can be used to automate the on-boarding of new firewalls to a Panorama management server. To use the ZTP port, read how to boot the firewall in ZTP mode.

Onboth the PA-1410 and PA-1420, ports 9, 10, 11, and 12 are PowerOver Ethernet (PoE) ports. They can be configured to transfer powerto a connected device. Refer to the PAN-OS Networking Admin Guide forPoE configuration information.

2

SFP+ ports 13 through 22

Ten SFP (1Gbps) or SFP+ (10Gbps) ports based onthe installed transceiver.

PA-1410

  • Ports13 through 18 — 1Gbps

  • Ports 19 through 22 — 1Gbps/10Gbps

PA-1420

  • Ports 13 and 14 — 1Gbps

  • Ports 15 through 22 — 1Gbps/10Gbps

The SFPports can be remapped as HA-1 ports via PAN-OS or Panorama. These remappedHA-1 ports offer high availability connectivity over a longer distancethan what is permitted by the HA1-A and HA1-B ports listed below.

3

HSCI port

One SFP+ (10Gbps) port (supports both SFP andSFP+ transceivers or cables).

Use this port to connect twoPA-1400 Series firewalls in a high availability (HA) configurationas follows:

  • In an active/passive configuration, this portis for HA2 (data link).

  • In an active/active configuration, you can configure thisport for HA2 and HA3. HA3 is used for packet forwarding for asymmetrically routedsessions that require Layer 7 inspection for App-ID and Content-ID.

TheHSCI ports must be connected directly between the two firewallsin the HA configuration (without a switch or router between them).When directly connecting the HSCI ports between two PA-1400 Seriesfirewalls that are physically located near each other, Palo AltoNetworks recommends that you use a passive SFP+ cable.

Forinstallations where the two firewalls are not near each other andyou cannot use a passive SFP+ cable, use a standard SFP+ transceiverand the appropriate cable length.

4

HA1-A and HA1-B ports

Two RJ-45 10Mbps/100Mbps/1000Mbps ports forhigh availability (HA) control.

If the firewall dataplanerestarts due to a failure or manual restart, the HA1-B link will alsorestart. If this occurs and the HA1-A link is not connected andconfigured, then a split brain condition occurs. Therefore, we recommendthat you connect and configure the HA1-A ports and the HA1-B portsto provide redundancy and to avoid split brain issues.

5

MGT port

Use this Ethernet 10Mbps/100Mbps/1000Mbps portto access the management web interface and perform administrativetasks. The firewall also uses this port for management services,such as retrieving licenses and updating threat and application signatures.

The Management port cannot be used to configure HA1 or HA1 backup. You must use the dedicated HA1-A and HA1-B ports.

6

CONSOLE port (RJ-45)

Use this port to connect a management computerto the firewall using a 9-pin serial-to-RJ-45 cable and terminalemulation software.

The console connection provides accessto firewall boot messages, the Maintenance Recovery Tool (MRT),and the command line interface (CLI).

If your managementcomputer does not have a serial port, use a USB-to-serial converter.

Usethe following settings to configure your terminal emulation softwareto connect to the console port:

  • Data rate: 9600

  • Data bits: 8

  • Parity: None

  • Stop bits: 1

  • Flow control: None

7

USB port

A USB port that accepts a USB flash drivewith a bootstrap bundle (PAN-OS configuration).

Bootstrappingspeeds up the process of configuring and licensing the firewallto make it operational on the network with or without internet access.

8

CONSOLE port (Micro USB)

Use this port to connect a management computerto the firewall using a standard Type-A USB-to-micro USB cable.

Theconsole connection provides access to firewall boot messages, theMaintenance Recovery Tool (MRT), and the command line interface (CLI).

Refer to the Micro USB Console Port page for more information and to download the Windows driver or to learn how to connect from a Mac or Linux computer.

9

LED status indicators

Nine LEDs that indicate the status of the firewallhardware components (see Interpret the PA-1400 Series Status LEDs).

"); adBlockNotification.append($("Thanks for visiting https://docs.paloaltonetworks.com. To improve your experience when accessing content across our site, please add the domain to the allow list on your ad blocker application.")); let adBlockNotificationClose = $("x"); adBlockNotification.prepend(adBlockNotificationClose) $('body').append(adBlockNotification); setTimeout(function(e) { adBlockNotification.addClass('open'); }, 10); adBlockNotificationClose.on('click', function(e) { adBlockNotification.removeClass('open'); }) } }, 5000)

Previous PA-1400 Series Firewall Overview
Next PA-1400 Series Back Panel

Recommended For You

{{ if(( raw.pantechdoctype != "techdocsAuthoredContentPage" && raw.objecttype != "Knowledge" && raw.pancommonsourcename != "TD pan.dev Docs")) { }} {{ if (raw.panbooktype) { }} {{ if (raw.panbooktype.indexOf('PANW Yellow Theme') != -1){ }}

{{ } else if (raw.panbooktype.indexOf('PANW Green Theme') != -1){ }}

{{ } else if (raw.panbooktype.indexOf('PANW Blue Theme') != -1){ }}

{{ } else { }}

{{ } }} {{ } else { }}

{{ } }} {{ } else { }} {{ if (raw.pantechdoctype == "pdf"){ }}

{{ } else if (raw.objecttype == "Knowledge") { }}

{{ } else if (raw.pancommonsourcename == "TD pan.dev Docs") { }}

{{ } else if (raw.pancommonsourcename == "LIVEcommunity Public") { }}

{{ } else { }}

{{ } }} {{ } }}

{{ if (raw.pancommonsourcename == "LIVEcommunity Public") { }}

{{ if (raw.pantechdoctype == "pdf"){ }}

{{ } }}

{{ } else { }}

{{ if (raw.pantechdoctype == "pdf"){ }}

{{ } }}

{{ } }}

{{ if (raw.pancommonsourcename != "TD pan.dev Docs"){ }} {{ if (raw.pandevdocsosversion){ }} {{ } else { }} {{ if ((_.size(raw.panosversion)>0) && !(_.isNull(raw.panconversationid )) && (!(_.isEmpty(raw.panconversationid ))) && !(_.isNull(raw.otherversions ))) { }} (See other versions) {{ } }} {{ } }} {{ } }}

{{ } }}{{ if (raw.pantechdoctype == "bookDetailPage"){ }}

{{ } }}{{ if (raw.pantechdoctype == "bookLandingPage"){ }}

{{ } }}{{ if (raw.pantechdoctype == "productLanding"){ }}

{{ } }}{{ if (raw.pantechdoctype == "techdocsAuthoredContentPage"){ }}

{{ } }}{{ if (raw.pantechdoctype == "pdf"){ }}

{{ } }}

© 2024 Palo Alto Networks, Inc. All rights reserved.

PA-1400 Series Front Panel (2024)
Top Articles
Latest Posts
Article information

Author: Rob Wisoky

Last Updated:

Views: 6166

Rating: 4.8 / 5 (68 voted)

Reviews: 91% of readers found this page helpful

Author information

Name: Rob Wisoky

Birthday: 1994-09-30

Address: 5789 Michel Vista, West Domenic, OR 80464-9452

Phone: +97313824072371

Job: Education Orchestrator

Hobby: Lockpicking, Crocheting, Baton twirling, Video gaming, Jogging, Whittling, Model building

Introduction: My name is Rob Wisoky, I am a smiling, helpful, encouraging, zealous, energetic, faithful, fantastic person who loves writing and wants to share my knowledge and understanding with you.