topic Firewall PA-460 Redundant Power Alarm in Next-Generation Firewall Discussions

Firewall PA-460 Redundant Power Alarm

DennyChanditya — Tue, 27 Sep 2022 06:01:00 GMT

Hello, i have appliance Firewall PA-460.

i do the testing power with this device. i had read the docs below.

Interpret the LEDs on a PA-400 Series Firewall (paloaltonetworks.com)

Replace a Power Adapter on a PA-400 Series Firewall (paloaltonetworks.com)

I had several test below.

1. Place 2 adapter connect to firewall, its working normally.

2. Disconnect 1 adapter from firewall. No alarm shows/LED, in cli show adapter not inserted

3. Place 2 Adapter, but disconnect 1 adapter from power source. No Alarm, then in cli still show adapter inserted.

as i test above, the conclusion is the firewall doesn't check the voltage as the docs says. but in the cli only show the adapter is inserted/not (even the adapter has no power).

But the question is, how we know if the firewall had a power in each adapter?

how to generate alarm if one of the adapter have no power? as the note below it says if the 2 adapter inserted and on adapter fail it will show the alarm, but as i test it not showing any error, in web ui or even in cli.

Thanks,

Denny

Re: Firewall PA-460 Redundant Power Alarm

PavelK — Fri, 30 Sep 2022 05:23:40 GMT

Hello @DennyChanditya

thanks for the post!

I do not have exact same Firewall to test it, however I did some testing with a Firewall in my lab. If you are after alert for power failure, then you can get it from System logs by using this filter: ( eventid eq ps-inserted ) or ( eventid eq ps-removed )

You can configure under: Device > Log Settings > System, an alert using this filter with action email.

Once power cable is disconnected or power outage to one adapter, you will get an email alert based on system log.

Kind Regards

Pavel

Re: Firewall PA-460 Redundant Power Alarm

DennyChanditya — Fri, 30 Sep 2022 06:32:41 GMT

Hello Pavel,

The problem is, the system log only log when the adapter is disconnected from the firewall, it cannot detect the power.

If the adapter still connect to the firewall, but thereis no power. The firewall keep detecting the power is up, thereis no log show if the power is down. system log generate only when we disconnect the adapter manually.

When we disconnect the adapter/when adapter is connect but the power is down, no alarm was generated.

Thanks,

Denny

Re: Firewall PA-460 Redundant Power Alarm

PavelK — Sun, 02 Oct 2022 05:31:57 GMT

Thank you for reply and providing further details @DennyChanditya

I see what you mean. In next week, I will be doing a few tests. I will let you know if I find something.

Kind Regards

Pavel

Re: Firewall PA-460 Redundant Power Alarm

HaydarKutuk — Wed, 15 May 2024 14:33:27 GMT

Hi, I tested. I did not disconnect the adapter. I just disconnected the cable. it appeared in the system logs: ( eventid eq 'ps-failure' ).