What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?

What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?

152742
Created On 03/20/20 19:56 PM - Last Modified 02/15/24 03:05 AM


Question


What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?

Environment


  • Palo Alto Firewall
  • GlobalProtect VPN Tunnels


Answer


The following table provides information on the maximum number of GlobalProtect tunnels supported by platform.
 
Model

Max Tunnels for GlobalProtect Client VPN
(SSL, IPSec, and IKE with XAUTH) 

Max SSL tunnels for GlobalProtect Clientless VPNs
PA-708040000/60000 (Using newer SMCs)10000/25000 (Using newer SMCs)
PA-705040000/60000 (Using newer SMCs)40000/60000 (Using newer SMCs)
PA-52806000010000
PA-52606000010000
PA-5250300005000
PA-5220150002500
PA-54506000025,000 ( PAN-PA-5400-NC-A)
PA-54406000010000
PA-5430300005000
PA-5420220003500
PA-5410150002500
PA-5060200004000
PA-5050100001000
PA-502050001000
PA-32602048400
PA-32502048400
PA-32201024200
PA-30602048400
PA-30502048400
PA-30201024200
PA-3440
PA-3430
2000200
PA-3420
PA-3410
1800200
PA-1420
PA-1410
1500200
PA-8501000200
PA-8201000200
PA-50010025
PA-4601500200
PA-4501500200
PA-4401000100
PA-415
PA-410
25020
PA-220R25020
PA-22025020
VM-700120002500
VM-50060001200
VM-1000-HV2000125
VM-3002000400
VM-200500100
VM-100500100
VM-5025040
VM-50(Lite)2540

The maximum tunnels indicated above are the total sum (SSL+ IPSec,+IKE with XAUTH.  Information on the third-party VPN client is included in the additional section.
 


Additional Information


  • The maximum number of third party xauth ipsec clients can be found here.
  • The capacity of other features can be found using the Product Comparison tool This tool allows you to compare the different platform capacities. Please keep in mind that this tool tracks to the latest release of PAN-OS.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPBCCA4&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language