How to restrict to maximum number of users connect to per globalprotect gateway
2310
Created On 04/20/22 02:42 AM - Last Modified 06/26/25 02:49 AM
Objective
- In some cases, the ISP link may get exhausted due to many users connected to a global VPN.
- The article provides configuration to restrict the maximum number of users who can connect to GlobalProtect to reduce the resource usage.
Environment
- Palo Alto Firewall
- Supported PAN-OS
- Global protect gateway
Procedure
- On GUI, navigate to Network > GlobalProtect > Gateways > Agent > Tunnel Setting > Max User
- Set the Max User
- Click OK
- Commit
NOTE:If the maximum number of users is reached, subsequent users are denied access with a message that indicates the maximum number of users has been reached (the range varies by platform and is displayed when the field is empty).