What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?

What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?

54436
Created On 03/20/20 19:56 PM - Last Modified 10/20/21 20:32 PM


Environment
  • Palo Alto Firewall
  • GlobalProtect VPN Tunnels


Answer
The following table provides information on the maximum number of GlobalProtect tunnels supported by platform running PAN-OS 8.1 or 9.0.
 
Model

Max Tunnels for GlobalProtect Client VPN
(SSL, IPSec, and IKE with XAUTH) 

Max SSL tunnels for GlobalProtect Clientless VPNs
PA-708040000/60000 (Using newer SMCs)10000/25000 (Using newer SMCs)
PA-705040000/60000 (Using newer SMCs)40000/60000 (Using newer SMCs)
PA-52806000010000
PA-52606000010000
PA-5250300005000
PA-5220150002500
PA-32602048400
PA-32502048400
PA-32201024200
PA-8501000200
PA-8201000200
PA-4601500200
PA-4501500200
PA-4401000100
PA-220R25020
PA-22025020
VM-700120002500
VM-50060001200
VM-1000-HV2000125
VM-3002000400
VM-200500100
VM-100500100
VM-5025040
VM-50(Lite)2540

The maximum tunnels indicated above are the total sum (SSL+ IPSec,+IKE with XAUTH.  Information on the third-party VPN client is included in the additional section.
 


Additional Information
  • The maximum number of third party xauth ipsec clients can be found here.
  • The capacity of other features can be found using the Product Comparison tool This tool allows you to compare the different platform capacities. Please keep in mind that this tool tracks to the latest release of PAN-OS.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PPBC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Attachments
Choose Language