What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?
132380
Created On 03/20/20 19:56 PM - Last Modified 10/20/21 20:32 PM
Environment
- Palo Alto Firewall
- GlobalProtect VPN Tunnels
Answer
The following table provides information on the maximum number of GlobalProtect tunnels supported by platform running PAN-OS 8.1 or 9.0.
| Model |
Max Tunnels for GlobalProtect Client VPN | Max SSL tunnels for GlobalProtect Clientless VPNs |
| PA-7080 | 40000/60000 (Using newer SMCs) | 10000/25000 (Using newer SMCs) |
| PA-7050 | 40000/60000 (Using newer SMCs) | 40000/60000 (Using newer SMCs) |
| PA-5280 | 60000 | 10000 |
| PA-5260 | 60000 | 10000 |
| PA-5250 | 30000 | 5000 |
| PA-5220 | 15000 | 2500 |
| PA-3260 | 2048 | 400 |
| PA-3250 | 2048 | 400 |
| PA-3220 | 1024 | 200 |
| PA-850 | 1000 | 200 |
| PA-820 | 1000 | 200 |
| PA-460 | 1500 | 200 |
| PA-450 | 1500 | 200 |
| PA-440 | 1000 | 100 |
| PA-220R | 250 | 20 |
| PA-220 | 250 | 20 |
| VM-700 | 12000 | 2500 |
| VM-500 | 6000 | 1200 |
| VM-1000-HV | 2000 | 125 |
| VM-300 | 2000 | 400 |
| VM-200 | 500 | 100 |
| VM-100 | 500 | 100 |
| VM-50 | 250 | 40 |
| VM-50(Lite) | 25 | 40 |
The maximum tunnels indicated above are the total sum (SSL+ IPSec,+IKE with XAUTH. Information on the third-party VPN client is included in the additional section.
Additional Information
- The maximum number of third party xauth ipsec clients can be found here.
- The capacity of other features can be found using the Product Comparison tool. This tool allows you to compare the different platform capacities. Please keep in mind that this tool tracks to the latest release of PAN-OS.