topic Hitting IPsec Tunnel Limit on M-300 in VM-Series in the Public Cloud

Hitting IPsec Tunnel Limit on M-300

rpwags — Mon, 01 Aug 2022 20:37:30 GMT

We are hitting a software limitation on the max number of IPsec Tunnels allowed for our VM-Series Next-Generation Firewall Bundle 2. This was purchased through AWS Marketplace and there is no clearly defined upgrade path for us to follow. The Palo Alto website shows that we can get from the M-300 to the M-500 or M-700... No mention on how to do this through AWS Marketplace. We need an upgrade path and fast... Our production is degraded until we are resolved, please point us in the right direction.

Re: Hitting IPsec Tunnel Limit on M-300

PavelK — Thu, 11 Aug 2022 23:47:14 GMT

Hello @rpwags

thank you for the post.

Would it be possible to get more details? M-300, M-500 and M-700 are Panorama hardware appliances and not VM, therefore there is no possibility to upgrade unless you purchase new hardware.

Also, would it be possible to get more details on how many ipsec tunnels you configured by hitting a limitation?

Kind Regards

Pavel