topic Re: Firewall servicing as UserID Client - limit in Next-Generation Firewall Discussions

Firewall servicing as UserID Client - limit

Chris_Johnston — Fri, 17 Mar 2023 15:14:57 GMT

Good Morning,

Searching for a PA doc I found a while back and my google-fu is failing me. Looking for the documented limit of clients who can connect to a PanOS device acting as a redistribution agent. I'm positive I saw 1000 at one point a few years ago, but unable to find it again.

Command query to see current CLIENTs firewall 1000 is acting as is below

show user user-id-service client all

Re: Firewall servicing as UserID Client - limit

OtakarKlier — Fri, 17 Mar 2023 16:50:05 GMT

Hello,

Not sure of a limit, however why would you need so many? I have 2 and have over 3K users.

Regards,

Re: Firewall servicing as UserID Client - limit

Chris_Johnston — Fri, 17 Mar 2023 16:54:26 GMT

Prisma Access Remote Networks (with over 500 RN nodes for our environment) and a single config option available for use, combined with a number of other constraints.

Edit: Also 300K + users. Very large scale for our use