topic Site to Site VPN supported on Unlicensed VM-Series Firewall (?) in General Topics

Site to Site VPN supported on Unlicensed VM-Series Firewall (?)

ash83 — Thu, 02 Nov 2017 13:01:43 GMT

I am aware of the below limitation when using an Unlicensed VM-Series Firewall:

https://live.paloaltonetworks.com/t5/VM-Series-Articles/No-Logging-in-Unlicensed-VM-Series-Firewall/ta-p/66123

Are site to site VPNs fully supported when using an Unlicensed VM-Series Firewall? If it is, are there any restricions like IPsec tunnel numbers, throughput etc? How about using GlobalProtect?

Thanks.

Re: Site to Site VPN supported on Unlicensed VM-Series Firewall (?)

DonohoeRobert — Thu, 02 Nov 2017 13:19:29 GMT

Hi There,

It would work for a few minutes until the first 200 sessions expire. Wouldn't reccommend it if a production enviroment. If you want a trial of a licenced VM for 30 days, you can request same from your local PAN SE, distributor or reseller.

vpn's - would work until first 200 sessions expire

Global protect - depends what version, if using 4.0.x client, won't need a licence if connecting windows/macbooks, ye will if connecting androids/iphones using the client. X-auth on these devcies won't need a licence. again, will cut out after 200 sessions.

An unlicensed VM-Series firewall can pass up to the first 200 sessions, after that it will block the session.

The firewall allows only the first 200 sessions.

cheers,

Rob

Re: Site to Site VPN supported on Unlicensed VM-Series Firewall (?)

ash83 — Thu, 02 Nov 2017 13:31:29 GMT

Thanks Rob.