topic Re: SSL VPN USERS LIMIT in General Topics

SSL VPN USERS LIMIT

abdulhakam — Tue, 31 Mar 2020 04:10:06 GMT

Hi Team,

May I know, what users limit in Palo Alto PA-220, Currently VPN connection is maximum 21 (from 10.0.0.100 – 10.0.0.120).

But now, users request need more SSL VPN users. What need to do is buy a license or what.?

Thanks

Re: SSL VPN USERS LIMIT

SutareMayur — Tue, 31 Mar 2020 06:36:53 GMT

@abdulhakam,

PA220 supports,

Max GP Client VPN - 250

Max GP Clientless VPN - 20

If you are using GP with client, then you can just increase client VPN pool as per your requirement. For using basic VPN connection, there is no license required. If you are using clientless VPN, then maximum it supports 20 connections.

Hope it helps!

Mayur

Re: SSL VPN USERS LIMIT

kiwi — Tue, 31 Mar 2020 07:39:34 GMT

Hi @abdulhakam ,

The numbers are as Mayur says.

You can see these numbers and many more per firewall model on the Palo Alto Networks comparison page:

https://www.paloaltonetworks.com/products/product-comparison.html?chosen=pa-3260,pa-220

Cheers !

-Kiwi.

Re: SSL VPN USERS LIMIT

abdulhakam — Tue, 31 Mar 2020 08:00:41 GMT

Hi @SutareMayur

Thanks for reply.

May i know how to verify this device using Max GP Client VPN - 250 or Max GP Clientless VPN - 20.?

If GP Clientless VPN: 0

Its mean Max GP VPN is 20 user right.?

and is using GP Clientless VPN can upgrade to GP Client VPN.?

Re: SSL VPN USERS LIMIT

abdulhakam — Tue, 31 Mar 2020 08:07:22 GMT

Hi @kiwi

Thanks for reply.

if currently using GP Clientless VPN max 20.. its possible to upgrade GP Client VPN max 250.?

Thanks

Re: SSL VPN USERS LIMIT

SutareMayur — Tue, 31 Mar 2020 08:17:30 GMT

@abdulhakam,

You need to do configuration on gateway for GP Client VPN. Please refer below link for configuration guide.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFbCAK

Mayur

Re: SSL VPN USERS LIMIT

abdulhakam — Tue, 31 Mar 2020 09:31:32 GMT

Hi @SutareMayur ,

Now using GP Clientless VPN...

For upgrade and configure to GP Client VPN no need buy any license ?

Device Model PA 220

Thanks

Re: SSL VPN USERS LIMIT

kiwi — Tue, 31 Mar 2020 09:41:01 GMT

Hi @abdulhakam ,

If you want to use the GlobalProtect client then you do not need any licenses.

However, some of the more advanced features do require a GP subscription (such as HIP checks and associated content updates, support for the GlobalProtect mobile app, or IPv6 support).

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses.html

Cheers,

-Kim.