topic Re: Can PA-220 support 3000+ users with one user ID group mapping in General Topics

Can PA-220 support 3000+ users with one user ID group mapping

Sishirkaringula — Sat, 19 Jun 2021 16:15:16 GMT

Can PA-220 Handle 3000+ users for UserID Mapping and User ID Group Map. Wanting to understand the capacity and efficiency sine we have remote sites which have the PA-220 and need group specific policy for the company divestiture.

Re: Can PA-220 support 3000+ users with one user ID group mapping

Mick_Ball — Sat, 19 Jun 2021 17:04:38 GMT

I’m pretty sure it’s 64k users either spread across groups so your groups could have 1k of users or 1 group of 64k users. We have over 8k users on AD and use the group “domain users” for our basic policies with no issues... best way to keep user group membership count low is to only select your required groups in group mapping.

Re: Can PA-220 support 3000+ users with one user ID group mapping

Remo — Sun, 20 Jun 2021 09:39:03 GMT

Hi @Sishirkaringula

According to the specs of a pa-220 this shouldn't be a problem. This hardware is specified for 128'000 IP mappings in the dataplane and 524'288 in the management plane. Active and unique groups you can have 1000 in your policies.