Site to Site VPN supported on Unlicensed VM-Series Firewall (?)

[ash83]

I am aware of the below limitation when using an Unlicensed VM-Series Firewall:

https://live.paloaltonetworks.com/t5/VM-Series-Articles/No-Logging-in-Unlicensed-VM-Series-Firewall/...

Are site to site VPNs fully supported when using an Unlicensed VM-Series Firewall? If it is, are there any restricions like IPsec tunnel numbers, throughput etc? How about using GlobalProtect?

Thanks.

[DonohoeRobert]

Hi There,

It would work for a few minutes until the first 200 sessions expire. Wouldn't reccommend it if a production enviroment. If you want a trial of a licenced VM for 30 days, you can request same from your local PAN SE, distributor or reseller. 

vpn's - would work until first 200 sessions expire

Global protect - depends what version, if using 4.0.x client, won't need a licence if connecting windows/macbooks, ye will if connecting androids/iphones using the client. X-auth on these devcies won't need a licence. again, will cut out after 200 sessions. 

//

An unlicensed VM-Series firewall can pass up to the first 200 sessions, after that it will block the session.

The firewall allows only the first 200 sessions.

//

cheers,

Rob 

[ash83]

Thanks Rob.