Is There a Limit to Maximum Number of External Gateways for GlobalProtect?

Printer Friendly Page

Yes, there is a limit on the number of Gateways that can be defined, refer to the following table:

 

Model Max # of External Gateways

PA-200

PA-220

6
PA-500 6
PA-820 6
PA-850 12

PA-2020

PA-2050

11

PA-3020

PA-3050

PA-3060

11
PA-4020 26
PA-4050 131
PA-5020 26

PA-5050

PA-5060

131

PA-5220

PA-5250

PA-5260

131

PA-7050

PA-7080

131

VM-50

VM-100

VM-200

6

VM-300

VM-1000-HV

11
VM-500 26
VM-700 26

owner: ashaik

Comments

Will this be a system wide limitation or just for a particular client configuration? For example:

- GP Portal

-- Client Config for Branch X

-- Client Config for Branch Y

-- Client Config for Branch Z

With a PA-200, will it be possible to define six gateways for the "Client Config for branch X" and another six (distinct from branch X) for the branch Y config?

A few more questions:

- Is there a limitation on the number of Client Configurations for a PA-200 GP Portal?

- If using a PA-200 in active/active mode, what is the limit of SSL VPN sessions? 25, 50 or "it depends on what box the connection terminates"?

Thanks!

Is the limit 11 for PA-3020 even with multiple gateway license installed? 

Could you please update this article with new 2017 appliances?

 

@thomas.schmitz : updated to reflect new platforms!

Is there a limitation on the number of IKE gateways?

I assume that "Max IKE Peers" documented here https://www.paloaltonetworks.com/products/product-comparison.html?chosen=vm-300 will be the number of IKE gateways you can have...but don't want to assume.


Also, any reason why this info you've posted here isn't in the product comparison?

 

Cheers

 

Hi @bhcc

 

Yes, the maximum number of ike gateways equals the value in the comparison tools' "Max IKE Peers"

 

No reason, the comparison tool holds the most commonly requested parameters. Other data is typically contained in articles similar to the one above