Can PA-220 support 3000+ users with one user ID group mapping

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Can PA-220 support 3000+ users with one user ID group mapping

L0 Member

Can PA-220 Handle 3000+ users for UserID Mapping and User ID Group Map. Wanting to understand the capacity and efficiency sine we have remote sites which have the PA-220 and need group specific policy for the company divestiture. 

2 accepted solutions

Accepted Solutions

L7 Applicator

I’m pretty sure it’s 64k users either spread across groups so your groups could have 1k of users or 1 group of 64k users.  We have over 8k users on AD and use the group “domain users” for our basic policies with no issues... best way to keep user group membership count low is to only select your required groups in group mapping.

View solution in original post

L7 Applicator

Hi @Sishirkaringula 

According to the specs of a pa-220 this shouldn't be a problem. This hardware is specified for 128'000 IP mappings in the dataplane and 524'288 in the management plane. Active and unique groups you can have 1000 in your policies.

View solution in original post

2 REPLIES 2

L7 Applicator

I’m pretty sure it’s 64k users either spread across groups so your groups could have 1k of users or 1 group of 64k users.  We have over 8k users on AD and use the group “domain users” for our basic policies with no issues... best way to keep user group membership count low is to only select your required groups in group mapping.

L7 Applicator

Hi @Sishirkaringula 

According to the specs of a pa-220 this shouldn't be a problem. This hardware is specified for 128'000 IP mappings in the dataplane and 524'288 in the management plane. Active and unique groups you can have 1000 in your policies.

  • 2 accepted solutions
  • 2919 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!