06-19-2021 10:04 AM
I’m pretty sure it’s 64k users either spread across groups so your groups could have 1k of users or 1 group of 64k users. We have over 8k users on AD and use the group “domain users” for our basic policies with no issues... best way to keep user group membership count low is to only select your required groups in group mapping.
06-20-2021 02:39 AM
According to the specs of a pa-220 this shouldn't be a problem. This hardware is specified for 128'000 IP mappings in the dataplane and 524'288 in the management plane. Active and unique groups you can have 1000 in your policies.
06-19-2021 10:04 AM
I’m pretty sure it’s 64k users either spread across groups so your groups could have 1k of users or 1 group of 64k users. We have over 8k users on AD and use the group “domain users” for our basic policies with no issues... best way to keep user group membership count low is to only select your required groups in group mapping.
06-20-2021 02:39 AM
According to the specs of a pa-220 this shouldn't be a problem. This hardware is specified for 128'000 IP mappings in the dataplane and 524'288 in the management plane. Active and unique groups you can have 1000 in your policies.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
