Palo Alto 440 - Concurrent Global Protect user limit issue

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Palo Alto 440 - Concurrent Global Protect user limit issue

L1 Bithead

Hi Team,

 

I know PA 440 support up to 1000 user & its the Max tunnel user limit, but we were unable to connect more than 250 users and got this error as "maximum user limit reached" then found that the tunnel limit is [0-250] in Global protect Gateway tunnel settings. I'm using PA 440 (PAN-OS 10.1.4), kindly let me know in which PAN-OS version it supports 1000 users.

 

PaloAltoMV_0-1647057362565.pngPaloAltoMV_1-1647057467563.png

PaloAltoMV_2-1647057650629.png

 

 

Regards

Karthik

 

 

4 REPLIES 4

Cyber Elite
Cyber Elite

@PaloAltoMV,

Raise a ticket with TAC on the issue. There appears to be an bug in PAN-OS 10.1 on the 440s that are limiting it to the 410 limit instead of its proper limit. 

Hi,

 

Already ticket raised, but TAC team doesn't have a fix right now and assured it will be fixed in next release until those who purchased should have this firewall idle in store room. This is joke , where TAC team say its fixed already but request as to wait for another month for this fix. PA support is very bad and requesting not to sell this model PA-440 or purchase this device.

 

PaloAltoMV_2-1647227252628.png

 

 

Regards

Karthik

 

PaloAltoMV_1-1647227075000.png

 

L1 Bithead

TAC team assured the issue will be fixed on the 10.1.5 release, but they cheated again, even after the upgrade to 10.1.5  MAX tunnel limit is 250. 

 

PaloAltoMV_0-1648237323929.pngPaloAltoMV_1-1648237391539.png

 

 

L5 Sessionator

FYI: I upgraded my PA-440 box into 10.2.1 and confirmed that the max tunnel limit changed to 1000.

  • 3329 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!