SSL VPN USERS LIMIT

[abdulhakam]

Hi Team,

May I know, what users limit in Palo Alto PA-220, Currently VPN connection is maximum 21 (from 10.0.0.100 – 10.0.0.120).

But now, users request need more  SSL VPN users. What need to do is buy a license or what.?

Thanks

[SutareMayur]

@abdulhakam,

PA220 supports,

Max GP Client VPN - 250

Max GP Clientless VPN - 20

If you are using GP with client, then you can just increase client VPN pool as per your requirement. For using basic VPN connection, there is no license required. If you are using clientless VPN, then maximum it supports 20 connections.

Hope it helps!

Mayur

[kiwi]

Hi @abdulhakam ,

The numbers are as Mayur says.

You can see these numbers and many more per firewall model on the Palo Alto Networks comparison page:

https://www.paloaltonetworks.com/products/product-comparison.html?chosen=pa-3260,pa-220

Cheers !

-Kiwi.

[abdulhakam]

Hi @SutareMayur 

Thanks for reply.

May i know how to verify this device using Max GP Client VPN - 250 or Max GP Clientless VPN - 20.?

If GP Clientless VPN: 0

Its mean Max GP VPN is 20 user right.?

and is using GP Clientless VPN can upgrade to GP Client VPN.?

[abdulhakam]

Hi @kiwi 

Thanks for reply.

if currently using GP Clientless VPN max 20.. its possible to upgrade GP Client VPN max 250.?

Thanks

[SutareMayur]

@abdulhakam,

You need to do configuration on gateway for GP Client VPN. Please refer below link for configuration guide.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFbCAK

Mayur

[abdulhakam]

Hi @SutareMayur ,

Now using GP Clientless VPN... 

For upgrade and configure to GP Client VPN no need buy any license ?

Device Model PA 220

Thanks

[kiwi]

Hi @abdulhakam ,

If you want to use the GlobalProtect client then you do not need any licenses.

However, some of the more advanced features do require a GP subscription (such as HIP checks and associated content updates, support for the GlobalProtect mobile app, or IPv6 support).

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-overview/about...

Cheers,

-Kim.