Request for VPN Capability Enhancement on Palo Alto Networks Firewalls

[pradip.joshi]

We respectfully request the addition and native support of Layer 2 and Layer 3 VPN technologies, specifically OpenVPN, SoftEther VPN, and WireGuard VPN, including both server and client functionalities, across all Palo Alto Networks Next-Generation Firewall platforms.

The availability of these VPN solutions would significantly improve secure connectivity, interoperability, and deployment flexibility for diverse enterprise, multi-vendor, and hybrid network environments. Such enhancements would also enable organizations to address a wider range of use cases, including remote access, site-to-site connectivity, and integration with third-party infrastructure.

[kiwi · Accepted solution]

i @pradip.joshi ,

Thanks for putting this together. To make sure it actually gets in front of the Product Management team, you need to follow the formal Feature Request (FR) process.

While the community can discuss the merits here, posts in this forum don't automatically trigger a development ticket. Here is how to move this forward so it actually has a chance of being built:

1. Contact your local SE: Feature Requests must be officially submitted through your account team. Reach out to your SE and share this write-up with them.

2. Get the FR-ID: Once your SE submits it, they will provide you with a specific Feature Request ID number.

3. Share the ID here: Once you have that ID, post it back to this thread! That allows other users and organizations who want the same thing to tell their own SEs, "Please add my vote/weight to FR-ID #XXXX."

The more unique customers that "vote" on a specific ID through their SEs, the higher it moves up the priority list for the next PAN-OS roadmap.

Kind regards,