You can create multiple portal and gateway pairs without the license. But you cannot create one portal and multiple gateway without the license.
It depends what you mean by"multiple." In 5.0.4, it appears that I can create a single portal, but multiple gateways, and use AD groups to assign clients to the correct gateway under Network > Portal > Client Config, all without a license. What I cannot do without a portal license is define multiple gateways within a single client config, which large orgs need for geographic load-balancing or failover purposes. I am also missing the iOS/Android apps and HIP -- nice, but probably not worth $7500/year for us. I also cannot assign zones dynamically for native IPSec clients. All I get is PAN GP client config. Still, this is pretty good; it covers all the likely self-service scenarios. Due to the complexity of IPSec/Certificate deployment on iOS and especially Android, mobile device VPN installs are probably going to be performed by trained help desk staff anyway.
... View more