: Third-Party VPN Client Support
Focus
Focus

Third-Party VPN Client Support

Table of Contents

Third-Party VPN Client Support

Review the third-party VPN client support for GlobalProtect™.
The following topics provide support information for third-party clients:

What Third-Party VPN Clients are Supported?

The following table lists third-party VPN client support for PAN-OS® software.
For stronger security, higher tunnel capacities, and a greater breadth of features, we recommend that you use the GlobalProtect™ app instead of a third-party VPN client.
Third-Party IPSec Client
Minimum PAN-OS Version
iOS built-in IPSec client
9.1
Android built-in IPSec client
9.1
VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
9.1
strongSwan on Ubuntu Linux and CentOS*
9.1
* To set up authentication for strongSwan Ubuntu and CentOS clients for PAN-OS 9.1 and later releases, refer to the GlobalProtect Administrator’s Guide for your release.
Clients emulating GlobalProtect are not supported.

What GlobalProtect Features Do Third-Party Clients Support?

Third-party clients support the following GlobalProtect™ features:
GlobalProtect Feature
iOS Built-In IPSec Client
Android Built-In IPSec Client
VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
strongSwan on Ubuntu Linux and CentOS
Mixed Authentication Method Support for Certificates or User Credentials
IPSec VPN Connections
IPv4 Addressing
Gateway-Level IP Pools
Primary Username Visiblity on GlobalProtect Gateways

How Many Third-Party Clients Does Each Firewall Model Support?

The following table lists the maximum number of third-party X-Auth IPSec clients supported by each firewall model.
Palo Alto Networks Firewall Model
Maximum Third-Party X-Auth IPSec Clients
Hardware Firewalls
PA-7080
2,000
PA-7050
2,000
PA-5450
4,000
PA-5440
4,000
PA-5430
4,000
PA-5420
4,000
PA-5410
4,000
PA-5280
2,500
PA-5260
2,500
PA-5250
2,000
PA-5220
1,500
PA-3440
2,000
PA-3430
2,000
PA-3420
1,500
PA-3410
1,500
PA-3260
1,500
PA-3250
1,500
PA-3220
1,000
PA-3050
1,000
PA-1420
1,400
PA-1410
1,400
PA-850
500
PA-820
500
PA-460
1,400
PA-450
1,400
PA-445
1,400
PA-440
1,400
PA-415
500
PA-410
500
PA-220R
500
PA-220**
500
VM-Series Firewalls
VM-700
1,000
VM-500
500
VM-300
500
VM-200
500
VM-100
500
VM-50
125
* PA-220 firewalls are supported only on PAN-OS 10.2 and earlier supported PAN-OS versions. Refer to hardware end-of-life (EoL) dates for more information about end-of-life products.