The following table lists third-party VPN client support
for PAN-OS® software.
For stronger security, higher tunnel
capacities, and a greater breadth of features,
we recommend that you use the GlobalProtect™ app instead of a third-party
VPN client.
Third-Party IPSec
Client
Minimum PAN-OS Version
iOS built-in IPSec client
9.1
Android built-in IPSec client
9.1
VPNC on Ubuntu Linux 10.04 and later versions
and CentOS 6 and later versions
9.1
strongSwan on Ubuntu Linux and CentOS*
9.1
* To set up authentication
for strongSwan Ubuntu and CentOS clients for PAN-OS 9.1 and later
releases, refer to the GlobalProtect Administrator’s
Guide for your release.
Clients emulating GlobalProtect are not
supported.
What GlobalProtect
Features Do Third-Party Clients Support?
Third-party clients support the following GlobalProtect™
features:
GlobalProtect Feature
iOS Built-In IPSec Client
Android Built-In IPSec Client
VPNC on Ubuntu Linux 10.04 and later versions
and CentOS 6 and later versions
How Many Third-Party
Clients Does Each Firewall Model Support?
The following table lists the maximum
number of third-party X-Auth IPSec clients supported by each firewall
model.
Palo Alto Networks Firewall Model
Maximum Third-Party X-Auth IPSec Clients
Hardware Firewalls
PA-7080
2,000
PA-7050
2,000
PA-5450
4,000
PA-5440
4,000
PA-5430
4,000
PA-5420
4,000
PA-5410
4,000
PA-5280
2,500
PA-5260
2,500
PA-5250
2,000
PA-5220
1,500
PA-3440
2,000
PA-3430
2,000
PA-3420
1,500
PA-3410
1,500
PA-3260
1,500
PA-3250
1,500
PA-3220
1,000
PA-1420
1,400
PA-1410
1,400
PA-850
500
PA-820
500
PA-460
1,400
PA-450
1,400
PA-445
1,400
PA-440
1,400
PA-415
500
PA-410
500
PA-220R
500
PA-220**
500
VM-Series Firewalls
VM-700
1,000
VM-500
500
VM-300
500
VM-200
500
VM-100
500
VM-50
125
* PA-220 firewalls are supported only on PAN-OS 10.2 and earlier supported PAN-OS versions. Refer
to hardware end-of-life (EoL) dates for more
information about end-of-life products.
