Third-Party VPN Client Support
Table of Contents
Expand all | Collapse all
- CN-Series Firewalls
- MFA Vendor Support
-
- Cloud Identity Engine Cipher Suites
-
- PAN-OS 11.2 GlobalProtect Cipher Suites
- PAN-OS 11.2 IPSec Cipher Suites
- PAN-OS 11.2 IKE and Web Certificate Cipher Suites
- PAN-OS 11.2 Decryption Cipher Suites
- PAN-OS 11.2 Administrative Session Cipher Suites
- PAN-OS 11.2 HA1 SSH Cipher Suites
- PAN-OS 11.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 11.1 GlobalProtect Cipher Suites
- PAN-OS 11.1 IPSec Cipher Suites
- PAN-OS 11.1 IKE and Web Certificate Cipher Suites
- PAN-OS 11.1 Decryption Cipher Suites
- PAN-OS 11.1 Administrative Session Cipher Suites
- PAN-OS 11.1 HA1 SSH Cipher Suites
- PAN-OS 11.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 11.0 GlobalProtect Cipher Suites
- PAN-OS 11.0 IPSec Cipher Suites
- PAN-OS 11.0 IKE and Web Certificate Cipher Suites
- PAN-OS 11.0 Decryption Cipher Suites
- PAN-OS 11.0 Administrative Session Cipher Suites
- PAN-OS 11.0 HA1 SSH Cipher Suites
- PAN-OS 11.0 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.0 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.2 GlobalProtect Cipher Suites
- PAN-OS 10.2 IPSec Cipher Suites
- PAN-OS 10.2 IKE and Web Certificate Cipher Suites
- PAN-OS 10.2 Decryption Cipher Suites
- PAN-OS 10.2 Administrative Session Cipher Suites
- PAN-OS 10.2 HA1 SSH Cipher Suites
- PAN-OS 10.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.1 GlobalProtect Cipher Suites
- PAN-OS 10.1 IPSec Cipher Suites
- PAN-OS 10.1 IKE and Web Certificate Cipher Suites
- PAN-OS 10.1 Decryption Cipher Suites
- PAN-OS 10.1 Administrative Session Cipher Suites
- PAN-OS 10.1 HA1 SSH Cipher Suites
- PAN-OS 10.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 9.1 GlobalProtect Cipher Suites
- PAN-OS 9.1 IPSec Cipher Suites
- PAN-OS 9.1 IKE and Web Certificate Cipher Suites
- PAN-OS 9.1 Decryption Cipher Suites
- PAN-OS 9.1 Administrative Session Cipher Suites
- PAN-OS 9.1 HA1 SSH Cipher Suites
- PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 9.1 Cipher Suites Supported in FIPS-CC Mode
- Prisma Access
- Strata Cloud Manager and Panorama Feature Parity
- User-ID Agent
- Terminal Server (TS) Agent
- Strata Logging Service Software Compatibility
- Cortex XDR
- Endpoint Security Manager (ESM)
- IPv6 Support by Feature
- Mobile Network Infrastructure Feature Support
Third-Party VPN Client Support
Review the third-party VPN client support for GlobalProtect™.
The following topics provide support information for
third-party clients:
- What Third-Party VPN Clients are Supported?
- What GlobalProtect Features Do Third-Party Clients Support?
- How Many Third-Party Clients Does Each Firewall Model Support?
What Third-Party VPN Clients are Supported?
The following table lists third-party VPN client support
for PAN-OS® software.
For stronger security, higher tunnel
capacities, and a greater breadth of features,
we recommend that you use the GlobalProtect™ app instead of a third-party
VPN client.
Third-Party IPSec
Client | Minimum PAN-OS Version |
---|---|
iOS built-in IPSec client | 9.1 |
Android built-in IPSec client | 9.1 |
VPNC on Ubuntu Linux 10.04 and later versions
and CentOS 6 and later versions | 9.1 |
strongSwan on Ubuntu Linux and CentOS* | 9.1 |
* To set up authentication
for strongSwan Ubuntu and CentOS clients for PAN-OS 9.1 and later
releases, refer to the GlobalProtect Administrator’s
Guide for your release. |
Clients emulating GlobalProtect are not
supported.
What GlobalProtect Features Do Third-Party Clients Support?
Third-party clients support the following GlobalProtect™
features:
GlobalProtect Feature | iOS Built-In IPSec Client | Android Built-In IPSec Client | VPNC on Ubuntu Linux 10.04 and later versions
and CentOS 6 and later versions | strongSwan on Ubuntu Linux and CentOS |
---|---|---|---|---|
IPSec VPN Connections | √ | √ | √ | √ |
IPv4 Addressing | √ | √ | √ | √ |
How Many Third-Party Clients Does Each Firewall Model Support?
The following table lists the maximum
number of third-party X-Auth IPSec clients supported by each firewall
model.
Palo Alto Networks Firewall Model | Maximum Third-Party X-Auth IPSec Clients |
---|---|
Hardware Firewalls | |
PA-7080 | 2,000 |
PA-7050 | 2,000 |
PA-5450 | 4,000 |
PA-5440 | 4,000 |
PA-5430 | 4,000 |
PA-5420 | 4,000 |
PA-5410 | 4,000 |
PA-5280 | 2,500 |
PA-5260 | 2,500 |
PA-5250 | 2,000 |
PA-5220 | 1,500 |
PA-3440 | 2,000 |
PA-3430 | 2,000 |
PA-3420 | 1,500 |
PA-3410 | 1,500 |
PA-3260 | 1,500 |
PA-3250 | 1,500 |
PA-3220 | 1,000 |
PA-3050 | 1,000 |
PA-1420 | 1,400 |
PA-1410 | 1,400 |
PA-850 | 500 |
PA-820 | 500 |
PA-460 | 1,400 |
PA-450 | 1,400 |
PA-445 | 1,400 |
PA-440 | 1,400 |
PA-415 | 500 |
PA-410 | 500 |
PA-220R | 500 |
PA-220** | 500 |
VM-Series Firewalls | |
VM-700 | 1,000 |
VM-500 | 500 |
VM-300 | 500 |
VM-200 | 500 |
VM-100 | 500 |
VM-50 | 125 |
* PA-220 firewalls are supported only on PAN-OS 10.2 and earlier supported PAN-OS versions. Refer
to hardware end-of-life (EoL) dates for more
information about end-of-life products.