X-Auth IPSec Client Support

The following topics provide support information for third-party X-Auth IPSec clients:

What X-Auth IPSec Clients are Supported?

The following table lists third-party X-Auth IPSec client support for PAN-OS®.
For stronger security, higher tunnel capacities, and a greater breadth of features, we recommend that you use the GlobalProtect app instead of an X-Auth IPSec client.
Third-Party X-Auth IPSec Client
Minimum PAN-OS Release Version
iOS built-in IPSec client
7.1
Android built-in IPSec client
7.1
VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
7.1
strongSwan on Ubuntu Linux and CentOS*
7.1
* To set up authentication for strongSwan Ubuntu and CentOS clients for PAN-OS 7.1 and later releases, refer to the GlobalProtect Administrator’s Guide for your release.

What GlobalProtect Features Do Third-Party X-Auth IPSec Clients Support?

Third-party X-Auth IPSec clients support the following GlobalProtect features:
GlobalProtect Feature
iOS Built-In IPSec Client
Android Built-In IPSec Client
VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
strongSwan on Ubuntu Linux and CentOS
Mixed Authentication Method Support for Certificates or User Credentials
check-mark.png
check-mark.png
check-mark.png
check-mark.png
IPSec VPN Connections
check-mark.png
check-mark.png
check-mark.png
check-mark.png
IPv4 Addressing
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Gateway-Level IP Pools
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Primary Username Visiblity on GlobalProtect Gateways
check-mark.png
check-mark.png
check-mark.png
check-mark.png

How Many X-Auth Clients Does Each Firewall Model Support?

The following table lists the maximum number of third-party X-Auth IPSec clients supported by each firewall model.
Palo Alto Networks Firewall Model
Maximum Third-Party X-Auth IPSec Clients
Hardware Firewalls
PA-7050
2000
PA-5250
2000
PA-5050
1000
PA-5020
1000
PA-3250
1500
PA-3050
1000
VM-Series Firewalls
VM-700
1000
VM-500
500
VM-300
500
VM-200
500
VM-100
500
VM-50
125

Related Documentation