Third-Party VPN Client Support
The following topics provide support information for
third-party clients:
What Third-Party
VPN Clients are Supported?
The following table lists third-party VPN client support
for PAN-OS®.
For stronger security, higher tunnel
capacities, and a greater breadth of features,
we recommend that you use the GlobalProtect app instead of a third-party
VPN client.
Third-Party IPSec
Client | Minimum PAN-OS
Release Version |
|---|---|
iOS built-in IPSec client | 7.1 |
Android built-in IPSec client | 7.1 |
VPNC on Ubuntu Linux 10.04 and later versions
and CentOS 6 and later versions | 7.1 |
strongSwan on Ubuntu Linux and CentOS * | 7.1 |
* To set up authentication
for strongSwan Ubuntu and CentOS clients for PAN-OS 7.1 and later
releases, refer to the GlobalProtect Administrator’s
Guide for your release. | |
Clients emulating GlobalProtect are not
supported.
What GlobalProtect
Features Do Third-Party Clients Support?
Third-party clients support the following GlobalProtect
features:
GlobalProtect Feature | iOS Built-In IPSec Client | Android Built-In IPSec Client | VPNC on Ubuntu Linux 10.04 and later versions and CentOS
6 and later versions | strongSwan on Ubuntu Linux and CentOS |
|---|---|---|---|---|
IPSec VPN Connections |  | | | |
IPv4 Addressing | | | | |
How Many Third-Party
Clients Does Each Firewall Model Support?
The following table lists the maximum
number of third-party X-Auth IPSec clients supported by each firewall
model.
Palo Alto Networks Firewall Model | Maximum Third-Party X-Auth IPSec Clients |
|---|---|
Hardware Firewalls | |
PA-7050 | 2000 |
PA-5250 | 2000 |
PA-5050 | 1000 |
PA-5020 | 1000 |
PA-3250 | 1500 |
PA-3050 | 1000 |
VM-Series Firewalls | |
VM-700 | 1000 |
VM-500 | 500 |
VM-300 | 500 |
VM-200 | 500 |
VM-100 | 500 |
VM-50 | 125 |