Third-Party VPN Client Support

The following topics provide support information for third-party clients:

What Third-Party VPN Clients are Supported?

The following table lists third-party VPN client support for PAN-OS®.
For stronger security, higher tunnel capacities, and a greater breadth of features, we recommend that you use the GlobalProtect app instead of a third-party VPN client.
Third-Party IPSec Client
Minimum PAN-OS Release Version
iOS built-in IPSec client
7.1
Android built-in IPSec client
7.1
VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
7.1
strongSwan on Ubuntu Linux and CentOS
*
7.1
*
To set up authentication for strongSwan Ubuntu and CentOS clients for PAN-OS 7.1 and later releases, refer to the GlobalProtect Administrator’s Guide for your release.
Clients emulating GlobalProtect are not supported.

What GlobalProtect Features Do Third-Party Clients Support?

Third-party clients support the following GlobalProtect features:
GlobalProtect Feature
iOS Built-In IPSec Client
Android Built-In IPSec Client
VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
strongSwan on Ubuntu Linux and CentOS
check-mark.png
check-mark.png
check-mark.png
check-mark.png
IPSec VPN Connections
check-mark.png
check-mark.png
check-mark.png
check-mark.png
IPv4 Addressing
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png

How Many Third-Party Clients Does Each Firewall Model Support?

The following table lists the maximum number of third-party X-Auth IPSec clients supported by each firewall model.
Palo Alto Networks Firewall Model
Maximum Third-Party X-Auth IPSec Clients
Hardware Firewalls
PA-7050
2000
PA-5250
2000
PA-5050
1000
PA-5020
1000
PA-3250
1500
PA-3050
1000
VM-Series Firewalls
VM-700
1000
VM-500
500
VM-300
500
VM-200
500
VM-100
500
VM-50
125

Recommended For You