>
    Strata Copilot
    Third-Party VPN Client Support
    Focus
    Download PDF
    Focus
    1. Home
    2. Compatibility Matrix
    3. GlobalProtect
    4. Third-Party VPN Client Support
    Download PDF
    Compatibility Matrix

    Third-Party VPN Client Support

    Table of Contents

    Third-Party VPN Client Support

    Review the third-party VPN client support for GlobalProtect™.
    The following topics provide support information for third-party clients:

    What Third-Party VPN Clients are Supported?

    The following table lists third-party VPN client support for PAN-OS® software.
    For stronger security, higher tunnel capacities, and a greater breadth of features, we recommend that you use the GlobalProtect™ app instead of a third-party VPN client.
    Third-Party IPSec Client
    Minimum PAN-OS Version
    iOS built-in IPSec client
    9.1
    Android built-in IPSec client
    9.1
    VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
    9.1
    strongSwan on Ubuntu Linux and CentOS*
    9.1
    * To set up authentication for strongSwan Ubuntu and CentOS clients for PAN-OS 9.1 and later releases, refer to the GlobalProtect Administrator’s Guide for your release.
    Clients emulating GlobalProtect are not supported.

    What GlobalProtect Features Do Third-Party Clients Support?

    Third-party clients support the following GlobalProtect™ features:
    GlobalProtect Feature
    iOS Built-In IPSec Client
    Android Built-In IPSec Client
    VPNC on Ubuntu Linux 10.04 and later versions and CentOS 6 and later versions
    strongSwan on Ubuntu Linux and CentOS
    Mixed Authentication Method Support for Certificates or User Credentials
    √
    √
    √
    √
    IPSec VPN Connections
    √
    √
    √
    √
    IPv4 Addressing
    √
    √
    √
    √
    Gateway-Level IP Pools
    √
    √
    √
    √
    Primary Username Visiblity on GlobalProtect Gateways
    √
    √
    √
    √

    How Many Third-Party Clients Does Each Firewall Model Support?

    The following table lists the maximum number of third-party X-Auth IPSec clients supported by each firewall model.
    Palo Alto Networks Firewall Model
    Maximum Third-Party X-Auth IPSec Clients
    Hardware Firewalls
    PA-7080
    2,000
    PA-7050
    2,000
    PA-5450
    4,000
    PA-5440
    4,000
    PA-5430
    4,000
    PA-5420
    4,000
    PA-5410
    4,000
    PA-5280
    2,500
    PA-5260
    2,500
    PA-5250
    2,000
    PA-5220
    1,500
    PA-3440
    2,000
    PA-3430
    2,000
    PA-3420
    1,500
    PA-3410
    1,500
    PA-3260
    1,500
    PA-3250
    1,500
    PA-3220
    1,000
    PA-1420
    1,400
    PA-1410
    1,400
    PA-850
    500
    PA-820
    500
    PA-460
    1,400
    PA-450
    1,400
    PA-445
    1,400
    PA-440
    1,400
    PA-415
    500
    PA-410
    500
    PA-220R
    500
    PA-220**
    500
    VM-Series Firewalls
    VM-700
    1,000
    VM-500
    500
    VM-300
    500
    VM-200
    500
    VM-100
    500
    VM-50
    125
    * PA-220 firewalls are supported only on PAN-OS 10.2 and earlier supported PAN-OS versions. Refer to hardware end-of-life (EoL) dates for more information about end-of-life products.

    © 2026 Palo Alto Networks, Inc. All rights reserved.