>
    Strata Copilot
    Terminal Server (TS) Agent
    Focus
    Download PDF
    Focus
    1. Home
    2. Compatibility Matrix
    3. Terminal Server (TS) Agent
    Download PDF
    Compatibility Matrix

    Terminal Server (TS) Agent

    Table of Contents

    Terminal Server (TS) Agent

    Review support information about the Terminal Server (TS) agent and where you can install the agent.
    You install the Terminal Server (TS) agent on a domain server that is running a supported operating system (OS) and then report username-to-port mapping information to PAN-OS® firewalls.

    Where Can I Install the Terminal Server (TS) Agent?

    The following table shows the operating systems on which you can install each release of the Terminal Server (TS) agent.
    For optimal configuration, install the TS agent version that matches the PAN-OS version running on your firewall. If there is not a TS agent version that matches your PAN-OS version, install the latest version that is closest to the PAN-OS version.
    Operating System
    TS Agent 10.1
    TS Agent 10.2
    TS Agent 11.0
    		TS Agent 11.1TS Agent 11.1.1
    Windows Server 2025
    —
    —
    —
    —
    √
    Windows Server 2022
    √
    √
    √
    √
    √
    Windows Server 2019
    √
    √
    √
    √
    √
    Windows Server 2016
    √
    √
    √
    —
    —
    Windows Server 2012 R2
    √
    √
    √
    —
    —
    Windows 11 Enterprise Multi-session
    √
    √
    √
    √
    √
    Windows 10 Enterprise Multi-session
    √
    √
    √
    √
    √
    Citrix Metaframe Presentation Server 4.x
    √
    √
    √
    —
    —
    Citrix XenApp 5.x
    √
    √
    √
    —
    —
    Citrix XenApp 6.x
    √
    √
    √
    —
    —
    Citrix XenApp 7.x
    √
    √
    √
    —
    —

    How Many TS Agents Does My Firewall Support?

    The following table shows how many Terminal Server (TS) agents each hardware-based and VM-Series firewall supports. To confirm which PAN-OS® releases are supported on your firewall, review the Supported PAN-OS releases for each model.
    For optimal configuration, install the TS agent version that matches the PAN-OS version running on the firewall. If there is not a TS agent version that matches the PAN-OS version, install the latest version that is closest to the PAN-OS version.
    Firewall or VM Model
    PAN-OS 10.1
    PAN-OS 10.2
    PAN-OS 11.0
    PAN-OS 11.1 and later versions
    Hardware Firewalls
    PA-7000 Series
    2,000
    2,000
    2,000
    2,000
    PA-7000 Series with SMC-B
    2,500
    2,500
    2,500
    2,500
    PA-5450
    2,500
    2,500
    2,500
    2,500
    PA-5440
    —
    —
    2,500
    2,500
    PA-5410, PA-5420, and PA-5430
    —
    2,500
    2,500
    2,500
    PA-5200 Series
    2,500
    2,500
    2,500
    2,500
    PA-3430 and PA-3440
    —
    2,000
    2,000
    2,000
    PA-3410 and PA-3420
    —
    2,000
    2,000
    2,000
    PA-3200 Series
    2,000
    2,000
    2,000
    2,000
    PA-1400 Series
    —
    —
    400
    400
    PA-800 Series
    1,000
    1,000
    1,000
    1,000
    PA-460
    1,000
    1,000
    1,000
    1,000
    PA-450
    400
    400
    400
    400
    PA-445
    —
    —
    800
    800
    PA-440
    800
    800
    800
    800
    PA-415
    —
    —
    400
    400
    PA-410
    400
    10.1.2 & later
    400
    400
    400
    PA-220R
    400
    400
    400
    400
    PA-220
    400
    400
    —
    —
    Software Firewalls
    VM-700
    2,500
    2,500
    2,500
    2,500
    VM-500
    2,000
    2,000
    2,000
    2,000
    VM-300
    400
    400
    400
    400
    VM-100
    400
    400
    400
    400
    VM-50 Lite
    400
    400
    400
    400

    © 2026 Palo Alto Networks, Inc. All rights reserved.