In prior releases, customers with PA-5420 firewalls faced a limitation when configuring a large number of virtual systems. The previous limit of 50 virtual routers made it challenging to deploy a dedicated virtual router for each virtual system, which is a common practice for maintaining network segmentation and administrative simplicity. This limitation often required administrators to merge virtual systems or implement more complex, less scalable routing configurations.

To solve this challenge, PAN-OS® increases the number of supported virtual routers on a PA-5420 firewall from 50 to 65. This enhancement allows you to assign a unique virtual router to each virtual system, providing greater administrative flexibility and simplifying network design. You can now support up to 65 virtual systems, each with its own virtual router, to maintain clear separation and streamline routing management across your network. This increase is particularly valuable for service providers and large enterprises that manage many tenants or independent network segments on a single firewall.