>
    Strata Copilot
    Modify the Oversubscription Rate for DIPP NAT
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. NAT
    4. Configure NAT
    5. Modify the Oversubscription Rate for DIPP NAT
    Download PDF
    Next-Generation Firewall

    Modify the Oversubscription Rate for DIPP NAT

    Table of Contents

    Modify the Oversubscription Rate for DIPP NAT

    Reduce the oversubscription rate if you have enough public IP addresses that you don't need to use DIPP NAT oversubscription, thereby gaining more DIP and DIPP NAT rules allowed.
    Where Can I Use This?What Do I Need?
    • NGFW (Managed by PAN-OS or Panorama)
    If you have enough public IP addresses that you do not need to use DIPP NAT oversubscription, you can reduce the oversubscription rate and thereby gain more DIP and DIPP NAT rules allowed.
    1. View the DIPP NAT oversubscription rate.
      1. Select DeviceSetupSessionSession Settings. View the NAT Oversubscription Rate setting.
    2. Set the DIPP NAT oversubscription rate.
      1. Edit the Session Settings section.
      2. In the NAT Oversubscription Rate list, select 1x, 2x, 4x, or 8x, depending on which ratio you want.
        The Platform Default setting applies the default oversubscription setting for the model. If you want no oversubscription, select 1x.
      3. Click OK and Commit the change.
        If you have a PA-7500 Series firewall running PAN-OS 12.1.5 or a later release and you plan to maximize the DIPP NAT translated IP addresses to 32,000, you must reduce the oversubscription ratio to 1x in most configurations. Furthermore, if you configure a PA-7500 Series firewall with more than 16,000 DIPP NAT translated IP addresses, you can't downgrade to a PAN-OS version earlier than PAN-OS 12.1.5.

    © 2026 Palo Alto Networks, Inc. All rights reserved.