VM-Series Plugin 3.0.6
Table of Contents
Expand all | Collapse all
-
-
-
-
- Features Introduced in Zero Touch Provisioning 2.0
- Known Issues in the Zero Touch Provisioning 2.0.4 Release
- Known Issues in the Zero Touch Provisioning 2.0.3 Release
- Known Issues in the Zero Touch Provisioning 2.0.2 Release
- Known Issues in the Zero Touch Provisioning 2.0.1 Release
- Known Issues in the Zero Touch Provisioning 2.0.0 Release
- Limitations
-
-
VM-Series Plugin 3.0.6
The VM-Series plugin 3.0.6 introduces new functionality improve your experience with the
VM-Series firewall.
Refer to the Compatibility Matrix to correlate this
VM-Series plugin version with a PAN-OS version.
Reduce Maximum Session Count on VM-Series Firewalls
VM-Series firewalls features such as GTP or session resiliency require
additional memory to function. The VM-Series firewalls have a reduced maximum
session count by default for such features.
For example, if you deploy a VM-Series firewall with 9GB of memory, that
firewall has a maximum session count of 600,000 sessions. However, for session
resiliency on that firewall, the default maximum session count will be 420,000
sessions.
New VM-Series firewalls deployed with 14GB, 16GB, 18GB, or 20GB now have
the following maximum session values. For example, if you deploy a VM-Series
firewall with 14GB of memory, that firewall has a maximum session count of 1,100,000
sessions. However, if you enable session resiliency on that firewall, the maximum
session count is 770,000 sessions by default.
| Memory | Old Maximum Session Count | New Maximum Session Count |
|---|---|---|
| 14GB | 1,200,000 | 1,100,000 |
| 16GB | 1,800,000 | 1,100,000 |
| 18GB | 2,000,000 | 1,200,000 |
| 20GB | 2,800,000 | 1,800,000 |
Additionally, you can manually reduce the maximum session count by a fixed
amount as described in the table below. Use the following CLI command to reduce the
maximum session count by a fixed amount after executing the command and reboot the
firewall.
For GTP or session resiliency after executing this command, the session
count will be reduced by an additional 30% by default.
For example, a 12GB VM-Series firewall supports a maximum session count of
1,000,000. Executing the scale down command reduces the count to 800,000. For GTP,
the count goes to 560,000.
request plugins vm_series set-session-max scale-down
You can reset the default maximum session count value by executing the
following command and rebooting your firewall.
request plugins vm_series set-session-max
default
| Memory | Default Max Sessions | Reduced Max Sessions | GTP/Session Resiliency |
|---|---|---|---|
| 10GB | 800,000 | 500,000 | 350000 |
| 12GB | 1,000,000 | 800,000 | 560,000 |
| 24GB | 3,600,000 | 2,500,000 | 1750000 |
| 28GB | 4,400,000 | 2,800,000 | 1960000 |
| 32GB | 5,200,000 | 3,500,000 | 2450000 |
| 36GB | 6,000,000 | 4,500,000 | 3150000 |
| 40GB | 6,800,000 | 5,500,000 | 3850000 |
| 44GB | 7,600,000 | 6,750,000 | 4725000 |
| 48GB | 8,400,000 | 7,000,000 | 4900000 |
| 52GB | 9,200,000 | 8,150,000 | 5705000 |
| 56GB | 10,000,000 | 8,500,000 | 5950000 |
| 64GB | 10,000,000 | 8,250,000 | 5775000 |
| 128GB | 14,000,000 | 10,000,000 | 7000000 |