Global Protect gateway isolation based on LAN checks

DPonsdesserre — Thu, 25 Mar 2021 14:05:11 GMT

Dear all,

Please see the design below , the idea is testing against IPs 172.16.158.1 (IPs of VLAN 161) using path monitoring + static route

Can we add a path monitoring to an internal static route , that internal route monitoring reachability of 172.16.158.1 using as a source Interface a newly created loopback that we could associate with the GP gateway ?

The goal will be that when connectivity is lost from loopback to 172.16.158.1, the GP gateway will shutdown , the ultimate goal will be to avoid the mobile user traffic to reach the fw and then be black holed ...

Regards. -

topic Global Protect gateway isolation based on LAN checks in GlobalProtect Discussions

Global Protect gateway isolation based on LAN checks