topic Re: Connect to (2) different PAN environments at the same time in GlobalProtect Discussions

Connect to (2) different PAN environments at the same time

STI_IT — Mon, 21 Jun 2021 18:09:49 GMT

Hello all,

Does Global Protect allow for making two concurrent connections to different environments at the same time? We have (2) pairs of PAN's in different data centers (on different subnets) and have a need for connecting to both environments at the same time. In the past we have used OpenVPN prior to migrating to PAN's. Is this possible with Global Protect?

Thanks,

Re: Connect to (2) different PAN environments at the same time

Mick_Ball — Mon, 21 Jun 2021 18:41:17 GMT

The simple answer to your question is “No”.

the not so simple answer is as follows,,,

No, but yes, but no... i would have thought your best option would have been a tunnel between the 2 sites and route accordingly....

globalprotect client will not allow multiple connections at the same time but you could connect to site 1 with GP and split tunnel traffic destined for that direction and then run a native ipsec client to the other site using x auth and route as needed...

or...

GP to site 1 and x auth ipsec to site 2 through the GP tunnel... i have not tried either of these options but I’m sure it’s doable...

Re: Connect to (2) different PAN environments at the same time

STI_IT — Mon, 21 Jun 2021 19:15:11 GMT

Thanks for the reply, that's kind of what we were thinking but worth it to check and see. We do have a BOVPN tunnel between locations so maybe we will tweak the VPN to hop over that.