https://live.paloaltonetworks.com/t5/globalprotect-discussions/documentation-for-lsvpn-deployments/m-p/439749#M1862 <P>Does anyone have access to, pointers to, or stashes of better documentation for how LSVPN works?&nbsp; Something along the lines of "best practices" for configuring routing for the satellites?&nbsp; Or with "big picture" information on how all the pieces work together?</P><P>&nbsp;</P><P>The GlobalProtect Administration Guide and the PanOS Admin Guide show you all the nitty-gritty for configuring the bits on the firewalls, but it doesn't really give you a good sense of how the pieces mesh into a unified whole.</P><P>&nbsp;</P><P>We have a working GlobalProtect setup at work with multiple Portals, multiple Gateways, authenticating using local users and LDAP groups.&nbsp; All of that is easy to configure and understand, and the setup we're using is extensible to other Gateways as/when needed.</P><P>&nbsp;</P><P>Just did my first LSVPN setup, and nothing about it was easy to do, especially around how routing in VRs on the Satellite interact with Access Routes and Route Filtering on the Gateway.&nbsp; And there's no information that I can find anywhere for how to force the Satellite to download a new configuration from the Gateway when changes are made.&nbsp; I'm fairly certain that my setup is not optimal, but I can't find any information on how to improve it.</P><P>&nbsp;</P><P>So, does anyone have a secret stash of LSVPN "big picture" documentation they'd be willing to share?</P> Fri, 08 Oct 2021 18:29:49 GMT fjwcash 2021-10-08T18:29:49Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/documentation-for-lsvpn-deployments/m-p/439749#M1862 <P>Does anyone have access to, pointers to, or stashes of better documentation for how LSVPN works?&nbsp; Something along the lines of "best practices" for configuring routing for the satellites?&nbsp; Or with "big picture" information on how all the pieces work together?</P><P>&nbsp;</P><P>The GlobalProtect Administration Guide and the PanOS Admin Guide show you all the nitty-gritty for configuring the bits on the firewalls, but it doesn't really give you a good sense of how the pieces mesh into a unified whole.</P><P>&nbsp;</P><P>We have a working GlobalProtect setup at work with multiple Portals, multiple Gateways, authenticating using local users and LDAP groups.&nbsp; All of that is easy to configure and understand, and the setup we're using is extensible to other Gateways as/when needed.</P><P>&nbsp;</P><P>Just did my first LSVPN setup, and nothing about it was easy to do, especially around how routing in VRs on the Satellite interact with Access Routes and Route Filtering on the Gateway.&nbsp; And there's no information that I can find anywhere for how to force the Satellite to download a new configuration from the Gateway when changes are made.&nbsp; I'm fairly certain that my setup is not optimal, but I can't find any information on how to improve it.</P><P>&nbsp;</P><P>So, does anyone have a secret stash of LSVPN "big picture" documentation they'd be willing to share?</P> Fri, 08 Oct 2021 18:29:49 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/documentation-for-lsvpn-deployments/m-p/439749#M1862 fjwcash 2021-10-08T18:29:49Z