https://live.paloaltonetworks.com/t5/globalprotect-discussions/lsvpn-with-pa-450-spokes-10-1-active-active-or-active-passive/m-p/505191#M2903 <P>Hello,</P><P>new to PAN .. at the moment we have to do a concept for failover in branch offices, in the LSVPN context.<BR />We do have 2 LSVPN Hub Palo Alto FWs in Azure in active/active, where Azure Loadbalancer balances the traffic.<BR /><BR />Now the question is for "standard design" spoke / branch offices.<BR />When we do have 2 ISPs in the location, both ISP lines should be used for ISP failover and bandwidth.<BR /><BR />Questions..<BR />1. When having a pair of PA-450 in active-active mode as LSVPN satellite, is the FW througput doubled compared to active/passive?<BR />2. What is your expirience on LSVPN, spoke PA-450 FW as active/active or active/passive, and why would you recommend the one or the other?</P> Tue, 21 Jun 2022 16:37:15 GMT DusanNovakovic 2022-06-21T16:37:15Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/lsvpn-with-pa-450-spokes-10-1-active-active-or-active-passive/m-p/505191#M2903 <P>Hello,</P><P>new to PAN .. at the moment we have to do a concept for failover in branch offices, in the LSVPN context.<BR />We do have 2 LSVPN Hub Palo Alto FWs in Azure in active/active, where Azure Loadbalancer balances the traffic.<BR /><BR />Now the question is for "standard design" spoke / branch offices.<BR />When we do have 2 ISPs in the location, both ISP lines should be used for ISP failover and bandwidth.<BR /><BR />Questions..<BR />1. When having a pair of PA-450 in active-active mode as LSVPN satellite, is the FW througput doubled compared to active/passive?<BR />2. What is your expirience on LSVPN, spoke PA-450 FW as active/active or active/passive, and why would you recommend the one or the other?</P> Tue, 21 Jun 2022 16:37:15 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/lsvpn-with-pa-450-spokes-10-1-active-active-or-active-passive/m-p/505191#M2903 DusanNovakovic 2022-06-21T16:37:15Z