Internal Gateway Selection

Wojciech_Rogala — Fri, 18 Aug 2023 10:40:19 GMT

I'm wondering where I can find official documentation about process of Internal Gateway Selection. There is only a broad documentation how does the external process looks like. Right now I'm testing a setup to have a redundant Internal Gateways to avoid single point of failure, and what I can see in my observation is that GP is connecting to every Internal Gateway on the list.

Further more depending on a dice roll I think, user-id to ip mapping is created on some of them. I saw already few situation:

- mapping created only on one gateway further away in terms of latency, redistributed to others

- mapping created on two gateways, one with low latency, one with high, redistributed to others

- mapping created on all four gateways

I'm just wondering how it was designed by Palo Alto, and if that's an expected result.

topic Internal Gateway Selection in GlobalProtect Discussions

Internal Gateway Selection