https://live.paloaltonetworks.com/t5/next-generation-firewall/global-protect-satellite-over-2-isp-s/m-p/530450#M891 <P>Hi,&nbsp;</P> <P>&nbsp;</P> <P>We have multiple branches connecting to a data center via Global Protect satellite connections. This works perfectly fine. We've now started installing redundant Internet links but I'm experiening issues with the GP Satellite config. Obviously, when you configure the Satellite IPSec tunnel, you need to specify the interface from which you're generating the tunnel, so you can only specify one. How do you go about this when you have 2 ISP's/Links? Merely creating 2 GP IPSec tunnels, selecting the 2 interfaces for the 2 seperate ISP's and hoping traffic switches when the main ISP goes down doesn't work.&nbsp;<BR /><BR />Main ISP advertises a default route and a secondary static default is set up to secondary ISP. Internet switches over fine but the second tunnel to the data center isn't kicking in.&nbsp;<BR /><BR />TIA</P> <P>&nbsp;</P> Thu, 09 Feb 2023 09:23:09 GMT rudiGQ 2023-02-09T09:23:09Z https://live.paloaltonetworks.com/t5/next-generation-firewall/global-protect-satellite-over-2-isp-s/m-p/530450#M891 <P>Hi,&nbsp;</P> <P>&nbsp;</P> <P>We have multiple branches connecting to a data center via Global Protect satellite connections. This works perfectly fine. We've now started installing redundant Internet links but I'm experiening issues with the GP Satellite config. Obviously, when you configure the Satellite IPSec tunnel, you need to specify the interface from which you're generating the tunnel, so you can only specify one. How do you go about this when you have 2 ISP's/Links? Merely creating 2 GP IPSec tunnels, selecting the 2 interfaces for the 2 seperate ISP's and hoping traffic switches when the main ISP goes down doesn't work.&nbsp;<BR /><BR />Main ISP advertises a default route and a secondary static default is set up to secondary ISP. Internet switches over fine but the second tunnel to the data center isn't kicking in.&nbsp;<BR /><BR />TIA</P> <P>&nbsp;</P> Thu, 09 Feb 2023 09:23:09 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/global-protect-satellite-over-2-isp-s/m-p/530450#M891 rudiGQ 2023-02-09T09:23:09Z https://live.paloaltonetworks.com/t5/next-generation-firewall/global-protect-satellite-over-2-isp-s/m-p/551624#M1607 <P>I'm interested in the same thing but can't find anything anywhere for this.<BR />Multiple gateways, yes but not multiple ISPs/WAN interfaces for a satellite.</P> Fri, 28 Jul 2023 17:05:51 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/global-protect-satellite-over-2-isp-s/m-p/551624#M1607 Dan_Morin 2023-07-28T17:05:51Z