topic Re: Regarding the selection of the MU-SPN connection destination in Prisma Access Discussions

Regarding the selection of the MU-SPN connection destination

y.saitou — Mon, 30 Jun 2025 02:18:49 GMT

Attention: JAPAC TPM team
Hello Team,

When IP Optimization is disabled and there are multiple MU-SPNs in a single compute location,
how is the MU-SPN to be connected to selected?

I understand that it connects to the one that is physically close and has the fastest response,
but is load balancing performed?

If load balancing is performed, what method is used?

If the information is not public, I would appreciate it if you could let me know.

Re: Regarding the selection of the MU-SPN connection destination

nikoolayy1 — Mon, 30 Jun 2025 08:01:33 GMT

Outside of that you can see Best Gateway Selection Criteria as nowadays the gateway location is selected by response time but you can also include the gateway load as a criteria. After the location is selected the user session will persist on the SPN-MU even when there are multiple of them.

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-gateways/gateway-priority-in-a-multiple-gateway-configuration/best-gateway-selection-criteria

Only gateways for mobile users scale in a horizontal way while SC and RN scale only vertically without making extra instances.

https://live.paloaltonetworks.com/t5/pancast-episodes/pancast-episode-41-scaling-on-prisma-access/ta-p/584437

Re: Regarding the selection of the MU-SPN connection destination

y.saitou — Wed, 02 Jul 2025 08:17:44 GMT

@nikoolayy1

Thank you for your reply.

The problem has been solved.
Thank you for your help.