Difference between Backup SC and Secondary WAN in Prisma Access?

JoeKwok — Sun, 18 Jul 2021 05:27:56 GMT

There are two option can be set on Service Connection

One is Secondary WAN and other one is Backup SC

I would like to know the difference between them.

Is it like a Secondary WAN as a active-passive and Backup SC as a active-active?

However, when I set a Secondary WAN, my secondary WAN firewall still receive the BGP advertise from Prisma Access, is it imply that this is not a "passive"?

For the Backup SC, if it is work as active-active, how to determine the packet egress service connection? if both service connection is set on the same country. Will it occur a asymmetric routing?

Re: Difference between Backup SC and Secondary WAN in Prisma Access?

NikolayDimitrov — Thu, 05 Aug 2021 11:17:46 GMT

The secondary WAN is if the on premise device has another WAN link and you use it as a backup if the primary link fails (this is if you have Dual ISP in your data center). The secondary WAN link is down and only goes up if the primary link commes up.

For Backup SC I think this is if you have two on premise devices that you want if there is an issue with the primary on premise device and its main connection to failover to the other or even an active and standby Data Centers:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prepare-the-prisma-access-infrastructure/create-a-service-connection

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-for-networks/configure-prisma-access-for-networks

------------

You can select any service connection that you have already added. Prisma Access uses the

Backup SC you select as the preferred service connection in the event of a link failure. Selecting a backup service connection can prevent asymmetric routing issues if you have onboarded more than two service connections. This choice is available in Hot potato routing mode only.

------------

For more about routing see as the Prisma access uses AS prepend with the BGP to control that only the primar service connection is used and not the the backup service connection:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prepare-the-prisma-access-infrastructure/route-preferences-for-service-connection-traffic.html

topic Difference between Backup SC and Secondary WAN in Prisma Access? in Prisma Access Discussions

Difference between Backup SC and Secondary WAN in Prisma Access?

Re: Difference between Backup SC and Secondary WAN in Prisma Access?