Prisma Access BW Allocation

dalia2 — Wed, 14 Jun 2023 15:32:50 GMT

Hi All,

Would be great if you can help me clarify these questions:

1- On Panorama managed Prisma Access we can configure the BW Allocation on Compute location level, assuming a Scenario of multiple compute locations used and allocated BW out of the total BW Subscription purchased, and No Qos is configured at all.

What would happen if one of the compute locations BW utilization is increased more than it's allocated value ?

Would this traffic be dropped or shaped by default by Palo? Or it would still be allowed as long as the total BW for all compute locations is still below the total subscription value?

2- For the Remote Network Inbound Access , There is an option of "Allow inbound flows to other Remote Networks over the Prisma Access Backbone", As per the documentation this allows access resources that is in a remote network site that has inbound access enabled to be accessed by users at non-inbound access sites .

My question is what this option offers more than what is offered already using the interconnect Add-on license that enables communication between Remote Networks?

3- For remote Networks Overlapped Subnets (ex: 2 branch sites have the same subnet assigned for guests users) , Does this limit access for only guest subnets to other prisma access connected resources , or this limits the entire branch connectivity to prisma resources allowing only internet access from these entire branch subnets?

Appreciating your Support.

Thanks

Re: Prisma Access BW Allocation

reaper — Thu, 29 Jun 2023 13:45:06 GMT

1- the bw will be bursted beyond the assigned BW (capped at 1000mb/RNSPN i think). as long as this doesn't happen all the time you should be fine, but make sure to assign more bandwidth if you consistently pass your assigned BW

2- secure inbound access creates access from the internet into a remote network. this can be useful if the RN hosts a website or an app: https://docs.paloaltonetworks.com/prisma/prisma-access/preferred/2-2/prisma-access-panorama-admin/prisma-access-for-networks/quick-configs-for-network-deployments/provide-secure-inbound-access-to-remote-network-locations

3- overlapping subnets limits access to everything except the internet : https://docs.paloaltonetworks.com/prisma/prisma-access/3-2/prisma-access-panorama-admin/prisma-access-for-networks/network-locations-with-overlapping-subnets

topic Prisma Access BW Allocation in Prisma Access Discussions

Prisma Access BW Allocation

Re: Prisma Access BW Allocation