Prisma Internet access from remote site

BChana — Thu, 28 Jan 2021 17:56:39 GMT

Hi everyone, hope you're all safe and well. My company is in the process of rolling out Palo Alto, Prisma and Global Protect worldwide. I've come across an issue that is causing me a bit of a headache. I hope someone can help.

Current setup

Site A - 172.35.0.0 /16
Site B - 172.33.0.0 /16
Site A has a Cacheflow proxy server
AT&T provide a MPLS WAN circuit. Inside traffic routes via the WAN, while Internet traffic breaks out via Site A Cacheflow.

New setup

Palo Alto device to sit in Site A and connect to Prisma
How does site B get Internet access?

From what I can, there are two options:

1) set up a VPN between Site A and B, which Internet routes through then breaks out in Site A

The second option is something I'd like some advice on. Do you think it would be possible to carry out this requirement in the AT&T MPLS? I can't quite understand how I can differentiate the traffic (Internal/External) in this space.

Is there anything in Prisma that I could use?

I hope the above makes sense and someone can help.

Thanks

Re: Prisma Internet access from remote site

AKing9 — Fri, 12 Aug 2022 14:31:06 GMT

Greetings BChana,

I hope that this note finds you well! I know that it has been a while since you had posted this question but I wanted to see if you still potentially needed any help. Thank you for your time and I hope that you have a good remainder of your day.

Kind Regards,

J. Avery King

topic Re: Prisma Internet access from remote site in Prisma Cloud Discussions

Prisma Internet access from remote site

Re: Prisma Internet access from remote site