topic Re: Portal Gateway priority clarification request in General Topics

Portal Gateway priority clarification request

ManillaTechOps — Wed, 14 Aug 2013 18:01:51 GMT

We are having West Coast clients connect to our "backup" east coast gateway, which is a small sales office, and thus, cannot be "Manual Only". We would like to adjust the gateway priorities to help keep all clients on West Coast connecting to the main gateway setup for those clients.

In reading documentation it states, "The agent will contact all of the gateways and establish a tunnel with the firewall that provides the fastest response and the lowest priority value." See https://<firewall>/PAN_help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=global_protect.09.3.html#1245781

There are several "Priority" levels offered in configuration: Manual Only, Highest, High, Medium, Low, Lowest

Clarification Request: Do we use "Lowest" for the portal we really want everyone to use, or "Highest"? By the documentation listed above it seems like "Lowest" is correct answer, but "sounds" counter intuitive to natural english language interpretation that "Highest" would be the gateway you would want everyone to connect to.

Thank you in advance!

Re: Portal Gateway priority clarification request

kprakash — Wed, 14 Aug 2013 18:42:57 GMT

We use "highest" for the gateway that is most preferred, and you can select the Priority in that sequence ( highest, high, medium, low and lowest ). This setting is seen on the 5.0 and above versions. However on the 4.1.x versions, the priority is a numeric value between 1 and 5, with 1 being the highest priority and 5 the lowest ( similar to a ranking system).

BR,

karthik

Re: Portal Gateway priority clarification request

ManillaTechOps — Wed, 14 Aug 2013 20:08:18 GMT

Please take a tech note to update your documentation for 5.x branch to say the following instead:

"The agent will contact all of the gateways and establish a tunnel with the firewall that provides the fastest response and the highest lowest priority value."

https://<firewall>/PAN_help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=global_protect.09.3.html#1245781