topic Re: Global Protect to Manage 100+ FW VPNs in General Topics

Global Protect to Manage 100+ FW VPNs

jmatanane — Fri, 02 Feb 2024 13:33:51 GMT

Does anyone have any good redirects to information about how to manage an enterprise of PA FW's using Global Protect? I'm under the impression that Global Protect is primarily just for use of remote clients. I thought there was a way to use Global Protect to manage a large volume of FW's VPNs. Anyone have any suggestions? In the meantime, I'll be researching and reading everything about Global Protect. Thanks!

Re: Global Protect to Manage 100+ FW VPNs

Claw4609 — Fri, 02 Feb 2024 13:40:08 GMT

I believe you're referring to GlobalProtect satellites. Do one of these documents help: Define the Satellite Configurations (paloaltonetworks.com) or Large Scale VPN (LSVPN) (paloaltonetworks.com)

In a really simplified description, this basically has your location PAs act as a GlobalProtect client with the goal of making scalability and redundancy easier.

Re: Global Protect to Manage 100+ FW VPNs

OtakarKlier — Fri, 02 Feb 2024 16:17:32 GMT

Hello,

I mean you can if you VPN in and them have policies that allow you to connect to the management interface. However I think you are thinking of Panorama.

Regards,