topic Does Global Protect check connection quality and switch portals if needed? in General Topics

Does Global Protect check connection quality and switch portals if needed?

abrrymn — Tue, 24 Jan 2017 19:41:59 GMT

Is it possible to make Global Protect check someone's connection quality and if the quality is better to another portal, then switch to that one seamlessly?

Say we have users connected to a portal in Los Angeles and the connection becomes less than acceptable, is it possible to make the GP client automatically connect to our NY portal if it has a better quality of connection?

Re: Does Global Protect check connection quality and switch portals if needed?

BPry — Wed, 25 Jan 2017 13:53:26 GMT

I'm not sure that you can actually set something like that; as long as the GlobalProtect connection is 'good enough' to actually connect you will connect to whatever gateway the clients have configured as 'highest' priority. If it can't form a connection to that gateway then it will switch to the next 'high' priority gateway and so on.

That being said I don't deal that often with GP since most of our sites are still utilizing AnyConnect for their VPN needs, so this may be an option that I've just never ran into.

Re: Does Global Protect check connection quality and switch portals if needed?

OtakarKlier — Wed, 25 Jan 2017 17:32:09 GMT

Hello,

Yes you can if you have multiple portals setup at different locations. Then GP will send an SSL ping to each one to see which one is better and use it.

https://www.paloaltonetworks.com/documentation/71/globalprotect/globalprotect-admin-guide/globalprotect-quick-configs/globalprotect-multiple-gateway-configuration#44760

Cheers!

Re: Does Global Protect check connection quality and switch portals if needed?

BPry — Wed, 25 Jan 2017 17:50:35 GMT

I didn't realize that it pings the gateways in addition to the priority setting, good to know thanks for the info @OtakarKlier