topic Re: 5 Internet link (Public IP Address) installing to Palo Alto PA 220 in General Topics

5 Internet link (Public IP Address) installing to Palo Alto PA 220

panhanhen — Thu, 16 Feb 2017 07:44:13 GMT

Hi All, I plan to install PA 220 to my network. I have 5 Internet links that will connect to PA 220. Does it have any problem if i take 3 Internet links to configure load balancing and other remain 2 Internet links for HA?

Re: 5 Internet link (Public IP Address) installing to Palo Alto PA 220

santonic — Thu, 16 Feb 2017 08:49:30 GMT

Each user gets his own ISP link? 🙂

PA doesn't support load balancing. You can achieve some LB with PBF rules, like web traffic over one link, other traffic over different link.

HA can also be achieved with PBF rules for as many links as you like. You have to create your own rules (logic) for checking and switching links.

Re: 5 Internet link (Public IP Address) installing to Palo Alto PA 220

panhanhen — Thu, 16 Feb 2017 09:01:57 GMT

Thanks for your reply, And what does 3 virtual routers mean in PA 220? If i have 500 users, is it possible that I use PA 220?

Re: 5 Internet link (Public IP Address) installing to Palo Alto PA 220

santonic — Thu, 16 Feb 2017 09:19:59 GMT

Each virtual router is a seperate routing table. Something like VRF in Cisco world. it has nothing to do with number of users, it's about desired routing configuration and seperation of traffiic and routes.

The only limit on the device is the declared throughput. But even in that case PA devices usually perform better than their declared troughput.