topic Primary and Secondary SSL VPN global protect in General Topics

Primary and Secondary SSL VPN global protect

aneeqzia — Mon, 03 Aug 2020 09:21:12 GMT

One question that comes in my mind, can we use fallback URL or IP in Global Protect client? Like in Cisco AnyConnect, if the primary VPN Server or internet source is down then client connect with the secondary internet source automatically.

Re: Primary and Secondary SSL VPN global protect

fatboy1607 — Sun, 09 Aug 2020 11:36:50 GMT

@aneeqzia Are you referring connection with portal from global protect client ?

Re: Primary and Secondary SSL VPN global protect

BPry — Mon, 10 Aug 2020 03:30:29 GMT

@aneeqzia,

Not the way that you are likely thinking in AnyConnect "Backup Server" aspect. The portal configuration however does cache locally on the client, so as long as you utilize multiple gateways within the portal configuration your portal doesn't always need to be available for existing clients.

Another option is obviously using a load-balancer to handle the portal between multiple devices/instances and just keeping the portal configuration the same across hosts.

Re: Primary and Secondary SSL VPN global protect

aneeqzia — Mon, 10 Aug 2020 06:10:11 GMT

I guess, I found the relevant document. Below is the link to configure the required scenario:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFiCAK