5 Internet link (Public IP Address) installing to Palo Alto PA 220

[panhanhen]

Hi All, I plan to install PA 220 to my network. I have 5 Internet links that will connect to PA 220. Does it have any problem if i take 3 Internet links to configure load balancing and other remain 2 Internet links for HA?

[santonic]

Each user gets his own ISP link? 🙂

PA doesn't support load balancing. You can achieve some LB with PBF rules, like web traffic over one link, other traffic over different link.

HA can also be achieved with PBF rules for as many links as you like. You have to create your own rules (logic) for checking and switching links.

[panhanhen]

Thanks for your reply, And what does 3 virtual routers mean in PA 220? If i have 500 users, is it possible that I use PA 220?

[santonic]

Each virtual router is a seperate routing table. Something like VRF in Cisco world. it has nothing to do with number of users, it's about desired routing configuration and seperation of traffiic and routes.

The only limit on the device is the declared throughput. But even in that case PA devices usually perform better than their declared troughput.