Access Management via GP and Tunnel vpn ipsec

[Metgatz]

Access Management via GP and Tunnel vpn ipsec

Good afternoon, I have a question, please support me. I have the following scenario.

Site 1: The main site as a Global Protect VPN concentrator and also as a central point of two IPSEC VPN tunnels.

Site 2: Site with Dynamic IP ( PPPoE ) connected by an IPSEC VPN tunnel to the central site. The Palo Alto MGT IP is on the same subnet as the LAN.

Site 3: Site with Dynamic IP ( PPPoE ) connected by an IPSEC VPN tunnel to the central site. The MGT IP of the Palo Alto site is in the same sub network as the LAN.

1.- Is it possible from the Global Protect VPN access on site 1, the main site, to reach via https the administration IPs of the other two Palo Alto sites?

2.- Also from the central site, from the LAN of the central site, I can reach the administration of the other two sites, via IPSEC tunnels.

Thank you very much, I remain attentive, best regards.

[OtakarKlier]

Hello,

Yes this should be possible with the following:

• Routing - make sure the routes are correct for the lans on the other side of the VPN tunnel to the central site and vice versa.
• Make sure the VPN tunnels are up
• Make sure there are security policies in place to allow the traffic to flow.

Hope that helps.

Regards,