Connect to Two Palo Alto VPNs

[fhewiufhwefhwe]

I have an employee who travels often with a need to simultaneously connect to two Global Protect VPNs, neither of which are clientless VPNs.

The first connection is to the main office.

The second connection is to another company, which has whitelisted our main office external ipaddress and that of our vpn ipaddress.

The second connection must be made after the first given the whitelist issue.

The employee also has a dynamic ipaddress, so it cannot be whitelisted.

How might I be able to accomplish this?

[ZOlson618]

There is no way to accomplish this action. Remote access VPNs are meant to be used one at a time. 

The only possible solution for this would be to connect to your primary VPN, remote desktop into a virtual machine in that network, then use that machine to kick off your second VPN.

[fhewiufhwefhwe]

That's what I figured.  The executive refuses to do this however.

[ZOlson618 · Accepted solution]

That's what they're paid to do, say no.

[fhewiufhwefhwe]

I hear you, but CEOs can still be demanding once in a while.

[reaper · Accepted solution]

you can create a vpn between your office and the other company, then have your employee vpn into your HW and route/nat his connections (hub and spoke) over your office

it's rickety but it could work