our setup is like we have configured all gateways under same priority issue we are facing is global protect client is getting connecting to wrong gateway.
It is not getting connected to gateway near to user location. I read that based on SSL response time global protect client choose which gateway it connects , how can we check logs to determine why global protect client is getting connected to incorrect gateway.
Thanks for help in advance.
Gp Gateway selection process is mentioned in page 30,39 and Page 48 of the following doc:- https://live.paloaltonetworks.com/docs/DOC-2020
is base on the average of the time response from all the gateway and if a gateway answer is under this limit it could be used it depend of the priority affected
Best way to see how the gateway choice is made is to look in the PanGPS log on the client (in the GlobalProtect directory - enable debug mode in advanced settings in the client)
more info here
As mentioned by Gregoux, the client will connect to the gateway with the quickest response time.
Please do not forget to mark and 'Helpful' or 'Correct' replies.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!