Global Protect LSVPN Dual ISP Redundancy

[lerewrya]

I'm working on configuring a GP LSVPN Hub in our data center with dual ISP's for redundancy.  I'm having some trouble finding a best practice guide for this type of configuration.  Can anyone give some incite to this configuration?  Can I acheive this with a single GP Portal, or will I need the secondary portal available in the event that the primary ISP fails?  

Essentially I'm hoping to host 2 portals each with an independant gateway from a single PA220 running PAN-OS 8.1.0 for a satelliteLSVPN configuration.  

[mharding]

Here's what I did.

I put our GlobalProtect Portal on a loopback interface in the DMZ. 

I handle the redundancy throught NAT and DNS load-balancing.