GlobalProtect, Working from Home, Prisma Access and Covid-19

[jdelio]

@mike.pochan 

Please open a case with support on this issue, as we want to help ensure that there are not any performance issues with Prisma Access.

[jmenon]

Review GlobalProtect License requirements here 

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about...

[raji_toor]

Can we implement QoS for globalprotect sessions

[raji_toor]

@jdelio I seem to cant access the link with either live or support account

https://paloaltonetworks.my.salesforce.com/kA10g000000ClkB?srPos=1&srKp=ka1&lang=en_US

[jdelio]

@raji_toor 

Sorry for that, please try this link instead..

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkBCAS

fixing the other link now.

[jmenon]

@raji_toor   see if this helps. https://live.paloaltonetworks.com/t5/Prisma-Access-Articles/GlobalProtect-Implement-Split-Domain-and...

[jdelio]

@raji_toor 

To answer your question about QoS and GlobalProtect.. Yes, you can.

Here is a link to a Learning Happy Hour that talks about Throttling with QoS

https://live.paloaltonetworks.com/t5/Learning-Happy-Hour-Articles/Throttle-Bandwidth-Hogs-Using-QoS-...

The only note that I can help add about GP and QoS is:

When an interface that is part of an existing QoS configuration is later configured to be part of a tunnel configuration (IPSec, GlobalProtect, etc.), the Palo Alto Networks device expects QoS to be applied to the tunnel traffic. Apply the default/custom QoS profile to the tunnel traffic.

I hope this helps.

[jdelio]

Just wanted everyone to know that we have created a brand new area on the LIVEcommunity, it is the Covid-19 Response Center. 

It is hard to miss it once you are on the LIVEcommunity, just look at the top Navigation, and you will see "COVID-19 Response Center" or you can click here:

https://live.paloaltonetworks.com/t5/COVID-19-Response-Center/ct-p/COVID-19_Response_Center

We have worked hard to combine a lot of great resources to help answer your common GlobalProtect and Prisma Access questions.

Be sure to check it out if you haven't already.

[sumitsingh14]

Hi Team,

Can we can achieve remote vpn load balancing while using global protect on palo alto....if yes,can we add firewalls in a cluster to increase support to increased users...how can we do this between firewalls are different sites

[jdelio]

@sumitsingh14 

Please allow me to respond.. 
1. HA is for redundancy, not for adding capacity.

2. In a Single Gateway instance, there is no balancing of the GP traffic. As one client will connect to a gateway.

Taking that a step further, You can setup multiple gateways. When the client connects to the one portal and downloads the list of gateways, the client then connects to the gateway that responds the fastest. So sort of load balancing depending on load and response time.