Why is there not an option to disable route summarization of 3rd Party GlobalProtect IPsec Clients?

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L2 Linker

Why is there not an option to disable route summarization of 3rd Party GlobalProtect IPsec Clients?

What is the point of not allowing us to configure if we want to summarize our IPsec routes for 3rd party clients on GlobalProtect?

I don't get why this is forced on us and only browsable through the cli... not very nice.

Highlighted
L7 Applicator

This really just comes down to development time and priorities.  Your best bet is to contact your sales engineer and let them know you really want this feature.  Palo Alto maintains an internal only database of these called the "Feature Request" database and each are assigned a number (FR number).   The sales engineers create a new entry if one does not exist or add your company name as a vote for existing ones.  The number of companies requesting a feature is then taken into account as they build the roadmap.

 

Once you idendity the FR number you can post it here and ask others to add votes for including the feature too.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Highlighted
L2 Linker

Why even post something like this?  Don't waste my time padding your post count.

Its specifically coded to screw with routes for 3rd pary applications, I can have hundreds of subnets in the 10/8 range, but I add a single 192.168.1.1/32 route and now its summarized to 0.0.0.0/0. 

Highlighted
L7 Applicator

No need to be disrespectful when someone tries to assist you with a query.

 

If you would like to see a feature added that is currently not available, a feature request will have that functionality added to a list of requested features by customers. The more votes a request receives, the higher the likelyhood this feature will be added sooner rather than later.

 

pulukas very eloquently provided that information and a way for you to get the ball rolling

Tom Piens - PANgurus.com
New to PAN-OS or getting ready to take the PCNSE? check out amazon.com/dp/1789956374
Highlighted
L2 Linker

Disrespectful?  Assuming that I don't know how to start a ticket or contact my sales agent is disrepectful.

Too many people padding their post counts rather then Palo Alto stepping up and providing answers in these discussions.

Please, if you don't have anything constructive to add to a topic just stay out of it.

 

Thanks!

Highlighted
L7 Applicator

The Live community is a forum of customers, partners, enthousiasts and Palo Alto Network employees in it for mutual assistance and sharing of information. While we encourage any and all questions, replies are voluntary and can come from anyone wanting to chime in.

we're a friendly bunch just trying to be helpful. ;) (and yes, some people try to pad their numbers but you can report those and we'll do our best to weed out the actual useless posters)
If you need an immediate answer it's better to reach out to support where your request can be officially logged and reported

thanks for being so involved!
Tom

Tom Piens - PANgurus.com
New to PAN-OS or getting ready to take the PCNSE? check out amazon.com/dp/1789956374
Highlighted
L2 Linker

Puluka comment would be useful for a sticky at the top of the General Topic forum.  Maybe we can start a "Feature Request" ticket.

 

Topic replies should be focused on the subject.  We don't need this forum to be like the Microsoft Technet forums where most threads are filled with a bunch of general canned replies from people that don't even take the time to read the subject.

 

If anyone has any information regarding the subject of VPN route summarization please let me know!  Happy to listen to ways you have worked around the issue.

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!