China mainland Mobile users questions

[C.Gao140612]

Hi expert,

If we do not have Prisma Access China license, but still want to connect China mainland mobile users to closed MU-SPN overseas, say Japan pop. If this will be blocked by Greate FW, and if it is, if any workaround. 

Also, can connect to the overseas SC and then send traffic to Prisma Access Cloud ? If can do that, how to achieve it.

Thanks in advance! 

[nikoolayy1]

This will be violation unfortunately. Maybe better use on-prem FW in China that will be preferred by the China users that can be managed by Panorama.  

[reaper]

You will be able to connect to other MU-SPNs (like japan) or even establish an SC from inside China but there would not be a guarantee this connection is not metered/shaped or even closed at any time as this is an unauthorized VPN

It may also bring additional governmental scrutiny

Officially you should have a termination point inside China (a palo firewall with GlobalProtect enabled for example) with an approved Cross Border Line (CBL) to a peer outside of china, from there you can connect an SC to prisma access

even if you have prisma access inside china, it needs to be connected to the rest-of-the-world prisma access via this CBL method