Is there traffic interruption when you add corporate subnets to a service connector

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Is there traffic interruption when you add corporate subnets to a service connector

L1 Bithead

Hello,

We have a service connector from Prisma to one of our VM-NGFW's in AWS. We are looking to add another corporate subnet to that service connection so staff connected to Prisma, will be able to access that subnet via GlobalProtect\Prisma.

 

My question is when I open the service connection, add an additional subnet to the static routes > corporate subnets, and click okay and commit\push, will there be any sort of service interruption to downstream users? Will users just need to refresh their global protect connection to get those new routes available to them over prisma? 

1 REPLY 1

Cyber Elite
Cyber Elite

internally all routing is distributed among all components (SPN & CAN) via ibgp

So, when you add a new static route to a service connection, all the other components will learn that this service connection now owns this route so routing tables are updated to reflect this. users will automatically be routed to the new route once the commit is completed

 

There shouldn't be any downtime unless that subnet is currently being used somewhere else (and is being accessed by merit of a default route?)

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 872 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!