Prisma Internet access from remote site

[BChana]

Hi everyone, hope you're all safe and well. My company is in the process of rolling out Palo Alto, Prisma and Global Protect worldwide. I've come across an issue that is causing me a bit of a headache. I hope someone can help.

Current setup

• Site A - 172.35.0.0 /16
• Site B - 172.33.0.0 /16
• Site A has a Cacheflow proxy server
• AT&T provide a MPLS WAN circuit. Inside traffic routes via the WAN, while Internet traffic breaks out via Site A Cacheflow.

New setup

• Palo Alto device to sit in Site A and connect to Prisma
• How does site B get Internet access?

From what I can, there are two options:

1) set up a VPN between Site A and B, which Internet routes through then breaks out in Site A

The second option is something I'd like some advice on. Do you think it would be possible to carry out this requirement in the AT&T MPLS? I can't quite understand how I can differentiate the traffic (Internal/External) in this space.

Is there anything in Prisma that I could use?

I hope the above makes sense and someone can help.

Thanks

[AKing9]

Greetings BChana,

I hope that this note finds you well! I know that it has been a while since you had posted this question but I wanted to see if you still potentially needed any help. Thank you for your time and I hope that you have a good remainder of your day.

Kind Regards,

J. Avery King