Prisma Internet access from remote site
cancel
Showing results for 
Search instead for 
Did you mean: 

Prisma Internet access from remote site

L0 Member

Hi everyone, hope you're all safe and well. My company is in the process of rolling out Palo Alto, Prisma and Global Protect worldwide. I've come across an issue that is causing me a bit of a headache. I hope someone can help.

 

Current setup

  • Site A - 172.35.0.0 /16
  • Site B - 172.33.0.0 /16
  • Site A has a Cacheflow proxy server
  • AT&T provide a MPLS WAN circuit. Inside traffic routes via the WAN, while Internet traffic breaks out via Site A Cacheflow.

New setup

  • Palo Alto device to sit in Site A and connect to Prisma
  • How does site B get Internet access?

From what I can, there are two options:

1) set up a VPN between Site A and B, which Internet routes through then breaks out in Site A

 

The second option is something I'd like some advice on. Do you think it would be possible to carry out this requirement in the AT&T MPLS? I can't quite understand how I can differentiate the traffic (Internal/External) in this space.

 

Is there anything in Prisma that I could use?

 

I hope the above makes sense and someone can help.

 

Thanks

0 REPLIES 0
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!