Yeah, i have uploaded my Topology . We have 3 site. 1 is HQ, 2 Branch. Every Bratnch have two Connection to HQ via MPLS & Internet. Now we want to Make VPN to secure Connection . We using LSVPN .But we still have Router infront of PaloAlto PaloAlto have function like VPN Gateway. I have some questions: 1 . If we config Static NAT 1-to-1 on Router , is this true ? 2. Actually, i don't know what kind of LSVPN , SSL or IPSec, because IF that is IPSec , we will NAT in Router with Port 500 &4500 , IF SSL VPN, how ? 3. When configuring GlobalProtect , IP when we configure GlobalPortal & GlobalGateway is using Private IP of Palo Alto or using Public IP which provided by ISP.
... View more