About BChana

Hi everyone, hope you're well. I hope somebody can help with this.     I'm looking to introduce a local Internet breakout, by installing a Palo Alto 220 firewall, as the site has been reporting slow Internet recently. ... View more

Hi everyone, hope you're all safe and well. My company is in the process of rolling out Palo Alto, Prisma and Global Protect worldwide. I've come across an issue that is causing me a bit of a headache. I hope someone can help.   Current setup Site A - 172.35.0.0 /16 Site B - 172.33.0.0 /16 Site A has a Cacheflow proxy server AT&T provide a MPLS WAN circuit. Inside traffic routes via the WAN, while Internet traffic breaks out via Site A Cacheflow. New setup Palo Alto device to sit in Site A and connect to Prisma How does site B get Internet access? From what I can, there are two options: 1) set up a VPN between Site A and B, which Internet routes through then breaks out in Site A   The second option is something I'd like some advice on. Do you think it would be possible to carry out this requirement in the AT&T MPLS? I can't quite understand how I can differentiate the traffic (Internal/External) in this space.   Is there anything in Prisma that I could use?   I hope the above makes sense and someone can help.   Thanks ... View more