I have a PAYG VM-300 behind an Azure standard SKU load balancer with NSG opened up. I used this first to test the management interface and could load balance this. However when I try this on the Global protect it fails. I have a default virtual router with a static route 0.0.0.0/0 to .1 from untrusted and a rule to 168.63.129.16/32 also to .1 from untrusted subnet. With a NAT rule it works immidiatly. Without it fails.
... View more