About ccfalkner

This is for a lab at the moment, but want real-world advice in case I attempt it.   I had a portal and gateway setup for client SSL VPN and wanted to add LSVPN.  Due to complete documents for each type of GP feature, but none combining the two, I went through many iterations of mixing the two, but always having some kind of error with needed profiles, cert errors, etc.  I then tried creating two gateways, but needed to hang one (LSVPN) off of a virtual router to get an external interface/IP I could put a cert on. The single portal, two interface/cert approach didn't work for the satelite because it didn't like the shifting of the URL and gave a cert error even though the root CA cert was working for the initial cert.  I then got it all to work by creating a second portal on the other virtual router with the gateway.    I later switched the two, so client SSL VPN on the second router and LSVPN on the main router. I did this because OSPF can't be established between virtual routers, so the single SSL VPN subnet can easily be statically provisioned.    In the end, I could have missed something and created a complex configuration I don't actually need, so I am just aksing if someone has gone through this and has a better way or some advice.   Thanks. ... View more

I am new to VM series PAs and looking into how to setup HA.  So it is interesting that the license is attached to the host and VM file location.  Any change in this needs a re-registration of the license via tech support.  Even using VMotion would trigger a need for a support call.  I then assumed that I could put one VM on a separate Hypervisor in case of a hardware failure, but then while setting up HA, I checked a help screen that stated a requirement for HA is that both VMs are on the same Hypervisor.  So, it sounds like this configuration is vulnerable to a hardware failure on the host, which doesn't sound like good HA to me.  How is this mitigated, or am I missing something?   Thanks,   ccfalkner  ... View more