Does the Preferred Gateway Agent option take precedence over the highest Gateway priority configured on the Portal?
7799
Created On 05/11/20 07:44 AM - Last Modified 05/12/20 00:04 AM
Question
Does the Preferred Gateway Agent option take precedence over the Gateway configured with the highest priority on the Portal?
Environment
- PAN-OS 9.0+
- GlobalProtect Configured
- GlobalProtect Agent 5.0+
Answer
The Preferred Gateway option that's available within the Agent settings will take precedence over the Gateway configured with the highest priority for the Portal.
In the screenshots below, you'll see that we have the gp-ext-gateway Gateway configured with the Any (Low) priority in the Portal, but it's selected for the Preferred Gateway within the Agent.
Note: This is found by navigating to Network > GlobalProtect > Portals > “Choose Portal” > Agent > “Choose Agent config” > External
Note: This is found by navigating to the hamburger icon in the Agent and selecting Preferred Gateway
When the end user selects Connect in the Agent, the Preferred Gateway will be chosen, regardless of the Gateway configured with the Any (Highest) priority in the Portal.
Additional Information
For full documentation regarding the Preferred Gateway feature, please refer to the following document:
https://docs.paloaltonetworks.com/globalprotect/5-0/globalprotect-app-new-features/new-features-released-in-gp-agent-5_0/support-for-preferred-gateways