How to change Infrastructure subnet on GlobalProtect Cloud Services?
4599
Created On 02/06/19 21:21 PM - Last Modified 04/27/20 20:48 PM
Objective
Customers are not expected to change their Infrastructure subnet after GlobalProtect Cloud Service firewalls provision.
Environment
- Panorama.
- PAN-OS 8.1 and above.
- GlobalProtect Cloud Services
Procedure
This setting is under Panorama > Cloud Services > Configuration > Service Setup > Settings > Infrastructure Subnet
Modifying the Infrastructure Subnet on Panorama and pushing the changes to the GlobalProtect Cloud firewalls will not propagate the change to the cloud firewalls. The GlobalProtect Cloud Service allocates the loopback ip addresses from infrastructure subnet when you Enable the Service Infrastructure
If a customer is required to change the infrastructure subnet, contact Palo Alto Networks Support. Support will then engage DevOps to have them modify/update the new subnet in the backend.
Once it is updated in the backend, customers will need to do another cloud-commit from Panorama with the new subnet.