How to use "Configurable Maximum Transmission Unit(MTU) for GlobalProtect Connections" in Prisma Access (Panorama Managed)
20933
Created On 12/03/20 03:32 AM - Last Modified 12/17/20 22:07 PM
Objective
The article explains how to use the "Configurable Maximum Transmission Unit for GlobalProtect Connections" feature in Prisma Access (Panorama Managed) environment.
This feature was introduced in the GlobalProtect App 5.2.4.
Environment
- Prisma Access for Users (Panorama Managed).
- GlobalProtect App 5.2.4 or later.
- Content Release version 8346-6423 or later.
Procedure
- Verify the application and threat version on the Panorama that manages Prisma access to be 8346-6423 or later. Any earlier version must be upgraded to this or higher version;
- Once the upgrade is completed, Logout and Login back to the GUI, then follow the instructions documented: Configurable Maximum Transmission Unit for GlobalProtect Connections
- Then Commit and Push with the manner of Prisma Access (Panorama Managed). Refer Configure Prisma Access for Mobile Users
The output below in Windows Client is a sample that MTU changed from 1400 to "1300".
C:\Users\user1>netsh interface ipv4 show subinterfaces
MTU MediaSenseState Bytes In Bytes Out Interface
------ --------------- --------- --------- -------------
4294967295 1 0 14301335 Loopback Pseudo-Interface 1
1500 1 2694045349 119892210 MGMT
1500 1 0 13818862 Untrust
1300 1 29024 6827 Local Area Connection <<==!!Additional Information
Refer to Features Introduced in GlobalProtect App 5.2 for additional information.