What is the GlobalProtect Gateway Selection Process?

What is the GlobalProtect Gateway Selection Process?

42112
Created On 09/25/18 19:21 PM - Last Modified 10/06/22 20:59 PM


Symptom

How does GlobalProtect Gateway selection process work when multiple gateways are configured a on single portal?

 



Environment

GlobalProtect App 4.0.3 and later



Resolution

When multiple gateways are listed in the portal, the client will automatically connect to the preferred gateway. The clients use priority and response time as a factor to determine the best gateway. The section below discusses a few examples of gateway selection mechanism.

Example 1

Let us assume the following gateways with priorities and response times as follows:

Gateway name Priority Response time
Gateway-1      Highest           80 ms
Gateway-2            High  25 ms
Gateway-3High50 ms


The average response time in this case is 51.6 milliseconds. In this case, the Agent will connect to Gateway-2, because the response time is less than the average response time of the three Gateways. Gateway-1, even though has higher priority has a response time, higher than the average response time of 51.6 millisecond.

 

Example 2

Let us assume the following Gateways with priorities and response timesas follows:

Gateway name Priority Response time
Gateway-1      Highest           30 ms
Gateway-2            High    25 ms
Gateway-3Medium50 ms


The average response time, in this case, is 35 milliseconds. Even though Gateway-2 has the lowest response time, the Agent will connect to Gateway-1, because its response time is less than the average, and has the highest priority.



Additional Information
Gateway Priority in a Multiple Gateway Configuration
Gateway Selection Enhancement 
Features Introduced in GlobalProtect App 4.0


Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000ClVz&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Attachments
Choose Language