What is the GlobalProtect Gateway Selection Process?
77941
Created On 09/25/18 19:21 PM - Last Modified 03/27/24 19:14 PM
Question
What is the GlobalProtect Gateway Selection Process? OR
How does GlobalProtect Gateway selection process work when multiple gateways are configured on a single portal?
Environment
- GlobalProtect App
- Supported Versions
Answer
- If a GlobalProtect portal agent configuration contains more than one gateway, the app attempts to communicate with all gateways listed in its agent configuration.
- The app uses the priority and response time to determine the gateway to which to connect.
- The gateway selection varies across different versions of GlobalProtect.
- The GlobalProtect app connects to a lower priority gateway only if the response time for the higher priority gateway is greater than the average response time across all gateways.
- There is a chance the GP App may not connect to the highest priority gateway due to the response time.
- The GlobalProtect app prioritizes the gateways assigned highest, high, and medium priority ahead of gateways assigned a low or lowest priority regardless of response time.
- The GlobalProtect app then appends any gateways assigned a low or lowest priority to the list of gateways.
- This ensures that the app first attempts to connect to the gateways that you configure with a higher priority.
This is explained in more detail in the documentation: Gateway Priority In A Multiple Gateway-Configuration