How to set a preferred gateway on the GlobalProtect App on Client Machine

How to set a preferred gateway on the GlobalProtect App on Client Machine

20322
Created On 04/06/20 18:21 PM - Last Modified 06/02/20 04:02 AM


Objective
  • When a Global Protect Portal has multiple Gateways, end users can assign and automatically connect to a preferred GlobalProtect gateway. 
  • By default, the GlobalProtect app automatically connects to the best available gateway based on the priority, source region, and response time of the configured gateways. 


Environment
  • Software Support : Starting with GlobalProtect™ App 5.0.3 for Android, Windows, and Mac and GlobalProtect™ App 5.0.7 for iOS
  • OS Support : Android 4.4 and later releases, iOS 10 and later releases, Windows 7 and later releases, and macOS 10.11 and later releases


Procedure
Below is the method for assigning preferred gateway on Andriod/iOS and Windows/MAC endpoints on the GlobalProtect app.
  • Assign a preferred gateway on Android or iOS endpoints:
    1. Launch the GlobalProtect app.
    2. Assign a preferred gateway.
      1. Tap the Gateway drop-down.
      2. From the list of available gateways, tap the More Options ( more-options-icon.png ) icon for the gateway that you want to set as the preferred gateway and then set As Preferred. Alternatively, you can long-press (tap and hold) the gateway and then Set As Preferred.

        User-added image

      3. Verify that the gateway is set as the preferred gateway.
        1. Tap the Gateway drop-down.
        2. From the list of available gateways, verify that the gateway is marked as Preferred 
          User-added image
  • Assign a preferred gateway on Windows or Mac endpoints:
    1. Launch the GlobalProtect app.
    2. Assign a preferred gateway.
      1. From the status panel, click the Settings ( settings-icon.png ) icon to open the settings menu.
      2. Select Preferred Gateway  to open the GlobalProtect: Preferred Gateway dialog.
        User-added image
      3. From the list of available gateways, select the gateway that you want to set as the preferred gateway and then Set as Preferred
        User-added image
      4. Close  the dialog.
    3. Verify that the gateway is set as the preferred gateway.
      1. From the status panel, select the Gateway drop-down.
      2. From the list of available gateways, verify that the gateway is marked as (Preferred).
        User-added image


Additional Information
  • If the GlobalProtect app is unable to connect to the preferred gateway, it falls back to the best available gateway.
  • In order for users to connect to a preferred gateway, you must make sure that the gateway is available in the source regions from which the users are connecting.
  • Before this feature in place, if users need to connect to a specific gateway to access certain resources or connect from a particular geographical location, they must manually switch to that gateway each time they establish the GlobalProtect connection. With this enhancement, users can now automatically connect to a preferred gateway regardless of priority and response time.
For more info see TechDoc Support for Preferred Gateways


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PPUd&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Attachments