>
    Verify the LSVPN Configuration
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Large Scale VPN (LSVPN)
    4. Verify the LSVPN Configuration
    Download PDF
    Next-Generation Firewall

    Verify the LSVPN Configuration

    Table of Contents

    Verify the LSVPN Configuration

    Verify the LSVPN configuration by checking satellite connectivity with the portal and gateway, and confirming active VPN tunnel status on each firewall component.
    Where Can I Use This?What Do I Need?
    • NGFW
    • No separate license required for LSVPN when using NGFWs
    After configuring the portal, gateways, and satellites, verify that the satellites are able to connect to the portal and gateway and establish VPN tunnels with one or more gateways.
    1. Verify satellite connectivity with portal.
      From the firewall hosting the portal, verify that the satellites are successfully connecting by selecting NetworkGlobalProtectPortal and clicking Satellite Info in the Info column of the portal configuration entry.
    2. Verify satellite connectivity with the gateway(s).
      On each firewall hosting a gateway, verify that satellites are able to establish VPN tunnels by selecting NetworkGlobalProtectGateways and click Satellite Info in the Info column of the gateway configuration entry. Satellites that have successfully established tunnels with the gateway will display on the Active Satellites tab.
    3. Verify LSVPN tunnel status on the satellite.
      On each firewall hosting a satellite, verify the tunnel status by selecting NetworkIPSec Tunnels and verify active Status as indicated by a green icon.

    © 2025 Palo Alto Networks, Inc. All rights reserved.