If you have a deployment where the HQ and
remote network location(s) are directly connected over a WAN link
and each of these locations is secured by Prisma Access, to ensure
optimal routing (with eBGP) you must:
The
following illustration shows a retail business with two paths to
the servers at the HQ location. One path is a WAN link that provides
direct connectivity for employees accessing servers at HQ, and the
other path secures traffic generated by other users at this location.
For example, traffic generated by customers accessing the retailer’s
website over Wifi or using the kiosk at the branch office to check
inventory. This traffic is sent through the tunnel to the remote
network and on to HQ.