The GlobalProtect Large Scale VPN (LSVPN) feature on
the Palo Alto Networks next-generation firewall simplifies the deployment
of traditional hub and spoke VPNs, enabling you to quickly deploy
enterprise networks with several branch offices with a minimum amount
of configuration required on the remote
satellites.
This solution uses certificates for firewall authentication and
IPSec to secure data.
LSVPN enables site-to-site VPNs between Palo Alto Networks firewalls.
To set up a site-to-site VPN between a Palo Alto Networks firewall
and another device, see
VPNs.
The LSVPN does not require a GlobalProtect subscription.
The following topics describe the LSVPN components and how to
set them up to enable site-to-site VPN services between Palo Alto
Networks firewalls: