Mobile User-service connection routing
—The mobile user
connection forms an IPSec tunnel with the nearest service connection.
Prisma Access uses iBGP for internal routing and eBGP to peer with
the customer premises equipment at the data center. The following
diagram shows mobile users in Regions 1 and 2 being routed to the
respective service connections in that region. Mobile users in Region
1 are accessing applications
A
and
B
located at Data
Center 1. If your organization’s network uses BGP routing for their
service connections and a service connection experiences an ISP
failure at Data Center 1, Prisma Access detects the failure and
routes the traffic for applications
A
and
B
to Data
Center 2 after BGP convergence, providing redundancy to your network’s
data centers.