Set a Higher Gateway Priority for an On-Premise Gateway
In situations where you want to direct mobile
users to use an on-premise gateway instead of the Prisma Access
gateways, specify the on-premise gateways with a source region and
a higher priority than the Prisma Access gateway.
figure shows a sample configuration for mobile users in Indonesia.
To avoid the possibility of mobile users being connected to the
nearest Prisma Access gateway in Singapore, you set the gateway
for the on-premise gateway
in Indonesia and set the priority to
the Prisma Access gateways.
This example also specifies a
source region of Indonesia for the on-premise gateway. We recommend
specifying a source region for the following reasons:
a source region for an on-premise gateway allows users in a region
to access that gateway and prevents users outside of that region
from connecting to that gateway. In this example, only mobile users
in Indonesia can connect to the on-premise gateway with the source
region of Indonesia, and the higher priority means that the on-premise
gateway has priority over the Prisma Access gateways.
If you set a source region of
the on-premise gateway in Indonesia, every mobile user in your organization
would prefer the on-premise gateway in Indonesia, because of its
higher priority and worldwide accessibility. This configuration
means that mobile users might never connect to the Prisma Access