Set a Higher Gateway Priority for an On-Premises Gateway
In situations where you want to direct mobile
users to use an on-premises gateway instead of the Prisma Access
gateways, specify the on-premises gateways with a source region and
a higher priority than the Prisma Access gateway.
The following
figure shows a sample configuration for mobile users in Indonesia.
To avoid the possibility of mobile users being connected to the
nearest Prisma Access gateway in Singapore, you set the gateway
priority to Highest for the on-premises gateway
in Indonesia and set the priority to Medium for
the Prisma Access gateways.
This example also specifies a
source region of Indonesia for the on-premises gateway. We recommend
specifying a source region for the following reasons:
Specifying
a source region for an on-premises gateway allows users in a region
to access that gateway and prevents users outside of that region
from connecting to that gateway. In this example, only mobile users
in Indonesia can connect to the on-premises gateway with the source
region of Indonesia, and the higher priority means that the on-premise
gateway has priority over the Prisma Access gateways.
If you set a source region of Any for
the on-premises gateway in Indonesia, every mobile user in your organization
would prefer the on-premises gateway in Indonesia, because of its
higher priority and worldwide accessibility. This configuration
means that mobile users might never connect to the Prisma Access
gateways.