Set a Higher Gateway Priority for an On-Premise Gateway

In situations where you want to direct mobile users to use an on-premise gateway instead of the Prisma Access gateways, specify the on-premise gateways with a source region and a higher priority than the Prisma Access gateway.
The following figure shows a sample configuration for mobile users in Indonesia. To avoid the possibility of mobile users being connected to the nearest Prisma Access gateway in Singapore, you set the gateway priority to
Highest
for the on-premise gateway in Indonesia and set the priority to
Medium
for the Prisma Access gateways.
This example also specifies a source region of Indonesia for the on-premise gateway. We recommend specifying a source region for the following reasons:
  • Specifying a source region for an on-premise gateway allows users in a region to access that gateway and prevents users outside of that region from connecting to that gateway. In this example, only mobile users in Indonesia can connect to the on-premise gateway with the source region of Indonesia, and the higher priority means that the on-premise gateway has priority over the Prisma Access gateways.
  • If you set a source region of
    Any
    for the on-premise gateway in Indonesia, every mobile user in your organization would prefer the on-premise gateway in Indonesia, because of its higher priority and worldwide accessibility. This configuration means that mobile users might never connect to the Prisma Access gateways.
gateway-selection-prisma-access-on-premise-high-priority.png

Recommended For You