IPSec Termination Node Logic (Panorama Managed)
Table of Contents
IPSec Termination Node Logic (Panorama Managed)
4.0.0 PIC
With the Prisma Access for Networks Aggregate Bandwidth model, bandwidth is
assigned to a compute region within Panorama. This allows for deterministic placement of
nodes and also the compute for the nodes behind a region.
Within the Remote Networks Bandwidth Allocation in Panorama, regions are configured for
bandwidth that is to be allocated for that region:
If looking at 2 locations, namely US East (purple box), and Europe Central (orange box),
you can see the respective bandwidth allocated for each region as shown below.
With Prisma Access for Networks utilizing the Aggregate Bandwidth model, for every 500
Mbps of bandwidth allocation, a compute instance will be added to support the throughput
requirements.
The compute instances behind a region are called the IPSec Termination Nodes, and appear
when configuring a Remote Network onboarding in Panorama.
Given the above example, the number of nodes allocated would be as follows:
- US East: 2 nodes
- Europe Central: 1 node