Palo Alto – GlobalProtect Gateway Selection Priority Process Algorithm

When setting up your system, it’s crucial to understand how this algorithm operates. It utilizes priority and response time to determine which gateway to connect.

If the response time of the highest priority gateway exceeds the average response time of all gateways, the algorithm will select a different gateway. In this case, the algorithm chooses the gateway with the highest priority among those whose response time is less than or equal to the average response time.

In other words, the algorithm prioritizes gateways with response times at or below the average. Among those, it then selects the one with the highest priority. If the gateway with the absolute highest priority has a response time above the average, it is bypassed in favor of a more optimal choice.

Examples:

Example 1:

Gateway 1:
Priority = Highest
Response Time = 80 ms

Gateway 2: (CHOSEN)
Priority = Low
Response Time = 25 ms

Average Response Time = 52.5 ms

In this scenario, because GW1’s response time of 80 ms is higher than the average response time of 52.5 ms, the algorithm will choose GW2 despite its lower priority.

Example 2:

Gateway 1: (CHOSEN)
Priority = Highest
Response Time = 30 ms

Gateway 2:
Priority = High
Response Time = 25 ms

Gateway 3:
Priority = Medium
Response Time = 50 ms

Average Response Time = 35 ms

In this case, both GW1 and GW2 have response times below the average. Since priority becomes the deciding factor, GW1 will be chosen due to its highest priority.

Example 3:

Gateway 1: (CHOSEN)
Priority = Medium
Response Time = 45 ms

Gateway 2:
Priority = Highest
Response Time = 55 ms

Gateway 3:
Priority = Low
Response Time = 35 ms

Average Response Time = 45 ms

Here, GW2’s response time is above the average, so the algorithm will consider GW1 and GW3. GW1 will be selected because it has a higher priority than GW3.

Example 4:

Gateway 1: (CHOSEN)
Priority = Highest
Response Time = 30 ms

Gateway 2:
Priority = High
Response Time = 35 ms

Gateway 3:
Priority = Medium
Response Time = 40 ms

Gateway 4:
Priority = Low
Response Time = 25 ms

Average Response Time = 32.5 ms

In this scenario, GW1 and GW4 are below the average response time. Since priority is the deciding factor when multiple gateways are below the average response time, GW1 will be selected due to its highest priority.

Example 5:

Gateway 1:
Priority = Highest
Response Time = 60 ms

Gateway 2: (CHOSEN)
Priority = High
Response Time = 50 ms

Gateway 3:
Priority = Medium
Response Time = 40 ms

Gateway 4:
Priority = Low
Response Time = 30 ms

Average Response Time = 45 ms

In this example, only GW2, GW3, and GW4 are below the average response time. Among these, GW2 will be chosen due to its higher priority.