The GlobalProtect Large Scale VPN (LSVPN) feature on the Palo Alto Networks Next-Generation
Firewall simplifies the deployment of traditional hub and spoke VPNs, enabling you to
deploy enterprise networks with several branch offices quickly with a minimum amount of
configuration required on the remote
satellites. This solution uses
certificates for firewall authentication and IPSec to secure data.
LSVPN enables site-to-site VPNs between Palo Alto Networks firewalls. To set up a site-to-site
VPN between a Palo Alto Networks firewall and another device, see
VPNs. The LSVPN doesn’t require a
GlobalProtect subscription.
The following topics describe the LSVPN components and how to
set them up to enable site-to-site VPN services between Palo Alto
Networks firewalls: