I’m in the middle of a project to push all remote site internet traffic through a Palo Alto HA cluster in our DC instead of having direct internet breakout.
At present I have completed one site of about 50 users, and by the end of the project there will be roughly 200 users internet traffic going through it.
They are currently being NATed with the public IP address on the internet interface of the Palo Alto.
At what number of users would it be recommended or necessary to start using a nat pool instead of a single IP?
Is there a volume of source IPs when it’s required to move to nat pool rather than interface nat ?
No comments:
Post a Comment