Configure group settings for VPN load balancing

Step 1

Choose Secure Connections > Remote Access VPN.

Step 2

Click the edit icon next to the remote access VPN policy.

Step 3

Click the Advanced tab.

Step 4

In the left pane, click Load Balancing.

Step 5

Click the Enable Load balancing between member devices toggle button to activate load balancing.

Step 6

In the Edit Group Configuration dialog box, configure these parameters:

1. In the Group IPv4 Address and Group IPv6 Address fields, enter the IP address.

   The IP address is for the entire load-balancing group and the director uses this IP address for incoming VPN connections.

2. In the Communication Interface drop-down list, choose the interface that the director and members use to share information about their load.

3. In the UDP Port field, enter the port of communication between the director and members.

   The range is from 1 to 65535. The default port is 9023.

4. Click the IPsec Encryption toggle button to activate IPsec encryption for the communication between the director and members.

   This setting establishes an IPsec tunnel between the director and members using a pre-shared key.

   When you upgrade or downgrade Firewall Threat Defense devices with the IPsec Encryption option enabled, ensure there is no configuration mismatch between the Cloud-Delivered Firewall Management Center and the Firewall Threat Defense to prevent deployment failures.

5. In the Encryption Key field, enter the key for IPsec encryption and confirm the key.

   Encryption key must be 4–16 characters.

6. Click OK.

Step 7

Click Save.