Configure additional settings for VPN load balancing

These additional settings for VPN load balancing allow you to specify whether clients receive fully qualified domain names instead of IP addresses during redirection, and control when IKEv2 redirect occurs during the connection process.

Before you begin

VPN load balancing must already be configured for the remote access VPN policy.

Procedure

Step 1

Choose Secure Connections > Remote Access VPN.

Step 2

Click the edit icon next to the remote access VPN policy.

Step 3

Click the Advanced tab.

Step 4

In the left pane, click Load Balancing.

Step 5

Click the Enable Load balancing between member devices toggle button to activate load balancing.

Step 6

Configure the group settings for VPN load balancing.

For more information, see Configure group settings for VPN load balancing.

Step 7

Click Settings.

Step 8

In the Configure Group Parameters dialog box, configure these parameters:

  1. Click the Send FQDN to peer devices instead of IP toggle button to enable redirection using a fully qualified domain name.

    By default, a Firewall Threat Defense device sends only IP addresses to a client.

  2. In IKEv2 Redirect, select one of these phases:

    • Redirect during SA authentication

    • Redirect during SA initialization

  3. Click OK.

Step 9

Click Save.