topic Re: BGP preventing your FW become a transit AS in Next-Generation Firewall Discussions

BGP preventing your FW become a transit AS

MGMGMG — Sun, 02 Oct 2022 09:58:46 GMT

HI all,

basically same question of subject.

I've configured a PA VM in a lab with his own AS number,but i'm struggling to find the way to prevent the FW being used by other BGP routers as AS transit,only advertise network i decide to advertise.

Any idea,link or configuration to suggest?

Thanks in advance!

Re: BGP preventing your FW become a transit AS

PavelK — Sun, 02 Oct 2022 21:40:19 GMT

Hello @MGMGMG

thanks for the post!

You can configure BGP export filter list to limit advertisement to only your own prefix: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClDuCAK

Kind Regards

Pavel

Re: BGP preventing your FW become a transit AS

MGMGMG — Mon, 03 Oct 2022 05:09:43 GMT

Hi @PavelK ,

it works!

Thanks for your time!