https://live.paloaltonetworks.com/t5/next-generation-firewall/bgp-configuration-help/m-p/1232852#M6045 <P><SPAN>I'm trying to set up BGP over an IPSEC tunnel between a Palo Alto firewall and a Cisco device. The Cisco side will advertise 190 prefixes via BGP to Palo Alto. I want to send traffic to those prefixes, but without manually creating address object groups.</SPAN><BR /><BR /><SPAN>How should I configure the Security Policy and NAT Policy rules to allow traffic to those prefixes?</SPAN><BR /><BR /><SPAN>Also, is there an option to use the destination from the route table when creating a security policy rule for traffic flowing from the Trust zone to the IPSEC tunnel?</SPAN></P> Mon, 30 Jun 2025 06:00:32 GMT ASudheer 2025-06-30T06:00:32Z https://live.paloaltonetworks.com/t5/next-generation-firewall/bgp-configuration-help/m-p/1232852#M6045 <P><SPAN>I'm trying to set up BGP over an IPSEC tunnel between a Palo Alto firewall and a Cisco device. The Cisco side will advertise 190 prefixes via BGP to Palo Alto. I want to send traffic to those prefixes, but without manually creating address object groups.</SPAN><BR /><BR /><SPAN>How should I configure the Security Policy and NAT Policy rules to allow traffic to those prefixes?</SPAN><BR /><BR /><SPAN>Also, is there an option to use the destination from the route table when creating a security policy rule for traffic flowing from the Trust zone to the IPSEC tunnel?</SPAN></P> Mon, 30 Jun 2025 06:00:32 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/bgp-configuration-help/m-p/1232852#M6045 ASudheer 2025-06-30T06:00:32Z