Inter Vsys Routing

DaveErrington — Tue, 12 Jul 2022 16:00:21 GMT

Can someone give me some advice please. In the attached diagram is a scenario I have where I need to get traffic logs from Virtual Firewall B across to Virtual Firewall A an up to the SIEM at the x.x.x.x address. I have made the virtual systems visible to each and added a route to x.x.x.x on virtual router B to go via virtual router A to get to x.x.x.x.

After adding a log forwarding action on the rules to send syslogs to x.x.x.x I'm seeing no traffic on either firewall destined for x.x.x.x. When using the route test command on the CLI to check the route all thats coming back is that it will use the default route to the internet rather than the route I configured. Can someone point out where I'm going wrong and/or how I would check for traffic to x.x.x.x please.

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Re: Inter Vsys Routing

reaper — Thu, 14 Jul 2022 12:02:16 GMT

you also need to create "external" type zones on each of the vsys and create security rules that allow packets to flow to and from the external zones

have you looked into service routes as that may be a lot easier

topic Re: Inter Vsys Routing in General Topics

Inter Vsys Routing

Re: Inter Vsys Routing