<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic PBF failover happens but users still unable to browse in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16824#M12256</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;i have a pa-3020 with two ISP links, my PBF configuration as follows :&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG alt="pbf.png" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/17091_pbf.png" /&gt;&lt;/P&gt;&lt;P&gt;for testing when we disable the link for ISP-1 it did a failover but actually no internet browsing, on the NAT there is already two nat policy for each ISP but it did not trigger the nat untill i moved the nat policy for ISP-2 on top then only it works, any hint where could be the issue ?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 01 Dec 2014 14:57:53 GMT</pubDate>
    <dc:creator>LCMember4717</dc:creator>
    <dc:date>2014-12-01T14:57:53Z</dc:date>
    <item>
      <title>PBF failover happens but users still unable to browse</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16824#M12256</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;i have a pa-3020 with two ISP links, my PBF configuration as follows :&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG alt="pbf.png" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/17091_pbf.png" /&gt;&lt;/P&gt;&lt;P&gt;for testing when we disable the link for ISP-1 it did a failover but actually no internet browsing, on the NAT there is already two nat policy for each ISP but it did not trigger the nat untill i moved the nat policy for ISP-2 on top then only it works, any hint where could be the issue ?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 01 Dec 2014 14:57:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16824#M12256</guid>
      <dc:creator>LCMember4717</dc:creator>
      <dc:date>2014-12-01T14:57:53Z</dc:date>
    </item>
    <item>
      <title>Re: PBF failover happens but users still unable to browse</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16825#M12257</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;could you please share Nat rules also&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 01 Dec 2014 15:02:05 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16825#M12257</guid>
      <dc:creator>Retired Member</dc:creator>
      <dc:date>2014-12-01T15:02:05Z</dc:date>
    </item>
    <item>
      <title>Re: PBF failover happens but users still unable to browse</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16826#M12258</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I'm guessing your external interfaces are in the same zone.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;On the NAT Policy, try changing them to different zones, or configure a destination interface.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Dominic&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 01 Dec 2014 19:03:01 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16826#M12258</guid>
      <dc:creator>dburns</dc:creator>
      <dc:date>2014-12-01T19:03:01Z</dc:date>
    </item>
    <item>
      <title>Re: PBF failover happens but users still unable to browse</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16827#M12259</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;i just noticed am having the same zone for both nat policy :smileycool: will give it a try see.&lt;/P&gt;&lt;P&gt;thanks.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 02 Dec 2014 09:34:35 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16827#M12259</guid>
      <dc:creator>LCMember4717</dc:creator>
      <dc:date>2014-12-02T09:34:35Z</dc:date>
    </item>
    <item>
      <title>Re: PBF failover happens but users still unable to browse</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16828#M12260</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;on both nat policy am having the same zone i will change them and test mostly this is the reason&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 02 Dec 2014 09:35:16 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16828#M12260</guid>
      <dc:creator>LCMember4717</dc:creator>
      <dc:date>2014-12-02T09:35:16Z</dc:date>
    </item>
    <item>
      <title>Re: PBF failover happens but users still unable to browse</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16829#M12261</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;you can use same zone for both wan interface in that case you should use different&amp;nbsp; interface on NAT rules.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 02 Dec 2014 09:58:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pbf-failover-happens-but-users-still-unable-to-browse/m-p/16829#M12261</guid>
      <dc:creator>Retired Member</dc:creator>
      <dc:date>2014-12-02T09:58:42Z</dc:date>
    </item>
  </channel>
</rss>

