Policy Based Forwarding and global protect

mbajagic — Fri, 13 Jan 2012 08:58:49 GMT

Hello people,

I have a PBF problem and can not solve it without help.

My PA-500 firewall have dual ISP links. One of them is for users,

and uses normal routing. The other one is for testing purposes,

I use PBF to route few machines through other ISP link and it

works fine. However, what I failed to do is global protect service

on this second link (PBF next hop interface), can not even ping

from internet IP address on this link. I suppose that the problem is

with routing, because my default route points to other link where the

rest of users go and IP adress to which I connect is IP address on the

router itself not IP address behind router (traffic is not going through the

router when I connect with global protect or when I try to ping, it is destined

to the router itself). I tried to find workaround with PBF, not worked. I even added

another default route with higher metric that point to this interface, still not working.

Any idea or suggestion ?

Thanks in advance,

Vladimir

Re: Policy Based Forwarding and global protect

rmonvon — Fri, 13 Jan 2012 22:31:01 GMT

Did you assign both ISP connections on the same security zone?

mbajagic — Sat, 14 Jan 2012 17:29:36 GMT

No I did not.