topic Re: Question about Service Route Configuration in General Topics

Question about Service Route Configuration

Cmaddox — Fri, 17 Apr 2020 23:58:42 GMT

I just inherited a PA-820 and know nothing about this device. It's unable to connect to the cloud for updates. Currently it's service route is set as the default (Management Interface). I was told by support to switch it to an untrusted interface to resolve this. I can see how that is done via this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGJCA0

My question: Is the Service Route strictly for device management and updates? Because I don't know anything about this device, I certainly don't want to screw anything up by making this change. Is there any risk to doing this?

Thanks!

Re: Question about Service Route Configuration

SutareMayur — Sat, 18 Apr 2020 05:41:15 GMT

@Cmaddox ,

Service Route is for routing specific traffic from any other interface as per requirement. By default, it uses management interface. Now services like NTP, Syslogs, SNMP Palo alto updates etc are listed under service Route config. Now in your case, you want to do service route changes for Palo Alto updates, you can just select particular settings for this, and select any other interface and it's associated IP address and Ok. Then commit.

Once you commit, palo alto updates request will go from the newly configured interface instead of management interface. And this is applicable for only Palo Alto updates as you have made changes for this service only. All other will go via default i.e. management interface.

Hope it helps!

Mayur

Re: Question about Service Route Configuration

MP18 — Sun, 19 Apr 2020 05:12:17 GMT

In addition to what Mayur said

Also verify that DNS server and update server is configured under device, setup and services.