<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: 2 ISP NAT question in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/2-isp-nat-question/m-p/406011#M92058</link>
    <description>&lt;P&gt;if both ISPs have a different zone assigned to their interface, you should not need to change the NAT rules' order&lt;/P&gt;&lt;P&gt;if both need to have the same zone, make sure you set the destination interface properly in each NAT rule, that way NAT is applied not only by zone but also by interface the traffic is egressing out of&lt;/P&gt;&lt;P&gt;i.e.&lt;/P&gt;&lt;P&gt;rule1 from LAN to ISP1 dst-interface 1/1 | nat src-interface1/1DIPP&lt;/P&gt;&lt;P&gt;rule2 from LAN to ISP2 dst-interface 1/2 | nat src-interface1/2DIPP&lt;/P&gt;</description>
    <pubDate>Tue, 11 May 2021 10:21:39 GMT</pubDate>
    <dc:creator>reaper</dc:creator>
    <dc:date>2021-05-11T10:21:39Z</dc:date>
    <item>
      <title>2 ISP NAT question</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/2-isp-nat-question/m-p/405814#M92041</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;we have 2 ISPs . .&lt;/P&gt;&lt;P&gt;Static route with metric 10 for the 1st one and another static route with metric 20 for the second one .&lt;/P&gt;&lt;P&gt;We have 2 nat rules for LAN. 1st one is via ISP1 &amp;nbsp;and 2nd is via ISP2.&lt;/P&gt;&lt;P&gt;So when we change the default route we need to reorder the NAT policies in order to have internet.&lt;/P&gt;&lt;P&gt;Is there a option to change default routes without changing the nat policies ?&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 10 May 2021 16:42:01 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/2-isp-nat-question/m-p/405814#M92041</guid>
      <dc:creator>stef</dc:creator>
      <dc:date>2021-05-10T16:42:01Z</dc:date>
    </item>
    <item>
      <title>Re: 2 ISP NAT question</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/2-isp-nat-question/m-p/406011#M92058</link>
      <description>&lt;P&gt;if both ISPs have a different zone assigned to their interface, you should not need to change the NAT rules' order&lt;/P&gt;&lt;P&gt;if both need to have the same zone, make sure you set the destination interface properly in each NAT rule, that way NAT is applied not only by zone but also by interface the traffic is egressing out of&lt;/P&gt;&lt;P&gt;i.e.&lt;/P&gt;&lt;P&gt;rule1 from LAN to ISP1 dst-interface 1/1 | nat src-interface1/1DIPP&lt;/P&gt;&lt;P&gt;rule2 from LAN to ISP2 dst-interface 1/2 | nat src-interface1/2DIPP&lt;/P&gt;</description>
      <pubDate>Tue, 11 May 2021 10:21:39 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/2-isp-nat-question/m-p/406011#M92058</guid>
      <dc:creator>reaper</dc:creator>
      <dc:date>2021-05-11T10:21:39Z</dc:date>
    </item>
  </channel>
</rss>

