DUAL ISP configurations

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

DUAL ISP configurations

L0 Member

Hello Dear,


kindly I need your kind support to figure out the best way to have configure dual ISP in Palo Alto firewall.


Cyber Elite
Cyber Elite

Hi @mohamed.nabeel ,


I would say there are various options available so it actually depends on how do you want to have it? Let’s say you want to configure it as Active / Standby or Active / Active with ECMP enabled and both links will act as a failover to each other, etc.

For failovers, you have options like static route path monitoring. If you have IPSEC VPN on these lines, then again scenario changes. So first you would need to plan how do you want to have it and then you can look which option is suitable for you. Once you have understanding of these available options and how they work? Then by your own, you can decide best suitable option for yourself.


There are few KB articles available with different scenarios given below. Please review same. It will definitely give you some idea what are those options and how it works!


How to Implement ECMP (Load Balancing) on the Firewall

Dual ISP redundancy using Static Routes Path Monitoring Feature, for Traffic Failover

How to Configure a Palo Alto Networks Firewall with Dual ISPs and Automatic VPN Failover

How to Configure ISP Redundancy and Load Balancing

Dual ISP VPN site to site Tunnel Failover with Static Route Path-Monitoring


Hope it helps!

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!