Firewall Palo can advertise aggregate route...

[Stephen24]

Hello,

In our lab, we made a set up about peering BGP between Palo and a third part device.

According to this kb from Palo : "The Palo Alto Networks firewall does not advertise an aggregated route to its peer when it receives a prefix falling within the aggregated route range from the same peer" but in our case it's working

Does it mean the KB is wrong?

Thks!

S.

[Stephen24]

To clarify my request, I would like to know if in some cases the Palo can advertise an agregate even if it receives a prefix falling within this same aggregated route range

[kiwi]

Hi @Stephen24 ,

Is this what you're looking for ?

How to Aggregate Routes and Advertise via BGP 

Cheers,

-Kiwi.

[Stephen24]

Hi @kiwi ,

I had already checked this KB

in my set up, the Palo is able to send the aggregate to the peer even if it receives a prefix falling within the aggregated route range from the same peer

[ice-quake]

I experienced the same behavior on 9.1.  Is it a bug or did the default behavior change?  May be worth a TAC case.