Is there a similar service like IP SLA so the firewall can change default routes as a result of a certain condition

[blaketraister]

I was just curious...if I have 2 internet feeds but am not peering - I use ip/SLA to guanratee service.  If a ping to 4.2.2.2 fails, it drops the current default route and the other default route with the higher AD is the active default route.

Is there something similar to this in PAN-OS?

[bat]

blaketraister

You are looking for PBF with monitoring.

Go through the following documents:

How to Configure ISP Redundancy and Load Balancing

Hope it helps!

[HULK]

A similar DOC: Dual ISP Branch Office Configuration

Thanks

[sbabu]

Hi,

In PaloAlto there is no tracking protocol like IPSLA. However, you can configure default route for redundancy link with higher metric. If nexthop is not reachable or interface is down. The secondary route will take effect. Please find the below doc for the same.

Using Next Hop Versus Exit Interface for Default Route

If you network setup has redundant links to reach the next-hop, the best practice is to mention the next-hop along with the exit interface for the floating static routes to work efficiently.