PBF failover happens but users still unable to browse

[LCMember4717]

hi,

i have a pa-3020 with two ISP links, my PBF configuration as follows :

for testing when we disable the link for ISP-1 it did a failover but actually no internet browsing, on the NAT there is already two nat policy for each ISP but it did not trigger the nat untill i moved the nat policy for ISP-2 on top then only it works, any hint where could be the issue ?

[panos]

could you please share Nat rules also

[dburns · Accepted solution]

I'm guessing your external interfaces are in the same zone.

On the NAT Policy, try changing them to different zones, or configure a destination interface.

Dominic

[LCMember4717]

i just noticed am having the same zone for both nat policy :smileycool: will give it a try see.

thanks.

[LCMember4717]

on both nat policy am having the same zone i will change them and test mostly this is the reason

[panos]

you can use same zone for both wan interface in that case you should use different  interface on NAT rules.