Reverse Path Forwarding (RPF)

[KKUNZLER]

It appears to me after diligently searching that Palo Alto firewalls do not support Unicast Reverse Path Forwarding (RPF/uRPF) in any form.  Is this correct?  If not, how does one implement reverse path forwading on a Palo Alto Firewall?

[jvalentine · Accepted solution]

Reverse path forwarding - Wikipedia, the free encyclopedia

It's there... it's just not called uRPF.  This is handled by the "Spoofed IP address" protection functionality provided in the Zone Protection feature.  In the PAN-OS GUI, go to Network / Network Profiles / Zone Protection Profiles.  From here you can create/modify a Zone Protection Profile.  Go to the Packet-based protections tab and enable protections for "Spoofed IP address"

You then apply the Zone Protection Profile on a Zone by going to the Network tab / Zones / and selecting the Zone Protection Profile.