Service route destination option

[hrsingh]

What is the purpose of adding destination in service route?

We have a default gateway in management interface config and we also have specific route in vr so why we need it?

[Raido_Rattameister]

All requests that go out from firewall (URL category check, DNS requests, content updates, Wildfire etc) go out from management interface by default.

In some environments management interface connects to management network that has no access to internet.

Route entries that are in virtual router do not apply to traffic that goes out from management interface.

[TranceforLife]

Hi,

There you go :

https://live.paloaltonetworks.com/t5/Configuration-Articles/Setting-a-Service-Route-for-Services-to-...

So by default for all traffic that generated by the device itself, Palo will use mgmt interface and default gateway configured on the management interface settings. By default it will NOT use the default gateway configured on the VR or source IP configured on the interfaces. You need to specify this using "service route" settings.

Cheers

[Roby_Sreejith]

In simple words:

By default for the services defined under service route tab" management interface " is used.

You can chnage this for the defined services via service route tab

But there will be some other non defined services(  i believe which might som other logs) , for those we need destination.

But some one needs to clarify this:

So if we define any destination address in service-route tab, how routing happen?

Is it something like: first it will make sure the traffic is orginated using the source interface we mention then routing table entries.

Please explain

[hrsingh]

Roby,

May be some services which are not show in the service we can have destination route for that service I guess.

Regards

HSingh

[Roby_Sreejith]

For that routing is fine right