Service route destination option

cancel
Showing results for 
Search instead for 
Did you mean: 

Service route destination option

L0 Member

What is the purpose of adding destination in service route?

We have a default gateway in management interface config and we also have specific route in vr so why we need it?

5 REPLIES 5

L7 Applicator

All requests that go out from firewall (URL category check, DNS requests, content updates, Wildfire etc) go out from management interface by default.

In some environments management interface connects to management network that has no access to internet.

 

Route entries that are in virtual router do not apply to traffic that goes out from management interface.

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE, PCNSE, PCNSI

L6 Presenter

Hi,

 

There you go :

 

https://live.paloaltonetworks.com/t5/Configuration-Articles/Setting-a-Service-Route-for-Services-to-...

 

So by default for all traffic that generated by the device itself, Palo will use mgmt interface and default gateway configured on the management interface settings. By default it will NOT use the default gateway configured on the VR or source IP configured on the interfaces. You need to specify this using "service route" settings.

 

Cheers

L4 Transporter

In simple words:

By default for the services defined under service route tab" management interface " is used.

You can chnage this for the defined services via service route tab

But there will be some other non defined services(  i believe which might som other logs) , for those we need destination.

 

But some one needs to clarify this:

So if we define any destination address in service-route tab, how routing happen?

Is it something like: first it will make sure the traffic is orginated using the source interface we mention then routing table entries.

Please explain

PCNSE-7, ACE-6,ACE 7 , CCNP, CCNA,CCIE(theory) , RHCE
Firewalldog dot com

Roby,

 

May be some services which are not show in the service we can have destination route for that service I guess.

 

Regards

HSingh

For that routing is fine right

PCNSE-7, ACE-6,ACE 7 , CCNP, CCNA,CCIE(theory) , RHCE
Firewalldog dot com
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!