All requests that go out from firewall (URL category check, DNS requests, content updates, Wildfire etc) go out from management interface by default.
In some environments management interface connects to management network that has no access to internet.
Route entries that are in virtual router do not apply to traffic that goes out from management interface.
There you go :
So by default for all traffic that generated by the device itself, Palo will use mgmt interface and default gateway configured on the management interface settings. By default it will NOT use the default gateway configured on the VR or source IP configured on the interfaces. You need to specify this using "service route" settings.
In simple words:
By default for the services defined under service route tab" management interface " is used.
You can chnage this for the defined services via service route tab
But there will be some other non defined services( i believe which might som other logs) , for those we need destination.
But some one needs to clarify this:
So if we define any destination address in service-route tab, how routing happen?
Is it something like: first it will make sure the traffic is orginated using the source interface we mention then routing table entries.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!