Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience. Visit our blog to learn more.
11-27-2013 04:41 AM
Hello Jakub,
Yes we will have to use PBF to have auto failover if the primary link is failed.
In PBF rule we set the primary link ( in your case it is MPLS path ). PBF rules are given priority over default routes and security rules. If the PBF fails then it would take the default static route to the tunnel for backup path.
Below are some doc suggestions to understand and customize your implementation.
How to Setup a Palo Alto Networks Firewall with Dual ISPs and Automatic VPN Failover
Dual ISP Branch Office Configuration
Thanks
