Hello, I'm trying to route all GUEST traffic on a PA firewall to ISP-2. I understand you can use PBF on the PA firewall to route based on source address. I don't have a lot of experience with PBF and have encountered a few issues when trying to implement this. Some questions I have 1). Do I need a 2nd VR to do this? 2). Do I need 2 new security zones (one for the outside of the guest ISP and inside to the guest network) 3). If I add a 2nd NAT policy for the GUEST Public IP, will it affect my current production NAT?
... View more