Hello all. I have a fairly easy deployment - a set of PA500s with internal trusted and external trusted zones. On the inside, they are currently connected to a router hsrp pair and on the outside pointing to another brand FW. I have only a handful of networks inside, so I have static routes pointing to the inside/outside configured in the VR area. My question is about the configuration for an all zeros PA static route? I want to make sure our inside traffic reaches any unknown nets on the outside, so I want to configure an all zeroes route. Is the PA500 ok with 0.0.0.0 0.0.0.0? I have done command line, but have not figured out how to confirm the PA is sending out all traffic to the outside interface. Can I have just the all zeros route outbound, and remove any others I have (networks I know). Trying to verify routing. Thanks for the help.
... View more