Configure Service Routes

Customize service routes.
Select
Device
Setup
Services
Global
(omit Global on a firewall without multiple virtual system capability), and in the Services Features section, click
Service Route Configuration
.

Select
Customize
and do one of the following to create a service route:
For a predefined service:
Select
IPv4
or
IPv6
and click the link for the service for which you want customize the service route.
To easily use the same source address for multiple services, select the checkbox for the services, click
Set Selected Routes
, and proceed to the next step.
To limit the list for Source Address, select a
Source Interface
; then select a
Source Address
(from that interface) as the service route. An Address Object can also be referenced as a Source Address if it is already configured on the selected interface. Selecting
Any
Source Interface makes all IP addresses on all interfaces available in the Source Address list from which you select an address. Selecting
Use default
causes the firewall to use the management interface for the service route, unless the packet destination IP address matches the configured Destination IP address, in which case the source IP address is set to the
Source Address
configured for the
Destination
. Selecting
MGT
causes the firewall to use the MGT interface for the service route, regardless of any destination service route.
The Service Route Source Address does not inherit configuration changes from the referenced interface and vice versa. Modification of an Interface IP Address to a different IP address or Address Object will not update a corresponding Service Route Source Address. This may lead to commit failure and require you to update the Service Route(s) to a valid Source Address value.
Click
OK
to save the setting.
Repeat this step if you want to specify both an IPv4 and IPv6 address for a service.
For a destination service route:
Select
Destination
and
Add
a
Destination
IP address. In this case, if a packet arrives with a destination IP address that matches this configured
Destination
address, then the source IP address of the packet will be set to the
Source Address
configured in the next step.
To limit the list for Source Address, select a
Source Interface
; then select a
Source Address
(from that interface) as the service route. Selecting
Any
Source Interface makes all IP addresses on all interfaces available in the Source Address list from which you select an address. Selecting
MGT
causes the firewall to use the MGT interface for the service route.
Click
OK
to save the setting.
Repeat the prior steps for each service route you want to customize.
Click
OK
to save the service route configuration.
Commit
.