Destination Service Route
- Device > Setup > Services > Global
On the Global tab, when you click on Service Route Configuration and then Customize, the Destination tab appears. Destination service routes are available under the Global tab only (not the Virtual Systems tab), so that the service route for an individual virtual system cannot override route table entries that are not associated with that virtual system.
You can use a destination service route to add a customized redirection of a service that is not supported on the Customize list of services. A destination service route is a way to set up routing to override the forwarding information base (FIB) route table. Any settings in the Destination service routes override the route table entries. They could be related or unrelated to any service.
A Destination service route is for the following use cases:
- When a service does not have an application service route.
- Within a single virtual system, when you want to use multiple virtual routers or a combination of virtual router and management port.
Destination Service Route Settings
Enter the Destination IP address. An incoming packet with a destination address that matches this address will use as its source the Source Address specified below.
To limit the drop-down list for Source Address, select a Source Interface. Selecting Any causes all IP addresses on all interfaces to be available in the Source Address drop-down. Selecting MGT causes the firewall to use the MGT interface for the service route.
Select the Source Address for the service route; this address will be used for packets returning from the destination. You do not need to enter the subnet for the destination address.
Service Routes The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks ...
IPv4 and IPv6 Support for Service Route Configuration
IPv4 and IPv6 Support for Service Route Configuration The following table shows IPv4 and IPv6 support for service route configurations on global and virtual systems. ...
Configure Services for Global and Virtual Systems
Configure Services for Global and Virtual Systems On a firewall where multiple virtual systems are enabled, select Services to display the Global and Virtual Systems ...
Customize Service Routes to Services for Virtual Systems
Customize Service Routes to Services for Virtual Systems When you enable Multi Virtual System Capability, any virtual system that does not have specific service routes ...
Customize Service Routes for a Virtual System
Customize Service Routes for a Virtual System When a firewall is enabled for multiple virtual systems, the virtual systems inherit the global service and service ...
Configure Path Monitoring for a Static Route
Configure Path Monitoring for a Static Route Use the following procedure to configure Static Route Removal Based on Path Monitoring . Enable path monitoring for ...
Set Up Network Access for External Services
Set Up Network Access for External Services By default, the firewall uses the MGT port to access remote services, such as DNS servers, content updates, ...
Configure a Static Route
Configure a Static Route Perform the following task to configure Static Routes or a default route for a virtual router on the firewall. Configure a ...
Static Routes Network > Virtual Routers > Static Routes Optionally add one or more static routes. Click the IP or IPv6 tab to specify the ...