Policy based Forwarding "PBF" - Palo Alto Networks FireWall Concepts Training Series

[@Mac-ew1gv]

Thank you for taking the time out to make this video.

[@Manjunetherland]

Good explanation but it would have been great if you also show some live config in device for essay understanding.

[@Consigassecurity]

Hi Dev, in March we will launch the official Palo Alto Networks "EDU-210 Firewall: Configuration and Management" course as a self-paced training which will include videos showing the configuration and troubleshooting of PBF. Cheers Lars

[@GameBoiye]

Is there a way to use this tri-virtual router setup with ECMP to actually load balance between both ISPs and aggregate the bandwidth?

[@prashantrajbhandari6412]

can this be achieved with two ISP and two PA firewall in Active/Active configuration?

[@Bormanb23]

Can you just use route path monitoring and PBR, I don't see why we need a separate VR for each ISP plus a third for the LAN, it seems overly complicated but I may be wrong

[@Manjunetherland]

Can you please also make some video related to advance troubleshooting commands.

[@h4gg497]

I wouldn't really say this is the a particularly good use case for PBF. You could have just enabled ECMP on the VR then tweaked the ECMP load-balancing algorithms. Also it's asymmetric routing not "asynchronous". Why bother with different VRs for each ISP, just use a single egress interface (in a port-channel).

[@salmannasheet3584]

Would ECMP help with static default routes ? can we have 2 default route( in same VR) with same AD/Metric ? , if not ECMP won't work?

[@peternorton7665]

What a bad idea!