How are service routes used in PAN-OS?

Question

Options

• ABy the OSPF protocol, as part of Dijkstra's algorithm, to give access to the various services
• BTo statically route subnets so they are joinable from, and have access to, the Palo Alto Networks
• CFor routing, because they are the shortest path selected by the BGP routing protocol
• DTo route management plane services through data interfaces rather than the management

• A
  17% (6)
• B
  3% (1)
• C
  11% (4)
• D
  69% (25)

Explanation

Service routes are a feature of PAN-OS that allows the administrator to customize the interface that the firewall uses to send requests to external services, such as DNS, email, Palo Alto Networks updates, User-ID agent, syslog, Panorama, dynamic updates, URL updates, licenses, and AutoFocus. By default, the firewall uses the management interface for all service routes, unless the packet destination IP address matches the configured destination service route, in which case the source IP address is set to the source address configured for the destination. However, in some scenarios, the administrator may want to use a different interface for service routes, such as when the management interface does not have public internet access, or when the administrator wants to isolate or monitor the traffic for certain services. To configure service routes, the administrator can select Device > Setup > Services > Service Route Configuration and customize each service with a source interface and a source address. The administrator can also configure destination service routes to specify a destination IP address and a gateway for Service routes are not related to routing protocols such as OSPF or BGP, which are used to exchange routing information between routers and determine the best path to reach a network destination. Service routes are only used to change the interface that the firewall uses to communicate with external services.

No community discussion yet for this question.