Palo Alto Networks Knowledgebase: Dual ISP Branch Office Configuration

Dual ISP Branch Office Configuration

Created On 02/07/19 23:49 PM - Last Updated 02/07/19 23:49 PM

This document describes how to configure a dual ISP for a branch office.  In this scenario, an office is connected to two ISPs with redundancy for outbound connectivity. This configuration uses a combination of static routing, policy-based forwarding (PBF), and destination interface-based source NAT translation. The solution provides automatic outbound internet redundancy without requiring BGP routing protocol between ISPs.


Note: This document has been modified for PAN-OS 5.0 and later.  Multiple external zones are no longer required.


owner: kbrazil

  • Print
  • Copy Link

Choose Language