- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Re: Bypass network objects with Specific ISP
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Bypass network objects with Specific ISP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please elaborate. What do you mean, bypass particular network objects?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are you using ISP Redundancy? If so, you'd configure it there.
Otherwise, you can do it with Policy-Based Routing.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes, I am using ISP Redundancy we are using two ISP in load balancing.
Can you please explain in which option I can configure the same?
Awaiting for your reply on the same.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you're asking about pinning specific traffic to a given ISP link, then sk56384 might help. Otherwise, if you want traffic to specific hosts/networks to egress out a specific ISP link, then classic static-routes will be used here. Hopefully you don't need to resort to PBR, but if so, then sk167135 could be used to apply a security policy (in SmartConsole) to PBR rules.
There are tons of limitations and restrictions with PBR, so read sk167135 VERY VERY carefully. You should also be warned about PBR, which @PhoneBoy told me long ago: Once your routing decisions go into PBR, then EVERYTHING stays in PBR. Depending on your use-case, you may need to have a near-100% duplicate of your global routing domain inside your PBR domain. #TreadCarefully #HereThereBeDragons
