PBR is based on IP and Ports, there is no Internet Object as on regular policy.
To route VLAN178 through ISP2 and assuming ISP1 is configured as your default route, yo have to do the following:
1. Create a new PBR table of type Default Route that points to ISP2 next hop address.
2. Add a new PBR rule with source Inbound Interface of VLAN178 (I'm assuming is locally conected on a subinterface ethx.178) who uses the PBR table created earlier. On this case, you can't solely use the segment 192.168.178.X/XX since the Firewall probably has an IP address on this segment and could derive on unwanted behavior.
Please note the following:
- Hide behind Gateway NAT or Hide Behind IP (on ISP2 range) must be configured for VLAN178's Network Object to allow traffic leave the ISP2 interface with correct IP address. If you use Hide behind IP, Proxy ARP may be neccesary
- Since PBR is processed before regular Routing Table, if you follow the two steps mentioned above, all traffic from VLAN178 will be redirected to ISP2 link no matter which is the final destination. If you want to route to local networks, you will have to create a new PBR table including those you need to reach locally and specify the output interface (like a copy of your routing table); after that you need to create a PBR rule with lower priority pointing to this table.
- There is no automatic failover, so if ISP2 is down on some place along the path; all traffic still be sent to this link.
- If you have ISP Redundancy configured, PBR is bypassed.