FTD and PBR with two default gateways

[Chess Norris]

Hi,

Is it possible to use BPR in FTD and route traffic to different gatways based on source networks?

I have two interfaces configured in the FTD, both are on different /28 public subnets. I also have about 30 private subnets, each on its own subinterface. Let's say I want to route traffic from 10 of those private subnets to the first gateway and the rest of the subnets to the other gateway.  Would this be possible by using PBR or do I need to use VRFs to achive this?

Thanks

/Chess

[Rob Ingram · Accepted solution]

Hi @Chess Norris yes, PBR will do that for you. Example here:- https://integratingit.wordpress.com/2021/04/18/ftd-policy-based-routing

PBR functionality was only added natively (without using flexconfig) in the recently released version 7.2

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/720/threat-defense-release-notes-72/features.html

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/routing-policy-based.html

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/217588-configure-pbr-with-ip-slas-for-dual-isp.html
check this link

[Chess Norris]

Great to know that it works and thanks a lot for the links.

/Chess