FTD PBR Question

[benolyndav]

Hi

Can anyone answer this question please, Do I need a default route when using PBR on FTD ? we have a static default route that points out of one Interface and have set up PBR to force traffic ingressing on a certain  Interface down a tunnel, I have tested and if there isnt a route for test traffic in the routing table then it goes via the default route and not via the PBR egress Interface, But when I add specific routes in the routing table the PBR is fine, So looks like I either need a load of static routes or a a default route for PBR to work???

Thanks

[Flavio Miranda · Accepted solution]

@benolyndav 

PBR does not replace routing. At some point, FTD will perform a routing lookup to make sure the traffic you are adding to the PBR match with some route. 

prove being the firewall sending the traffic to default route instead PBR.