A PAN-OS firewall routes with a routing instance to which Layer 3 interfaces are assigned. For many years that instance has been the virtual router (VR); a new firewall ships with one called default. You can create more VRs to separate routing domains, and a static route can use another VR as its next hop. Each VR has its own routing table, the RIB (routing information base), and forwarding table, the FIB (forwarding information base). Routing matters for security because the destination zone of every session is found by a route lookup.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.