Default Routes with Traffic Steering Direct to Internet Example
Focus
Focus
Prisma Access

Default Routes with Traffic Steering Direct to Internet Example

Table of Contents

Default Routes with Traffic Steering Direct to Internet Example

Describes how a traffic steering works with default routes in a direct-to-internet scenario.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Panorama)
The following example shows you using more granular control for external SaaS application-bound traffic. In this case, you want to send Office 365 traffic to egress to the internet directly from the mobile user location, instead of sending it to the data center for further processing. Use traffic steering along with default routes for this configuration.
To allow Prisma Access to route Office 365 traffic directly to the internet, perform the following actions:
  • Create an EDL (ObjectExternal Dynamic Lists) with IP addresses that match the Office 365 addresses.
  • Create a Custom URL category (ObjectsCustom ObjectsURL Category) with URLs that match Office 365 URL.
  • create Configure Traffic Steering in Prisma Access and specify the EDL and URL category you created as destination match criteria with an Action of Forward to the internet.
This configuration sends Office 365 traffic directly to the internet, while other internet-bound traffic is sent to the data center for further processing before egressing to the internet.