NSF 8.0.95 Reverse Routing

hi community,

Our firewall are connected to two router that goes to different ISP

Is the reverse routing is recommended to be enable here on both interface connected to the router?

thanks

Hi, Sangfor's reverse routing is useful if you need to set up rules to manage how traffic is routed back to the internal network from external sources. If you don't need to make static routes and policies to manage how traffic is routed back to the internal network from external networks, you can leave this option unticked.

HiHi,

The 'Reverse Routing' setting is used to manage the return path of network traffic. This setting ensures that the response packets follow the same path as the incoming packets.

In practical terms, enabling Reverse Routing helps in scenarios where multiple ISPs are involved, ensuring that the traffic is routed back through the same interface it arrived on.

Below is the NSF User Manual Description:

Reverse Routing: Specify whether data packets are sent out through the same link they come in. You need to enable this option when there are WAN links of multiple ISPs; otherwise, the service may be inaccessible. This option is automatically enabled once WAN attribute is checked.

Enabling reverse routing on both interfaces connected to the routers is generally recommended to ensure proper routing of return traffic. It helps prevent asymmetric routing issues and ensures that response packets follow the correct path back to the source.

Reverse Routing (also known as Source Routing or Policy-Based Routing) is used to ensure that traffic coming from one interface will follow the same path when returning, i.e the outgoing and incoming traffic flows over the same route.