How to configure routing with two Untrust connections?

[bergschneider]

I have a Juniper SSG 140 with ScreenOS 6.1.0r4.0.There are two untrust connections, one symmetrical broadband connection, and one asymmetrical broadband connection. Our customer wants to channel all http and https traffic from a LAN in the trust zone to the asymmetrical untrust connection. In the attachment is a network map. How should i configure this routing?

[Screenie]

Hi, you can set the default route to "alles andere" (symetric) and route HTTP, HTTPS with PBR, policy based routing. When using the gui set a access list to dst-port 80 or 443. Then fill in everything below it, bind to incomming interface.

[bergschneider]

Hi Screenie, i already tried what you explained to me. The problem is now, when i whant to do a http or https access from the 192.168.1.20 station to the 192.168.200.1 station the access will be channeld to the untrust interface and not internally.

[Screenie]

OK,  can't you write a second. PBR rule dedicated for this host?

[bergschneider]

It is not only about the host. The 192.168.1.0/24 must have access to the 192.168.200.0/24 network.

I tried it with another PBR rule but it doesn´t work. Maybe  the order is an issue? I don´t know in which order this rules will be processed?

kind regards!