You can add static routes locally on a Kaspersky NGFW device or use a template for multiple devices.
To add a static route:
In the main menu of the Open Single Management Platform Console, go to the Application & Services → NGFW → Devices or Network templates → <name of the device or network template> section and select the Routing → Static routes tab.
A table of static routes is displayed.
If you navigated to the Static routes section through Application & Services → NGFW → Devices and want to configure static routes locally on the device, enable the Override toggle switch and confirm the action. Static routes on the device will not be synchronized with the template, and you can add or edit static routes locally.
If this switch is disabled, the device uses the static routes configured in the template that is applied to the device, and local editing of static routes in this section is not possible. By default, this toggle switch is enabled.
By default, the Override toggle switch is enabled.
Virtual routing and forwarding tables are displayed in the <VRF name>/<ID> format. By default, the Main/254 table is selected.
In the Destination column, enter the IPv4 address of the destination host or subnet.
In the IPv4 netmask column, enter the IPv4 mask of the destination host or subnet.
If necessary, in the Gateway column, enter the IPv4 address of the exit point from the subnet of the traffic source.
In the AD column, enter the administrative distance of the static route.
Possible values: 1 to 255. By default, 1 is specified for an unicast route, and 200 for a blackhole route.
In the Type column, select the type of static route:
Unicast is a standard static route.
Blackhole is a route with static IP address 0.0.0.0/0, to which traffic without a suitable route is redirected and thus dropped. The blackhole route can be used, for example, to block traffic coming from specific IP addresses or subnets.