Removing External Interface
We had two internet circuits. One for primary, one for backup / failover. We're removing our second internet circuit. I've found that if I simply remove the physical connection, traffic from trusted interfaces can't exit the primary external interface. There are a lot of historical firewall policies.
Is it possible to add a new policy at the top of the processing list that just sends all trusted interface traffic for any port type out of a specific external interface?