NAT Rule Base

What can I do here?

In this Rule Base you can configure manual network address translation (NAT) Rules, and examine all NAT rules, both manual and automatic.

Getting Here - Security Policies > Access Control > NAT

NAT

NAT can be defined automatically via the network object (Node, Network or Address Range). When you define NAT via the network object, rules are automatically added to the NAT Rule Base

You can manually specify NAT rules, by adding or editing NAT rules to the NAT Rule Base. You can specify the source, destination and service separately for the original and the translated packet.

Automatic NAT rules cannot be edited in the Rule Base.

NAT Rule Base Structure

The NAT Rule Base is divided into two sections. Each section in the NAT Rule Base Editor is divided into Source, Destination, and Service.

• The Original Packet section specifies the conditions when the rule is applied.
• The Translated Packet section specifies the action taken when the rule is applied.

The Rule Base action in NAT is always the same:

• Translate Source under Original Packet, to Source under Translated Packet.
• Translate Destination under Original Packet, to Destination under Translated Packet.
• Translate Service under Original Packet, to Service under Translated Packet.

Rule Base Operations

Operations that can be performed on the NAT Rule Base include:

• Add a network object to the cell.
• Add (static) adds a statically translated network object to the cell.
• Add (Hide) adds a Hide NAT translated network object to the cell.

NAT Rule Separator

• In the Address Translation tab of SmartConsole you can now add a Section Title above manually added rules or above the first automatic rule. You can not add a Section Title between the automatic rules.