topic Re: Cloudguard NAT in Cloud Firewall

Cloudguard NAT

Muhammad_Ansour — Mon, 09 Mar 2020 05:28:49 GMT

Hi,

We are implementing AWS Cloudguard Ingress gateway as below:

Public -> NLB -> Cloudguard -> ALB

Traffic from NLB, we are seeing the destination is our firewall IP Address. Is this normal?

We tried to do NAT and translate it to the ALB object, the problem is NAT rule doesn't accept this because destination translation cannot use LB objects.

Can't find a guide for this.

Re: Cloudguard NAT

PhoneBoy — Tue, 10 Mar 2020 01:20:21 GMT

Yes, the traffic is directed to the firewall IP.
I suspect you will need to follow the instructions here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk104249

Yes, this is for ELBs on the inside, but the concept/configuration should be the same.
The Logical Server object does the necessary NAT in this case.

Re: Cloudguard NAT

Muhammad_Ansour — Tue, 10 Mar 2020 01:30:49 GMT

Hi,

Thank you so much for your reply, will try it out immediately.