https://community.checkpoint.com/t5/Cloud-Firewall/NAT-for-self-originated-traffic/m-p/273401#M6177 <P>I suspect traffic going into the VTI will do so before NAT is applied.<BR />Not sure how SecureXL works with loopback interfaces.</P> Fri, 13 Mar 2026 22:59:14 GMT PhoneBoy 2026-03-13T22:59:14Z https://community.checkpoint.com/t5/Cloud-Firewall/NAT-for-self-originated-traffic/m-p/273343#M6176 <P>Good day.</P><P>Please help me to understand.<BR />My goal is to access the gateway via the loopback interface.<BR />To do this, I'm creating a HideNAT in loopback from any address on any interface.<BR />There are no problems with physical interfaces, but the NAT doesn't work from the VTI IPsec. It originates the VPN address, not the loopback address.<BR />Why can't I create a NAT on a logical VPN interface?&nbsp;</P> Fri, 13 Mar 2026 08:20:49 GMT https://community.checkpoint.com/t5/Cloud-Firewall/NAT-for-self-originated-traffic/m-p/273343#M6176 akurtasanov 2026-03-13T08:20:49Z https://community.checkpoint.com/t5/Cloud-Firewall/NAT-for-self-originated-traffic/m-p/273401#M6177 <P>I suspect traffic going into the VTI will do so before NAT is applied.<BR />Not sure how SecureXL works with loopback interfaces.</P> Fri, 13 Mar 2026 22:59:14 GMT https://community.checkpoint.com/t5/Cloud-Firewall/NAT-for-self-originated-traffic/m-p/273401#M6177 PhoneBoy 2026-03-13T22:59:14Z