topic Re: How do I configure Static Destination NAT on CGNS AWS in Cloud Firewall

How do I configure Static Destination NAT on CGNS AWS

Blason_R — Fri, 04 Nov 2022 16:55:34 GMT

Hi Team,

Does anyone have a documentation for configuring Static Destination NAT on CGNS AWS? I have front end subnet as 10.10.1.0/24 and backend subnet 10.10.2.0/24. Then I have web subnet as 10.10.6.0/24 and web server is 10.10.6.100.

Can someone please guide me how do I NAT 10.10.6.100 through Check Point CGNS on AWS?

TIA

Blason R

Re: How do I configure Static Destination NAT on CGNS AWS

Nir_Shamir — Sun, 06 Nov 2022 06:37:32 GMT

Hi,

you do it the same as any other NAT in Check Point NAT policy.

you said you need Destination NAT ? is it from the Web Server side or from the Internet side ? what is the flow you need ?

Re: How do I configure Static Destination NAT on CGNS AWS

Blason_R — Sun, 06 Nov 2022 06:53:04 GMT

Oh No - I guess I was not clear enough. I need to host the web server in a VPC which is behind checkpoint and since being a cluster how do I add one more Elastic IP on a cluster and route the traffic to checkpoint so that checkpoint will nat the traffic coming on that EIP and send the traffic out.

Lets say I have EIP assigned to cluster is 20.20.20.20 and now I need to set one more EIP as 50.50.50.50 which will be natted with 10.10.6.100 and natting will be done by Check Point.

Re: How do I configure Static Destination NAT on CGNS AWS

Nir_Shamir — Sun, 06 Nov 2022 08:35:41 GMT

From what I know , you can't add more EIP on a Cluster Deployment.

you need to use an ELB to publish more Services.