MANUAL-NAT ON CHECKPOINT VIRTUAL GW

siddu099 — Wed, 08 Apr 2026 09:21:22 GMT

Hi Team,

We have configured the public IP segment 71.56.98.x/28 on the Check Point firewall WAN interface (eth1).

Our requirement is to perform manual NAT with port forwarding for one of our internal servers. We are using one available public IP from the above subnet and mapping it to the internal server 10.20.30.40, with the following requirement:

External Port: 443
Internal Destination: 10.20.30.40:8443

However, we are facing the following issue:

When configuring Static NAT (manual NAT), the setup is not working
When using Automatic NAT, it is working, but we are unable to perform port forwarding (443 → 8443)

Could you please help us understand:

Why manual NAT is not working in this scenario
The correct way to configure port forwarding using manual NAT in Check Point

Kindly assist with the correct configuration or any prerequisites we may be missing.

Thanks & Regards,
Siddu

Re: MANUAL-NAT ON CHECKPOINT VIRTUAL GW

Lesley — Wed, 08 Apr 2026 09:33:00 GMT

You have to configure a proxy arp for the public IP range in the GAIA config.

https://support.checkpoint.com/results/sk/sk30197

topic Re: MANUAL-NAT ON CHECKPOINT VIRTUAL GW in Firewall and Security Management

MANUAL-NAT ON CHECKPOINT VIRTUAL GW

Re: MANUAL-NAT ON CHECKPOINT VIRTUAL GW