topic Re: Access Role - NAT (original source) in Firewall and Security Management

Access Role - NAT (original source)

Geomix7 — Thu, 07 May 2020 07:44:59 GMT

Can you please inform me if we can use access role as an original source for NAT ?

on R80.20

Re: Access Role - NAT (original source)

_Val_ — Thu, 07 May 2020 08:28:44 GMT

No, you cannot

Re: Access Role - NAT (original source)

Timothy_Hall — Thu, 07 May 2020 11:44:28 GMT

Val is correct, in fact I don't personally consider the NAT rulebase a "real" policy layer like all the others. You are confined to using host/network/range IP addresses along with port numbers (and groups of these) in NAT rules, and can't use most of the more advanced object types introduced later such as Access Roles, Security Zones, and Applications/URL Categories. Updatable Objects can be used in NAT rules, but only if they just consist of a list of IP addresses/networks.

Re: Access Role - NAT (original source)

MartinTzvetanov — Fri, 23 Apr 2021 11:55:27 GMT

What about R81? I can't find any info about this.

Re: Access Role - NAT (original source)

MartinTzvetanov — Fri, 23 Apr 2021 12:00:00 GMT

Found it

https://checkpoint.engineer/releases/check-point-releases-r81/

NAT Rule Base
*Support for Domain objects, Updatable objects, Security Zones, Access Roles and Data Center objects.
*Hit count for NAT rules.