https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/121150#M17224 <P>Thanks, but TBH it's not a lot more helpful than the sk. I'm looking specifically for someone who has configured CP gateways to support the Cisco Expressway solution. I must be the only one!&nbsp;<span class="lia-unicode-emoji" title=":smiling_face_with_smiling_eyes:">😊</span></P> Mon, 14 Jun 2021 13:52:27 GMT Alex_Alborzfard 2021-06-14T13:52:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120886#M17168 <P>I've been tasked with configuring our gateways to support Cisco Expressway architecture with Hairpin/Reflected NAT?</P><P>I followed sk110019, but it doesn't have all the information I'm looking for. Has anybody have done this before that I can pick their brain?</P> Thu, 10 Jun 2021 18:00:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120886#M17168 Alex_Alborzfard 2021-06-10T18:00:03Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120889#M17169 <P>Are you trying to access a public IP/resource which is NATed to an actually resource on your LAN/DMZ ?</P> Thu, 10 Jun 2021 18:47:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120889#M17169 funkylicious 2021-06-10T18:47:16Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120890#M17170 <P>An external client needs to access Cisco Expressway-E server on few ports, only on the public side of it and the rest of the traffic to the private side. I've attached couple of diagrams to help visualize the architecture and traffic.</P> Thu, 10 Jun 2021 18:57:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120890#M17170 Alex_Alborzfard 2021-06-10T18:57:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120892#M17172 <P>Probably something like the answer I gave here:&nbsp;<A href="https://community.checkpoint.com/t5/Security-Gateways/Traffic-flow-in-between-C-to-S-via-Firewall-How/m-p/8465" target="_blank">https://community.checkpoint.com/t5/Security-Gateways/Traffic-flow-in-between-C-to-S-via-Firewall-How/m-p/8465</A></P> Thu, 10 Jun 2021 21:16:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/120892#M17172 PhoneBoy 2021-06-10T21:16:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/121150#M17224 <P>Thanks, but TBH it's not a lot more helpful than the sk. I'm looking specifically for someone who has configured CP gateways to support the Cisco Expressway solution. I must be the only one!&nbsp;<span class="lia-unicode-emoji" title=":smiling_face_with_smiling_eyes:">😊</span></P> Mon, 14 Jun 2021 13:52:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/121150#M17224 Alex_Alborzfard 2021-06-14T13:52:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/121161#M17225 <P>From the diagrams you’ve attached, which should have been done inline instead, it seems like Cisco Expressway might do some application aware stuff.<BR />In which case, simple NAT rules may not work.<BR />It also tells us nothing about your specific environment or what precisely you expect the gateway to do.</P> <P>Regardless, it would help to know precisely what you configured, what didn’t work, and what troubleshooting steps (with precise results) you did.&nbsp;</P> Mon, 14 Jun 2021 14:53:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-configure-Hairpin-NAT-for-Cisco-Expressway/m-p/121161#M17225 PhoneBoy 2021-06-14T14:53:44Z