topic Re: NAT Rule in Firewall and Security Management

NAT Rule

ihenock101 — Tue, 16 Aug 2022 05:28:52 GMT

Hi All

I am new for checkpoint and I got some issue regarding NAT. The thing is when I use static NAT for the host object created the Checkpoint creates automatic static NAT rule and it works fine however when I create manual NAT rule it doesn't work. Should I write for both the incoming and outgoing traffic because in static NAT the checkpoint automatically creates for both directions. In cisco if you write one way NAT rule it is enough I am not sure how Checkpoint NAT works please any help

Re: NAT Rule

Chris_Atkinson — Tue, 16 Aug 2022 06:36:42 GMT

What troubleshooting have you done, have you confirmed things like proxy-arp etc?

Re: NAT Rule

ihenock101 — Tue, 16 Aug 2022 07:14:13 GMT

@Chris_Atkinson I keep using the static NAT method

Re: NAT Rule

PhoneBoy — Tue, 16 Aug 2022 14:40:57 GMT

What precise rule(s) are you creating?
What is the precise topology?
What did you see in the logs when you attempted the connection?
What troubleshooting steps did you take?
Also, what version/JHF are you using?

Whether or not you need to create two manual NAT rules depends on who will initiate the communication.

Re: NAT Rule

the_rock — Tue, 16 Aug 2022 15:11:08 GMT

Guys are right, we need bit more info. Can you give example what exactly are you trying to achieve? Destination NAT from external source or something else? Usually, in newer versions, proxy arp is not needed, but thats 50-50, as TAC said to me before and I agree : - ). So, if you provide more insight, we can help better.