topic Re: Static NAT problem in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189318#M34879 <P>How exactly is the NAT configured auto/manual, and did you setup a proxy arp?</P> Sun, 13 Aug 2023 12:57:36 GMT Chris_Atkinson 2023-08-13T12:57:36Z Static NAT problem https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189308#M34878 <P>Dear All,<BR />We added a Static NAT setting in the firewall yesterday, other hosts from the Internet can connect to the our company's specific Server.</P><P>During the test, we can see the allow log of the connection, but in fact the connection does not pass normally. And you can see the following message from the Log:<BR />"Connection terminated before detection: Insufficient data passed. To learn more see sk113479."</P><P>We have intercepted packets with wireshark on the intranet, and we have seen many "tcp retransmission tcp port reused..." error messages. We have suggested to refer to the following two articles to deal with it, but it doesn’t work.<BR /><A href="https://support.checkpoint.com/results/sk/sk24960" target="_blank">https://support.checkpoint.com/results/sk/sk24960</A><BR /><A href="https://community.checkpoint.com/t5/General-Topics/TCP-port-reuse-between-Check-Point-Remote-Access-Gateway-and/td-p/31609" target="_blank">https://community.checkpoint.com/t5/General-Topics/TCP-port-reuse-between-Check-Point-Remote-Access-Gateway-and/td-p/31609</A></P><P>So I was wondering if anyone else had a similar problem?</P><P><BR />Thanks</P> Sun, 13 Aug 2023 08:34:33 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189308#M34878 GigaYang 2023-08-13T08:34:33Z Re: Static NAT problem https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189318#M34879 <P>How exactly is the NAT configured auto/manual, and did you setup a proxy arp?</P> Sun, 13 Aug 2023 12:57:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189318#M34879 Chris_Atkinson 2023-08-13T12:57:36Z Re: Static NAT problem https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189325#M34880 <P>Hi Chris,</P><P>It is Auto static NAT, so we did not set proxy arp.</P> Sun, 13 Aug 2023 15:34:51 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189325#M34880 GigaYang 2023-08-13T15:34:51Z Re: Static NAT problem https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189358#M34881 <P>is the policy created inside a layer with appc/urlf enabled?</P> Mon, 14 Aug 2023 07:14:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Static-NAT-problem/m-p/189358#M34881 CheckPointerXL 2023-08-14T07:14:20Z