U Turn NAT Confuguration issue

sujoyg — Fri, 26 Apr 2024 08:32:12 GMT

Hi,

We have some issue with U Turn NAT on Checkpoint Firewall, actually we have 2 nos. of servers on DMZ zone (example SRV1 and SRV2) and the IP address are for SRV1 172.16.3.100 and SRV2 172.16.3.101 and the DMZ zone interface IP is 172.16.3.1, what we want to SRV2 will talking SRV1 via there Public Interface IP which is 1.6.61.100, we configured this as manner but no luck, please help us how achieve this, please find the attached doc we create for the same for better understanding.

Re: U Turn NAT Confuguration issue

PhoneBoy — Fri, 26 Apr 2024 17:05:59 GMT

It's not clear if your NAT rules are HIDE or Static NAT.
You need a HIDE NAT rule to achieve this (among other things, possibly).
See: https://community.checkpoint.com/t5/Security-Gateways/Traffic-flow-in-between-C-to-S-via-Firewall-How/m-p/8466#M13082

topic Re: U Turn NAT Confuguration issue in Firewall and Security Management

U Turn NAT Confuguration issue

Re: U Turn NAT Confuguration issue