https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-Tunnel-Setup-with-NAT/m-p/242440#M47084 <P>You need to choose the method, since it has to know whether its hide or static nat.</P> <P>Also, I would enable NAT inside the community.</P> <P>Andy</P> Wed, 26 Feb 2025 15:34:58 GMT the_rock 2025-02-26T15:34:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-Tunnel-Setup-with-NAT/m-p/242439#M47083 Thu, 27 Feb 2025 08:41:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-Tunnel-Setup-with-NAT/m-p/242439#M47083 Moudar 2025-02-27T08:41:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-Tunnel-Setup-with-NAT/m-p/242440#M47084 <P>You need to choose the method, since it has to know whether its hide or static nat.</P> <P>Also, I would enable NAT inside the community.</P> <P>Andy</P> Wed, 26 Feb 2025 15:34:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-Tunnel-Setup-with-NAT/m-p/242440#M47084 the_rock 2025-02-26T15:34:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-Tunnel-Setup-with-NAT/m-p/242442#M47086 <P>If your network is doing all of the traffic initiation / communication, a hide NAT works just fine. If the other side is trying to initiate traffic to that hide NAT, that is where you will run into issues.</P> <P>Your encryption domain will need to include all of the subnets you are hiding plus the NAT address.</P> <P>Enable NAT within the community.</P> Wed, 26 Feb 2025 16:05:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-Tunnel-Setup-with-NAT/m-p/242442#M47086 CaseyB 2025-02-26T16:05:00Z