topic Re: Show NAT tables in Firewall and Security Management

Show NAT tables

dmarkey — Fri, 16 May 2025 17:08:10 GMT

Hello folks,

I'm wondering if there's a way to display the HAT tables using the CLI. We've got several private IP spaces that NAT to a real world IP in our DMZ. I'm trying to find a way to list these so I can find out what private nets got to what real world IPs. We're running v81.20 on a VSX 2 node cluster.

Re: Show NAT tables

the_rock — Fri, 16 May 2025 17:16:57 GMT

See if below helps.

Andy

https://community.checkpoint.com/t5/API-CLI-Discussion/NAT-table-fwx-alloc-top-users/td-p/78543

Re: Show NAT tables

AaronCP — Fri, 16 May 2025 19:02:12 GMT

I've used this personally! Incredibly useful script.

Re: Show NAT tables

dmarkey — Fri, 16 May 2025 19:28:32 GMT

Now that looks interesting. I'll have to give it a try next week!

Thanks!

Re: Show NAT tables

PhoneBoy — Fri, 16 May 2025 21:50:08 GMT

Another way to potentially see how traffic will NAT is to use the fw up_execute command.
This command exists in previous versions, but does not provide any details about NAT until R82: https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CLI_ReferenceGuide/Content/Topics-CLIG/FWG/fw-up_execute.htm

Re: Show NAT tables

the_rock — Sat, 17 May 2025 01:05:03 GMT

Good to know!

Re: Show NAT tables

the_rock — Sat, 17 May 2025 01:05:22 GMT

Its real good script.