https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259254#M50851 <P>Emma has provided the correct solution.</P> <P>In case your interested in further background sk159572 provides a bit of a history lesson / alternate workarounds regarding NAT config.</P> Tue, 07 Oct 2025 11:19:33 GMT Chris_Atkinson 2025-10-07T11:19:33Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259205#M50841 <P><!-- StartFragment --></P><P><STRONG>Hide NAT Failure – Need Advice</STRONG></P><P>Client is getting <STRONG>Hide NAT failure</STRONG> errors in ElasticXL setup. CPview shows only <STRONG>1,785 available ports</STRONG> for hide NAT, which is way too low. Normally, we expect around <STRONG>50,000 ports per hide IP</STRONG> to avoid session drops.<BR /><BR /></P><P>Has anyone encountered this issue in ElasticXL?</P><P>&nbsp;</P><DIV class="">&nbsp;</DIV><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image (4).png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/31631i98A4AC28470BD395/image-size/medium?v=v2&amp;px=400" role="button" title="image (4).png" alt="image (4).png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image (3).png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/31630iDDF441B97D455F7E/image-size/medium?v=v2&amp;px=400" role="button" title="image (3).png" alt="image (3).png" /></span></P><P><!-- EndFragment --></P> Tue, 07 Oct 2025 09:39:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259205#M50841 DominusRex23 2025-10-07T09:39:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259213#M50849 <P>This is a known issue, see:&nbsp;</P> <P><A href="https://support.checkpoint.com/results/sk/sk183481" target="_blank">https://support.checkpoint.com/results/sk/sk183481</A></P> <P>The patch is slated to be in the next JHF release (it's in the list of upcoming fixes in the JHF page) but TAC can supply it immediately if you raise a case and cite that SK.</P> Tue, 07 Oct 2025 10:21:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259213#M50849 emmap 2025-10-07T10:21:11Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259254#M50851 <P>Emma has provided the correct solution.</P> <P>In case your interested in further background sk159572 provides a bit of a history lesson / alternate workarounds regarding NAT config.</P> Tue, 07 Oct 2025 11:19:33 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259254#M50851 Chris_Atkinson 2025-10-07T11:19:33Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259303#M50859 <P>Since it is a known issue, maybe check if below is set to 1, if not, just set it and see if any luck.</P> <P>Andy</P> <P><SPAN><!--ScriptorStartFragment-->fw ctl get int fwx_gnat_enabled<!--ScriptorEndFragment--></SPAN></P> Tue, 07 Oct 2025 17:48:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-HIDE-FAILURE/m-p/259303#M50859 the_rock 2025-10-07T17:48:12Z