topic Re: NAT Issue after R80.20 Upgrade in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-Issue-after-R80-20-Upgrade/m-p/12252#M804 <HTML><HEAD></HEAD><BODY><P>Have you opened a TAC case by chance?</P></BODY></HTML> Tue, 04 Dec 2018 06:20:43 GMT PhoneBoy 2018-12-04T06:20:43Z NAT Issue after R80.20 Upgrade https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-Issue-after-R80-20-Upgrade/m-p/12251#M803 <HTML><HEAD></HEAD><BODY><P>Hello Experts,</P><P></P><P>We upgraded to R80.20 on our manager and cluster. We have very weird behavior on incoming and outgoing trafic for a few NAT addresses. We are using manual NAT&nbsp;with some proxy arp entries configured in gaia.&nbsp;Some NAT are working but some are not working anymore.</P><P></P><P>What we see in fw monitor is i/I/o only and the NATed IP in "o" (secure xl disabled during capture). No logs in Smart Log fot this trafic. No logs in fw ctl zdebug drop. Output of fw ctl arp is "No proxy arp entries". The firewall does not reply to arp request, devices on the same segment do not have arp entries for this IP. Merge proxy arp is ticked in global properties.</P><P></P><P>Any idea is welcome. Thank you.</P></BODY></HTML> Mon, 03 Dec 2018 22:30:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-Issue-after-R80-20-Upgrade/m-p/12251#M803 Yuri_Malkov 2018-12-03T22:30:12Z Re: NAT Issue after R80.20 Upgrade https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-Issue-after-R80-20-Upgrade/m-p/12252#M804 <HTML><HEAD></HEAD><BODY><P>Have you opened a TAC case by chance?</P></BODY></HTML> Tue, 04 Dec 2018 06:20:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-Issue-after-R80-20-Upgrade/m-p/12252#M804 PhoneBoy 2018-12-04T06:20:43Z