topic Re: NAT pool on http/https proxy in Firewall and Security Management

NAT pool on http/https proxy

Daniel_Afech — Fri, 05 Oct 2018 15:49:30 GMT

Anyone ever configured a NAT pool for an internal network when the appliance is set to http/https proxy?

Re: NAT pool on http/https proxy

Vladimir — Fri, 05 Oct 2018 18:06:42 GMT

Can you explain the reason for NAT pool in this scenario?

If you are using proxy, you are connecting to the gateways from actual IPs and the gateways are responsible for initiating a second leg of communication.

The other actual need for NAT is if that same network is routed elsewhere and need be translated, including some VPN scenarios where you have to use the range specified by your peer.

In later cases, I do not see how proxy and NAT would interfere with each other.

Re: NAT pool on http/https proxy

Daniel_Afech — Fri, 05 Oct 2018 18:36:36 GMT

Using the gateways in a cluster setup as http/https proxy for all office 365 traffic. Because of the number of sessions each user generates, A NAT pool is needed to get around the port exhaustion issue with one NAT. It seems when you configure the NAT pool, the traffic still gets generated from the cluster external IP. I am assuming it is because how proxy works with using two connections. I am hoping there is a way around that with some custom configuration.

Re: NAT pool on http/https proxy

Vladimir — Fri, 05 Oct 2018 22:01:57 GMT

Interesting issue.

Can you tell me how many clients are you trying to proxy through the gateway?

Take a look at his and see if it can help you in any way:

Dynamic NAT port allocation feature

Re: NAT pool on http/https proxy

Daniel_Afech — Fri, 05 Oct 2018 23:00:16 GMT

Thanks for your response, Vladimir. I have about 36k users. The gateways are 15000 series. I will check the article attached and come back with comments. Thanks again.

Re: NAT pool on http/https proxy

Srv27gh — Fri, 28 Aug 2020 09:07:00 GMT

hey, did you managed to solve this ?