https://community.checkpoint.com/t5/General-Topics/Is-it-possible-to-NAT-traffic-only-in-VPN-community/m-p/55279#M11047 <P>Customer builds Site-To-Site VPN between Check Point and 3rd party device. VPN domain of 3rd party device overlaps with a network from internal scope so we want to translate it. I saw an option "disable NAT inside VPN community" but I think we want an opposite option: make NAT rule work only if traffic is within VPN community. Is there such possibility?</P> Fri, 07 Jun 2019 13:37:54 GMT Serhii_Yaholnyt 2019-06-07T13:37:54Z https://community.checkpoint.com/t5/General-Topics/Is-it-possible-to-NAT-traffic-only-in-VPN-community/m-p/55279#M11047 <P>Customer builds Site-To-Site VPN between Check Point and 3rd party device. VPN domain of 3rd party device overlaps with a network from internal scope so we want to translate it. I saw an option "disable NAT inside VPN community" but I think we want an opposite option: make NAT rule work only if traffic is within VPN community. Is there such possibility?</P> Fri, 07 Jun 2019 13:37:54 GMT https://community.checkpoint.com/t5/General-Topics/Is-it-possible-to-NAT-traffic-only-in-VPN-community/m-p/55279#M11047 Serhii_Yaholnyt 2019-06-07T13:37:54Z https://community.checkpoint.com/t5/General-Topics/Is-it-possible-to-NAT-traffic-only-in-VPN-community/m-p/55284#M11050 <P>As long as "disable NAT in VPN Community" is unchecked, traffic entering or leaving a VPN tunnel is subject to the NAT policy just like any other traffic.&nbsp; To set up NAT for VPN traffic only you'll need to make sure the box is unchecked then set up a manual NAT rule at the top of the NAT policy.&nbsp; Be sure to set the Original Source and Original Destination Fields as tight and specific as possible to avoid catching unintended traffic in that NAT rule.</P> Fri, 07 Jun 2019 14:34:02 GMT https://community.checkpoint.com/t5/General-Topics/Is-it-possible-to-NAT-traffic-only-in-VPN-community/m-p/55284#M11050 Timothy_Hall 2019-06-07T14:34:02Z