topic Re: U Turn NAT in Checkpoint in General Topics

U Turn NAT in Checkpoint

CSR — Fri, 11 Jun 2021 11:52:50 GMT

Hi All,

Just wanted to check if U-Turn NAT is possible in Checkpoint like in Palo Alto... One of our CP customer looking for this requirement.

Thanks,

CSR

_Val_ — Fri, 11 Jun 2021 12:43:57 GMT

If you mean accessing DMZ servers from internal networks via external IPs, then yes, of course it is possible to do.

CSR — Fri, 11 Jun 2021 12:48:14 GMT

Please share the steps or reference document.

CPRQ — Fri, 11 Jun 2021 12:51:25 GMT

See if this article can help.

Thanks

PhoneBoy — Fri, 11 Jun 2021 20:28:40 GMT

Not familiar with that exact term, but this is something Check Point has been able to do for quite a while.
See the answer I gave here: https://community.checkpoint.com/t5/Security-Gateways/Traffic-flow-in-between-C-to-S-via-Firewall-How/m-p/8466/highlight/true#M13082

skandshus — Sat, 12 Jun 2021 07:45:23 GMT

Isn’t that also referred to as hairpin nat?

CSR — Sat, 12 Jun 2021 08:46:15 GMT

Sure... let me check these steps...