topic Re: Allow bi-directional NAT in General Topics

Allow bi-directional NAT

Fincher — Wed, 19 Jan 2022 11:34:24 GMT

Hi all!

How i can setting's "Allow bi-directional NAT" on the each Gateway?

Or i can setting "Allow bi-directional NAT" only in Global Properties?

Thanks for help!

Re: Allow bi-directional NAT

_Val_ — Wed, 19 Jan 2022 12:50:12 GMT

Global Properties only. Why?

Re: Allow bi-directional NAT

Fincher — Wed, 19 Jan 2022 13:03:49 GMT

Because we have CIS - CheckPoint firewall benchmark, and in this document we have this requirment:

Remediation:

Go to the following path and Configured the Allow bi-directional NAT.

SmartConsole -> Gateways & Servers -> select each Gateway -> NAT Network Address Translation -> Unchecked the Allow bi-directional NAT

I attach this file.

Requirment 3.18 Ensure Allow bi-directional NAT is enabled (Automated)

Re: Allow bi-directional NAT

_Val_ — Wed, 19 Jan 2022 13:06:35 GMT

The document says, bi-directional NAT should be enabled.

It is actually already enabled by default in Global Properties. So I am asking again, what exactly are you trying to achieve here? Check it is indeed the case? Or something else?

Re: Allow bi-directional NAT

Fincher — Wed, 19 Jan 2022 13:14:13 GMT

I'm trying to figure out how to properly set up bi-directional NAT. Because the remediation says to enable bi-directional NAT on each gateway. But this setting is not in the NAT settings on the gateways. It turns out the document gives false information?

Re: Allow bi-directional NAT

_Val_ — Wed, 19 Jan 2022 13:36:40 GMT

This is a third party guide, and yes, on the page 112 the remediation step for NAT is incorrect.

This is how it looks in SmartConsole:

So the Remediation Steps should be:

SmartConsole / Menu / Global Properties / NAT - Network Address Translation / bla-bla

Re: Allow bi-directional NAT

Fincher — Wed, 19 Jan 2022 13:38:36 GMT

Thanks a lot!