topic Re: Hide NAT on virtual IP - 1550 in Spark Firewall (SMB)

Hide NAT on virtual IP - 1550

petermatuska — Sat, 13 Jun 2020 07:59:34 GMT

Hi ,

I have a problem with PAT - Hide NAT on 1550, R80.20.02

I have couple of internal subnets /24 and a public /29 subnet on an outside interface. I have ticked Hide nat for outgoing traffic and all is fine. Internet works. The problem is when I want to hide one of the internal /24 subnet behind a public IP which is not configured on the interface but is within the public subnet.

I setup the NAT rule where original source is desired /24 subnet and translated source is specific public IP. Hide multiple sources... and Server as an arp proxy... are ticked. The problem is that returning traffic is not seen on FW. I see on a destination server that the ping arrives with correct public IP and the reply is sent back, but thats all.

Re: Hide NAT on virtual IP - 1550

PhoneBoy — Mon, 15 Jun 2020 04:02:05 GMT

Believe this might be a bug and should be worked with the TAC.

Re: Hide NAT on virtual IP - 1550

G_W_Albrecht — Mon, 15 Jun 2020 09:08:35 GMT

I would first update firmware to

R80.20.05 (992001174)

Re: Hide NAT on virtual IP - 1550

petermatuska — Mon, 15 Jun 2020 10:46:44 GMT

Hi,
I havent tried upgrade yet (fw is in production now), but
this helped: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk114531&partition=Advanced&product=Small

Once the R80.20.05 (992001174) is suggested version, I will upgrade it.
thank you

Re: Hide NAT on virtual IP - 1550

weimin — Sun, 09 May 2021 14:09:27 GMT

How about this problem ? I happened the same issue.