MANUAL-NAT ON CHECKPOINT VIRTUAL GW

[siddu099]

Hi Team,

Hi Team,

We have configured the public IP segment 71.56.98.x/28 on the Check Point firewall WAN interface (eth1).

Our requirement is to perform manual NAT with port forwarding for one of our internal servers. We are using one available public IP from the above subnet and mapping it to the internal server 10.20.30.40, with the following requirement:

• External Port: 443
• Internal Destination: 10.20.30.40:8443

However, we are facing the following issue:

• When configuring Static NAT (manual NAT), the setup is not working
• When using Automatic NAT, it is working, but we are unable to perform port forwarding (443 → 8443)

Could you please help us understand:

1. Why manual NAT is not working in this scenario
2. The correct way to configure port forwarding using manual NAT in Check Point

Kindly assist with the correct configuration or any prerequisites we may be missing.

Thanks & Regards,
Siddu

[Lesley]

You have to configure a proxy arp for the public IP range in the GAIA config. 

https://support.checkpoint.com/results/sk/sk30197