Allow bi-directional NAT

[Fincher]

Hi all!

How i can setting's "Allow bi-directional NAT" on the each Gateway?

Or i can setting "Allow bi-directional NAT" only in Global Properties?

Thanks for help!

[_Val_]

Global Properties only. Why?

[Fincher]

Because we have CIS - CheckPoint firewall benchmark, and in this document we have this requirment:

Remediation:

Go to the following path and Configured the Allow bi-directional NAT.

SmartConsole -> Gateways & Servers -> select each Gateway -> NAT Network Address Translation -> Unchecked the Allow bi-directional NAT

I attach this file.

Requirment 3.18 Ensure Allow bi-directional NAT is enabled (Automated)

[_Val_]

The document says, bi-directional NAT should be enabled.

It is actually already enabled by default in Global Properties. So I am asking again, what exactly are you trying to achieve here? Check it is indeed the case? Or something else?

[Fincher]

I'm trying to figure out how to properly set up bi-directional NAT. Because the remediation says to enable bi-directional NAT on each gateway. But this setting is not in the NAT settings on the gateways. It turns out the document gives false information?

[_Val_ · Accepted solution]

This is a third party guide, and yes, on the page 112 the remediation step for NAT is incorrect. 

This is how it looks in SmartConsole: 

So the Remediation Steps should be:

SmartConsole / Menu / Global Properties / NAT - Network Address Translation / bla-bla

[Fincher]

Thanks a lot!