- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Couple of question about destination NAT. Is destination also have hide nat as we can do many source hide behind with one host or dynamic natted to few hosts (pool).
Is the following example will work?
Example #1:
O-Src: 10.0.0.0/8
O-Dst: 10.0.1.0/24
T-Src: 10.0.2.1/32
T-Dst: 192.168.1.0/24
Example #2:
O-Src: 10.0.0.0/8
O-Dst: 10.0.1.1-254 (range)
T-Src: 10.0.2.1/32
T-Dst: 192.168.1-254 (range)
Example #3:
O-Src: 10.0.0.0/8
O-Dst: 10.0.1.0/24
T-Src: 10.0.2.1/32
T-Dst: 192.168.1.1 (hide)
Example #4:
O-Src: 10.0.0.0/8
O-Dst: 10.0.1.0/24
T-Src: 10.0.2.1/32
T-Dst: 192.168.1.1-4 (pool)
You can do many to fewer NAT on a source address.
For a destination, you can only do 1-1 NAT.
Which suggests example 1 and 2 will work, 3 and 4 will not.
You can try to configure this, but you’ll very likely receive an error when you push policy.
You can do many to fewer NAT on a source address.
For a destination, you can only do 1-1 NAT.
Which suggests example 1 and 2 will work, 3 and 4 will not.
You can try to configure this, but you’ll very likely receive an error when you push policy.
Thank you.
Great, thanks for testing.
No worries at all, if you have any other rules you want me to try, happy to do it.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY