NAT Question

[Gongya_Yu]

My Checkpoint Gateway has  two internal interfaces. What I need is that all the traffic coming from interface 1 is not natted, but all the traffic coming from interface 2 will be natted.

Can I do this ?

thanks !!

[PhoneBoy]

Is it possible? Yes.
You will have to create the relevant manual NAT rules either in terms of IP addresses or (R81+) zones. 

[the_rock]

I think your best bet is something like this..."tie" interface needed for nat to say whatever zone appropriate and then use that zone in relevant nat rule, pretty much what @PhoneBoy said. Verify policy, install, test. If it works, great, if not, go back and check the logs to see why it fails.

Andy

[Gongya_Yu]

Any ideas ?   not tolerate the version, I guess.

thanks !!

[Vincent_Bacher]

How does NAT rule 5 look like? Screenshot?

[the_rock]

It has zero to do with the version, but everything to do with source translation object, thats exactly what it says in the error you get. Can you please send a screenshot of the ads-nat-pool you are using?

Andy

[Chris_Atkinson]

Zones are supported in the NAT policy only from R81 and higher (sk128572).

[Gongya_Yu · Accepted solution]

After I used 81.20, the policy passed. I am to test now.

thanks to all!

[the_rock]

Good job!