Additional NAT rule 1

[m_bilal]

Please anyone can explain what is Additional NAT rule 1? 

theoretically.  I have enabled bi-directional NAT in Global Properties. 

Thank you.

[PhoneBoy]

Where exactly are you seeing this?
Please provide a screenshot.

[the_rock]

The log should point to the "link" to click on for it. As phoneboy asked, if you could provide a screenshot, it would help us.

Andy

[Timothy_Hall]

"Additional NAT Rule" appearing in a log card indicates that a second NAT rule was matched for the same connection.  This is only possible if "bi-directional NAT" is set in the NAT Global Properties (it is set by default), and one automatically-generated NAT rule matches the source IP address of the packet, and another automatically-generated NAT rule matches the destination IP address on the packet.  In this case both source IP and destination IP for the connection are NATted simultaneously.  Most common NAT operations only change either source or destination but not both; this condition is an exception to that and certainly possible.

Note that this can only happen for two automatically-generated rules; if a manual NAT rule is matched first, only that one NAT rule can be matched, and an additional NAT rule match is impossible.  It is also not possible to have an automatically-generated rule match one element of the packet (say source IP address) and a manual rule then match a destination IP address.  Only one manual NAT rule can be matched for a connection, period.

[the_rock]

To excellent explanation from @Timothy_Hall , below is also great reference for this.

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topi...