Force SG do NAT-T

[Rafael_Morato]

Hi CheckMates, 

  I'm Installed Security Gateway behind device which that Device do DNAT Public IP to Provita IP of Security Gateway. I'd like do Security Gateway forces to me Iniciate Nat-t. How can I do it on Check Point. 

Thanks, 

Morato

[PhoneBoy]

In releases prior to R80.10, you could only do this when:

• The gateway is configured as having a dynamic address
• Certificate authentication is used

However, this limitation was removed in R80.10 and it can be forced as described in the R80.10 VPN docs: Site to Site VPN R80.10 Administration Guide