Show NAT tables

[dmarkey]

Hello folks,

  I'm wondering if there's a way to display the HAT tables using the CLI.  We've got several private IP spaces that NAT to a real world IP in our DMZ.  I'm trying to find a way to list these so I can find out what private nets got to what real world IPs.  We're running v81.20 on a VSX 2 node cluster.

[the_rock · Accepted solution]

See if below helps.

Andy

https://community.checkpoint.com/t5/API-CLI-Discussion/NAT-table-fwx-alloc-top-users/td-p/78543

[AaronCP]

I've used this personally! Incredibly useful script.

[dmarkey]

Now that looks interesting.  I'll have to give it a try next week!

Thanks!

[the_rock]

Its real good script.

[PhoneBoy]

Another way to potentially see how traffic will NAT is to use the fw up_execute command.
This command exists in previous versions, but does not provide any details about NAT until R82: https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_CLI_ReferenceGuide/Content/Topics-... 

[the_rock]

Good to know!