- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hello, I used the Cluster object in the NAT rules but the traffic is only NATed to the primary Cluster IP and not to the outgoing Cluster IP. What did I do wrong here?
What version of code are you running on your SMS/MDS?
If you have a failover, things that rely on that rule will NOT work, as new active member would not be associated with it.
Andy
By default, all traffic from cluster member is translated to VIP of cluster and going over active member (from standby over sync interface to active member).
You can use "no-NAT" rules to force cluster members to use their physical IP instead of cluster VIP.
Thats actually really good idea, no-nat, agree.
Andy
Hey mate,
Did you end up figuring this out?
Best,
Andy
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 19 | |
| 17 | |
| 14 | |
| 8 | |
| 7 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY