Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
hazyman
Explorer

dst NAT from inside

Good day!
We need to write a nat rule so that requests from the internal network to the external address and the port of the checkpoint are processed in the same way as requests from the outside when using dst nat

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

You have to basically do a dual NAT, translating both the source and destination.
A somewhat more complicated version of this problem is discussed here: https://community.checkpoint.com/t5/General-Topics/Natting-to-an-IP-range-not-directly-connected/m-p...
0 Kudos
FedericoMeiners
Advisor

I think that the following example will accomplish what you need:

NAT Example.png

Keep in mind that you may need to set up the proxy ARP for the public IP that you are using.

____________
https://www.linkedin.com/in/federicomeiners/
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events