>
    Strata Copilot
    Add a NAT Policy Rule
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN NAT Policies
    5. Configure NAT Policies
    6. Add a NAT Policy Rule
    Download PDF
    Prisma SD-WAN

    Add a NAT Policy Rule

    Table of Contents

    Add a NAT Policy Rule

    Let us learn how to add a NAT policy rule.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    NAT Policy Rules use source and destination zones, prefixes, ports and protocols. You can directly add policy rules to a simple NAT stack by clicking a simple NAT stack and then clicking Add Rule. For advanced stacks, you have to first select a stack, then a policy set within the stack, and then add policy rules to the policy set.
    • Add a NAT policy rule to a simple NAT stack.
      1. Select ConfigurationPrisma SD-WANPoliciesNATNAT Stacks, select a stack and click Add Rule.
      2. Add a source or destination NAT zone.
        • Enter a Name for the NAT policy rule, and enter an optional description and tags.
        • Choose Source or Destination Zone based on the direction of traffic with respective to the ION device. Accordingly the policy rule will be classified under Source Zone Rules or Destination Zone Rules.
        • Select a previously configured NAT zone from the NAT Zone drop-down.
          You can create a new NAT zone by clicking + next to the NAT Zone field.
        • Select an order between 1-4 for the policy rule.
          An order of 1 indicates the highest priority for the policy rule.
        • (Optional) Select Disable Rule if you do want the ION device to disregard this rule.
      3. Configure filters.
        • (Optional) On the Match Criteria screen, select a Protocol from the drop-down list or enter a number between 1 and 255 for a protocol.
        • (Optional) For Source and Destination prefixes, choose prefixes from the Prefixes drop-down list.
        • (Optional) Enter a start and end port for Port Ranges. Click Add Port Range to add additional ports if needed.
          Note that a maximum of 16 port ranges are allowed, and port ranges can only be added for TCP or UDP protocols.
      4. Configure NAT actions.
        On the Actions tab, you can configure a maximum of four actions and you can select a NAT Pool per action for every policy rule. Select any of the following NAT actions.
        • No NAT—Select if you do not wish to perform a NAT action on the selected filters. When you specify No NAT for a policy rule, you cannot specify any of the other NAT actions in that NAT policy rule.
        • Source NAT
        • Destination NAT
        • Static Source NAT
        • Static Destination NAT
        • ALG Disable
    • Add a NAT policy rule to an advanced NAT policy set.
      1. Select ConfigurationPrisma SD-WANPoliciesNATNAT StacksAdvancedNAT Sets, select a policy set and click Add Rule.
      2. Add NAT zones.
      3. Configure filters.
      4. Configure NAT actions.

    © 2026 Palo Alto Networks, Inc. All rights reserved.