>
    Strata Copilot
    Add a NAT Stack
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN NAT Policies
    5. Configure NAT Policies
    6. Add a NAT Stack
    Download PDF
    Prisma SD-WAN

    Add a NAT Stack

    Table of Contents

    Add a NAT Stack

    Lets see the Add a NAT stack in Prisma SD-WAN.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    A NAT policy stack enables you to simplify policy operations by sequencing up to four NAT policy sets by priority. Administrators can now manage modular policy sets for specific use cases without affecting existing policies. You can create a simple NAT stack or an advanced NAT stack.
    A simple NAT stack has only one NAT policy set. The NAT policy set has the same name as the NAT Stack. You can add NAT Policy rules directly to Simple NAT Policy Set Stacks. This simplifies the management of NAT stacks if you do not need to leverage the stacking capabilities.
    An Advanced NAT stack can accommodate a maximum of four policy sets and one default rule policy set. The policy sets in a NAT stack are ordered from left to right, with the left-most policy set designated as the highest priority. A site will evaluate policy sets within a stack based on the order of the policy sets.
    • Add a simple NAT stack.
      1. Select ConfigurationPrisma SD-WANPoliciesNATNAT StacksSimpleAdd Stack.
      2. On the Add NAT Stack screen, enter a Name for the stack, and an optional description and tags.
      3. (Optional) Select the Make Default Path Stack check box to make this stack a default stack.
      4. (Optional) Select the Clone From Simple NAT Stack check box to clone a stack and select a stack to clone from the Choose a Simple NAT Stack drop-down.
      5. Save your changes.
    • Add an advanced NAT stack.
      1. Select ConfigurationPrisma SD-WANPoliciesNATNAT StacksAdvancedAdd Stack.
      2. On the newly added row in the Name column, click the ellipsis menu for the stack and select Edit Policy Set Stack Info.
      3. Enter a Name for the stack, and optionally enter description and tags and Save.

    Bind NAT Stacks to Sites

    In order for NAT policy rules to be active, bind NAT policy set stacks to a site. You can bind a single NAT policy set stack to a site at a time.
    1. Select ConfigurationPrisma SD-WANPoliciesStacked Bindings.
    2. Select a site and click Edit Selected.
    3. Select a NAT stack from the NAT Policy Set Stack drop-down and Save.
      (Optional) You can assign a NAT policy set stack to multiple sites at a time by selecting multiple sites, clicking Edit Selected and selecting the NAT stack for assigning to sites.

    © 2026 Palo Alto Networks, Inc. All rights reserved.