Advanced Session Distribution Algorithms for Destination NAT

Create an address object.
Select
Objects
Addresses
and
Add
an address object by
Name
.
For
Type
, select one of the following and enter the required information:
IP Netmask
—Enter an IPv4 address, optionally followed by a slash and prefix length.
IP Range
—Enter two IPv4 addresses separated by a hyphen (-).
FQDN
—Enter the FQDN.
Click
OK
.
Configure destination NAT using a dynamic IP address.
On the
Translated Packet
tab, in the Destination Address Translation section, select
Dynamic IP (with session distribution)
as the
Translation Type
.
For
Translated Address
, select the address object you configured.
In case the dynamically-assigned, translated address results in more than one address, select the
Session Distribution Method
the firewall uses to distribute new NAT sessions among those addresses:
Round Robin
—(default) Assigns new sessions to IP addresses in rotating order. Unless you have a reason to change the distribution method, Round Robin distribution is likely suitable.
Source IP Hash
—Assigns new sessions based on hash of source IP address. If you have traffic coming from a single source IP address, then select a method
other than
Source IP Hash.
IP Modulo
—The firewall takes into consideration the source and destination IP address from the incoming packet; the firewall performs an XOR operation and a modulo operation; the result determines to which IP address the firewall assigns new sessions.
IP Hash
—Assigns new sessions based on hash of source and destination IP addresses.
Least Sessions
—Assigns new sessions to the IP address with the fewest concurrent sessions. If you have many short-lived sessions, Least Sessions will provide you with more balanced distribution of sessions.

Click
OK
.
Commit
your changes.