NAT Original Packet Tab
- Policies > NAT > Original Packet
Select the Original Packet tab to define the source and destination zones of packets that the firewall will translate and, optionally, specify the destination interface and type of service. You can configure multiple source and destination zones of the same type and you can apply the rule to specific networks or specific IP addresses.
NAT Rule - Original Packet Settings
Source Zone / Destination Zone
Select one or more source and destination zones for the original (non-NAT) packet (default is Any). Zones must be of the same type (Layer 2, Layer 3, or virtual wire). To define new zones, refer to Network > Zones.
You can specify multiple zones to simplify management. For example, you can configure settings so that multiple internal NAT addresses are directed to the same external IP address.
Specify the destination interface of packets the firewall translates. You can use the destination interface to translate IP addresses differently in the case where the network is connected to two ISPs with different IP address pools.
Specify the service for which the firewall translates the source or destination address. To define a new service group, select Objects > Service Groups.
Source Address / Destination Address
Specify a combination of source and destination addresses for the firewall to translate.
For NPTv6, the prefixes configured for Source Address and Destination Address must be in the format xxxx:xxxx::/yy. The address cannot have an interface identifier (host) portion defined. The range of supported prefix lengths is /32 to /64.
Policies > NAT
Policies > NAT If you define Layer 3 interfaces on the firewall, you can configure a Network Address Translation (NAT) policy to specify whether source ...
Destination NAT Destination NAT is performed on incoming packets when the firewall translates a destination address to a different destination address; for example, it translates ...
NAT Translated Packet Tab
NAT Translated Packet Tab Policy > NAT > Translated Packet For Source Address Translation, select the Translated Packet tab to determine the type of translation ...
Configure Destination NAT with DNS Rewrite
Create a destination NAT policy rule for static translation that also rewrites the IPv4 address in a DNS response based on the original or translated ...
Create an NPTv6 Policy
Create an NPTv6 Policy Perform this task when you want to configure a NAT NPTv6 policy to translate one IPv6 prefix to another IPv6 prefix. ...
NAT Policy Overview
NAT Policy Overview You configure a NAT rule to match a packet’s source zone and destination zone, at a minimum. In addition to zones, you ...
DNS Rewrite for Destination NAT
Create a destination NAT policy rule for static translation that also rewrites the IPv4 address in a DNS response based on the NAT rule. ...
Configure NAT64 for IPv4-Initiated Communication with Port ...
Configure NAT64 for IPv4-Initiated Communication with Port Translation This task builds on the task to Configure NAT64 for IPv4-Initiated Communication , but the organization controlling ...
Configure NAT64 for IPv6-Initiated Communication
Configure NAT64 for IPv6-Initiated Communication This configuration task and its addresses correspond to the figures in IPv6-Initiated Communication . Enable IPv6 to operate on the ...