>
    Strata Copilot
    Configure NAT Policies
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN NAT Policies
    4. Configure NAT Policies
    Download PDF
    Prisma SD-WAN

    Configure NAT Policies

    Table of Contents

    Configure NAT Policies

    Learn how to configure NAT policies.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Prisma SD-WAN license
    Before configuring a NAT policy, you must ensure the key prerequisites are set. These include defining NAT Prefixes, which specify the source and/or destination IP address ranges (either global or local) for translation; configuring NAT Zones, which are tied to specific devices and interfaces to identify the source or destination network areas; and creating NAT Pools, which are the pools of IP addresses linked to devices and interfaces that the rules will use for address translation.
    After these prerequisites are set, proceed to create the NAT configuration components in the following order:
    1. NAT Policy Rule: Each NAT policy set requires a minimum of one NAT policy rule. A rule may include any or all of the following elements:
      1. Match Criteria: This determines when the rule is applied and includes NAT prefixes and NAT zones.
      2. Actions: This defines the NAT pool to be used for address translation.
    2. NAT Policy Sets: Group your NAT policy rules into policy sets. A NAT policy stack must be associated with at least one policy set. An advanced NAT policy stack may be associated with up to four policy sets.
    3. NAT Policy Stacks: Finally, create the NAT policy stack itself. This can be either a simple NAT stack with a single policy set or an advanced NAT stack that can accommodate up to four policy sets plus a default rule policy set.
    Refer to the NAT Policy NAT Topologies Use Cases to understand various NAT capabilities and to address common scenarios.

    Related CLIs

    © 2025 Palo Alto Networks, Inc. All rights reserved.