Source / Destination NAT question

Gladstone — Thu, 25 Feb 2021 21:05:58 GMT

Have a case where i want to re-write the source-IP and destination-port on traffic heading to the internet.

So coming in from the private network as 10.1.1.1 -> 2.2.2.2:4000 and changing as it leaves to the internet to 3.3.3.3 -> 2.2.2.2:443. The part i'm struggling with is preserving the original destination IP.

For the NAT policy rule, on the translated packet under Destination Address Translation, I cannot find an option to use the original destination address. It requires that I specify a translated Address.

Is it possible to just preserve the original or am i missing something.

Re: Source / Destination NAT question

OtakarKlier — Wed, 10 Mar 2021 22:51:19 GMT

Hello,

Not sure why you would want this? But it could present asymetrical routing and cause the application/traffic to not work correctly.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllzCAC

Regards,

topic Source / Destination NAT question in VM-Series in the Public Cloud

Source / Destination NAT question

Re: Source / Destination NAT question