https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/double-vs-single-nating-in-gcp-for-outbound-internet-gateway/m-p/293567#M685 <P>We're attempting to deploy a VM series in GCP to act as an outbound internet gateway. All documentation we've been able to find shows the Palos NATing the original source IP to another private IP in a 'public dmz' subnet. GCP will then NAT this new private IP to a public IP to traverse the internet.&nbsp;</P><P>&nbsp;</P><P>Has anyone had any success with a deployment where the Palos handle the single NAT of the original public IP to the new private IP? Seems like the private to private NATing the Palo does is unnecessary.&nbsp;</P> Mon, 21 Oct 2019 17:49:00 GMT mike.pochan 2019-10-21T17:49:00Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/double-vs-single-nating-in-gcp-for-outbound-internet-gateway/m-p/293567#M685 <P>We're attempting to deploy a VM series in GCP to act as an outbound internet gateway. All documentation we've been able to find shows the Palos NATing the original source IP to another private IP in a 'public dmz' subnet. GCP will then NAT this new private IP to a public IP to traverse the internet.&nbsp;</P><P>&nbsp;</P><P>Has anyone had any success with a deployment where the Palos handle the single NAT of the original public IP to the new private IP? Seems like the private to private NATing the Palo does is unnecessary.&nbsp;</P> Mon, 21 Oct 2019 17:49:00 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/double-vs-single-nating-in-gcp-for-outbound-internet-gateway/m-p/293567#M685 mike.pochan 2019-10-21T17:49:00Z