topic Re: Best practice when uploads CP configuration in Expedition in Expedition Discussions

Best practice when uploads CP configuration in Expedition

Apadilla — Wed, 04 Jan 2023 20:33:13 GMT

Hi,

I need to migrate from CP 80.40 to PANOS 10.1.8.

Generally, Checkpoint NAT behaves the same way as NAT in PAN-OS.

For this reason, my question, it is a best practice when we uploaded the CP config to expedition enable this option?

Option A: do not modify Destination Address in NAT related security policies

lychiang — Wed, 04 Jan 2023 20:43:10 GMT

@Apadilla Best practice is to not check the box , and let Expedition auto correct the destination of the security policies based on the NAT policies

Apadilla — Wed, 04 Jan 2023 20:46:00 GMT

Perfect!!!. So is better do not enable that option, when uploaded the CP config. Thanks for the claritication.