https://live.paloaltonetworks.com/t5/next-generation-firewall/how-dnat-is-working-is-dnat-configuration-wrong/m-p/513892#M353 <P>Hello world !</P> <P>&nbsp;</P> <P>In my new company I saw a DNAT policy which is completely different from what I have learned yet. Can anyone help me with that. Below I am giving an example.</P> <P>To make it simple suppose we have three zone INSIDE, OUTSIDE AND DMZ</P> <P>To make destination NAT policy we have to define source zone and destination zone.</P> <P>As far as I know my source zone should be outside and also destination zone will be outside.</P> <P>But in my company DNAT its source zone is outside but destination zone is DMZ for only some policy, and the DNAT is working fine.</P> <P>Also some other DNAT both source and destination zone are outside which is I think right, so I want to know in which case we select our destination is other than outside zone</P> <P>Please find the attached documents.</P> <P><BR /><BR />Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.</P><BR /><BR />Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended. Sat, 03 Sep 2022 03:48:11 GMT faraz.hasan 2022-09-03T03:48:11Z https://live.paloaltonetworks.com/t5/next-generation-firewall/how-dnat-is-working-is-dnat-configuration-wrong/m-p/513892#M353 <P>Hello world !</P> <P>&nbsp;</P> <P>In my new company I saw a DNAT policy which is completely different from what I have learned yet. Can anyone help me with that. Below I am giving an example.</P> <P>To make it simple suppose we have three zone INSIDE, OUTSIDE AND DMZ</P> <P>To make destination NAT policy we have to define source zone and destination zone.</P> <P>As far as I know my source zone should be outside and also destination zone will be outside.</P> <P>But in my company DNAT its source zone is outside but destination zone is DMZ for only some policy, and the DNAT is working fine.</P> <P>Also some other DNAT both source and destination zone are outside which is I think right, so I want to know in which case we select our destination is other than outside zone</P> <P>Please find the attached documents.</P> <P><BR /><BR />Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.</P><BR /><BR />Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended. Sat, 03 Sep 2022 03:48:11 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/how-dnat-is-working-is-dnat-configuration-wrong/m-p/513892#M353 faraz.hasan 2022-09-03T03:48:11Z