Using external zone in DNAT policy

Bouthaina — Wed, 05 Feb 2025 09:30:05 GMT

Hi Team,

We have 2 VSYS configured to communicate.

VSYS 1 has 172.25.80.254 zone L3 : DC

VSYS 2 has 172.25.70.254 zone L3 : DMZ

I added two external zone (DC to DMZ) and (DMZ to DC) to allow communication between vsys and also the routing between VR of both Vsys.

In DC , i have DNAT policy allowing a load balancing to 2 SRV located in zone L3 : DC. i need to allow zone source from vsys 2 in the DNAT policy, how to deal with it ? that works or no ?

Thank you.🤔

Re: Using external zone in DNAT policy

reaper — Thu, 06 Feb 2025 10:09:17 GMT

you can just add the external zone (DMZtoDC) in the NAT rules as a source

topic Using external zone in DNAT policy in Next-Generation Firewall Discussions

Using external zone in DNAT policy

Re: Using external zone in DNAT policy