topic Re: PAN release 4.0 and NAT feature in General Topics

PAN release 4.0 and NAT feature

bdaussin — Thu, 17 Mar 2011 05:20:46 GMT

Hi all,

With this new release, is it possible to define destination NAT rules based on source region criteria ? for example : ASIA => NAT1, Europe => NAT 2 and so on....

Thanks a lot.

Re: PAN release 4.0 and NAT feature

jpa — Thu, 17 Mar 2011 21:51:40 GMT

No. region based objects cannot be used in NAT rules.

-jerish

Re: PAN release 4.0 and NAT feature

bdaussin — Fri, 18 Mar 2011 08:20:02 GMT

Hi,

Thanks for your answer even if it's the the one I expect.

Could you explain why this object cannot be used ?

Can we use region objects within Policy based Forwarding rules ?

Is it something that can be asked as a feature request ?

Thanks,

Re: PAN release 4.0 and NAT feature

reaper — Fri, 18 Mar 2011 12:00:22 GMT

The region is available as an option when specifying source and destination for security policies, decryption policies, and DoS policies. If you would like to see region based objects in different policies you can contact your SE to have him open a feature request.

Re: PAN release 4.0 and NAT feature

bdaussin — Fri, 18 Mar 2011 13:06:37 GMT

Ok, I'll do that.

This feature would enable customer to design some global access ( through multiple DMZ ) without having to use some DNS stuff...

Thanks for your quick reply.