NAT mapping public to private IP

BenjaminRaimondi — Tue, 16 Apr 2024 15:16:20 GMT

Hello all,

I have been updating our NAT policies within our PA-3220 to specify traffic translation mapping from our public addresses to private addresses. After committing the changes the traffic has only been routing to the catch all NAT rule at the bottom of our NAT policies. I am concerned that I did not configure everything correctly after following Palo's guide and would like any suggestions to correct the traffic.

The current NAT configurations look like this (image attached below):

Any help would be appreciated. Thank you!

Re: NAT mapping public to private IP

JayGolf — Tue, 16 Apr 2024 16:24:38 GMT

Hi @BenjaminRaimondi ,

Please change your destination zone to untrusted as well. In your security policy, the destination zone will be the true source zone. Here is a very helpful article written by @reaper on NATs. https://live.paloaltonetworks.com/t5/community-blogs/i-m-gonna-make-him-a-nat-rule-he-can-t-refuse/ba-p/148940

topic NAT mapping public to private IP in General Topics

NAT mapping public to private IP

Re: NAT mapping public to private IP