https://live.paloaltonetworks.com/t5/general-topics/new-public-ip-block-nat/m-p/592332#M117904 <P>Hello,</P> <P>Is your NAT a bi-directional? Also check the security policies to make sure the traffic is allowed.</P> <P>&nbsp;</P> <P>Regards,</P> Wed, 17 Jul 2024 19:07:25 GMT OtakarKlier 2024-07-17T19:07:25Z https://live.paloaltonetworks.com/t5/general-topics/new-public-ip-block-nat/m-p/592258#M117891 <P>We have our PA connected to our ISP via /30's and they gave us a /28.&nbsp; We have a SilverPeak sdwan appliance behind the PA and are NAT'ing it's WAN interface from 10.5.1.2 to x.x.x.50.&nbsp; We can reach the SilverPeak on 443, but when we noticed it's not trying to establish underlay tunnels with the other SilverPeaks.&nbsp; I tried to manually configure an ipsec tunnel but even though I pointed the far end to x.x.x.50, the logs show it was trying to establish with our side of the /30.&nbsp; Any pointers would be greatly appreciated.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jasongorman_1-1721182677357.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60906iAAC301D00E044396/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="jasongorman_1-1721182677357.png" alt="jasongorman_1-1721182677357.png" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> Wed, 17 Jul 2024 02:18:26 GMT https://live.paloaltonetworks.com/t5/general-topics/new-public-ip-block-nat/m-p/592258#M117891 J.Gorman581418 2024-07-17T02:18:26Z https://live.paloaltonetworks.com/t5/general-topics/new-public-ip-block-nat/m-p/592332#M117904 <P>Hello,</P> <P>Is your NAT a bi-directional? Also check the security policies to make sure the traffic is allowed.</P> <P>&nbsp;</P> <P>Regards,</P> Wed, 17 Jul 2024 19:07:25 GMT https://live.paloaltonetworks.com/t5/general-topics/new-public-ip-block-nat/m-p/592332#M117904 OtakarKlier 2024-07-17T19:07:25Z