https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-routing-and-hidenat-from-fw-public-ip/m-p/1237528#M125089 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bil.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/69155i5559EEB837627C87/image-size/large?v=v2&amp;px=999" role="button" title="bil.png" alt="bil.png" /></span></P> Tue, 09 Sep 2025 06:48:28 GMT Renerolsted 2025-09-09T06:48:28Z https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-routing-and-hidenat-from-fw-public-ip/m-p/1237526#M125088 <P>I am a beginner on the Palo Alto firewall. When to do IPSEC and NAT&nbsp;<span class="lia-unicode-emoji" title=":smiling_face_with_smiling_eyes:">😊</span></P> <P>&nbsp;</P> <P>I need to create a NAT rule that will allow traffic from 77.221.253.132 - the partner only has 1 public IP address and it is on their firewall.<BR />If I make a route to the public IP address(77.221.253.132) and route to the Tunnel interface - the IPSEC tunnel go down.<BR /><BR />how should I make a route on the BlueFW and how should I make the nat rule? 195.189.232.57 -&gt; 10.1.1.20</P> <P>Thank you in advance.</P> <P>&nbsp;</P> Tue, 09 Sep 2025 06:47:07 GMT https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-routing-and-hidenat-from-fw-public-ip/m-p/1237526#M125088 Renerolsted 2025-09-09T06:47:07Z https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-routing-and-hidenat-from-fw-public-ip/m-p/1237528#M125089 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bil.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/69155i5559EEB837627C87/image-size/large?v=v2&amp;px=999" role="button" title="bil.png" alt="bil.png" /></span></P> Tue, 09 Sep 2025 06:48:28 GMT https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-routing-and-hidenat-from-fw-public-ip/m-p/1237528#M125089 Renerolsted 2025-09-09T06:48:28Z