Inbound NAT - Please advise

sunny_gill — Wed, 29 Aug 2012 13:44:51 GMT

Hi,

Consider the following:

All traffic (0.0.0.0/0) is NAT'd as 1.1.1.1 (public)

The exchange server has an inbound NAT of 1.1.1.2 (public) > 192.168.1.1 (private).

Now when the exchange server makes a connection to the outside world will it be seen as 1.1.1.1 or 1.1.1.2?

If it is 1.1.1.1, then I must make a reverse NAT rule for all my inbound VIPs to that they respond to INBOUND VIP and are seen as INBOUND VIP.

Please advise.

Re: Inbound NAT - Please advise

sdurga — Wed, 29 Aug 2012 16:52:27 GMT

Sunny,

You can configure STATIC Bidirectional rule for your exchange server so that it cares of both the inbound / outbound connections related to the server. In that case the server would use 1.1.1.1 for outgoing connections. Then below this rule you would place a rule for your internet traffic.

Here is a good doc

https://live.paloaltonetworks.com/docs/DOC-1517

topic Re: Inbound NAT - Please advise in General Topics

Inbound NAT - Please advise

Re: Inbound NAT - Please advise