topic Re: Inbound NAT with Port Redirection in General Topics

Inbound NAT with Port Redirection

Ammar — Mon, 10 Jul 2017 12:44:28 GMT

Dears,

I want to publish a web server to the internet over port 443 and direct the inbound traffic to the port 80 on the server. How that can be done in both PAN OS v7 and v8 ??

Re: Inbound NAT with Port Redirection

reaper — Mon, 10 Jul 2017 12:57:22 GMT

simply create a NAT policy as you would normally, but add a pre-nat port to the 'original packet' column (port 443 already has 'service-https' preconfigured in the services) and then add a port to the 'translated packet' column which the server is listeing on (eg. 8443)

Re: Inbound NAT with Port Redirection

Ammar — Mon, 10 Jul 2017 13:52:22 GMT

@reaper it worked well. Thanks a lot.

i have another senario here, i have some internet users with specific public IPs, i need to direct them only to a spesific internal server.

in another world all who will access my site at 1.1.1.1 will go to 192.168.1.5 and for some specific public IPs they should go to 192.168.1.10

Is that applicable ??

Re: Inbound NAT with Port Redirection

reaper — Mon, 10 Jul 2017 14:23:33 GMT

ofcourse!

nat (all) policies are processed top to bottom and the rule that is hit first will apply

so if you set a policy first with the specific source IP addresses in the 'original packet', you can change the NAT translation for those sources, then set the 'any' policy below that for everyone else