topic Re: Dynamic NAT in General Topics

Dynamic NAT

GFN182 — Mon, 29 Jan 2018 16:21:46 GMT

We are moving NAT from the routers to the firewall (5050), the routers do not release the session's efficiently so we are constantly running out of IP's in the pool. Is there a rule of thumb for the number of IP's to sessions on a PAN 5050? We run at a consistant 250K sessions.

I understand the 64k connections per IP but I have been burned with the routers and want to make sure the firewall does it's job.

Re: Dynamic NAT

OtakarKlier — Mon, 29 Jan 2018 17:49:16 GMT

Hello,

I think this might be what you are looking for?

https://live.paloaltonetworks.com/t5/Management-Articles/PAT-Translations-per-NAT-Source-IP-on-a-PA-5000-Series-Firewall/ta-p/54843

Regards,

Re: Dynamic NAT

GFN182 — Tue, 06 Feb 2018 15:33:53 GMT

Was hoping for some real world experience.