topic Monitor NAT Traffic? in General Topics https://live.paloaltonetworks.com/t5/general-topics/monitor-nat-traffic/m-p/11335#M8339 <HTML><HEAD></HEAD><BODY><P>Can anyone think of a method to monitor the NAT Translation?&nbsp; The back story is this... We have remote access points that point to a public IP address and then get NAT over to the private address of the wireless controllers.&nbsp; When we migrated to the PA, we spent a few hours trying to figure out why the remote APs weren't able to communicate with the controller.&nbsp; We eventually found the problem, which was that the external IP was part of the internal space in the Virtual Router.&nbsp; </P><P></P><P>The bottom line was that after we figured this out, we were trying to see if there was a way to easily monitor the NAT traffic without having to look at each half separately.&nbsp; It would have been helpful to see the "U-Turn"-like behavior while we were troubleshooting it.&nbsp; </P><P></P><P>Any thoughts/suggestions would be appreciated.&nbsp; Thanks!</P><P></P><P>-- Will </P></BODY></HTML> Tue, 12 Jun 2012 18:38:54 GMT mcw015 2012-06-12T18:38:54Z Monitor NAT Traffic? https://live.paloaltonetworks.com/t5/general-topics/monitor-nat-traffic/m-p/11335#M8339 <HTML><HEAD></HEAD><BODY><P>Can anyone think of a method to monitor the NAT Translation?&nbsp; The back story is this... We have remote access points that point to a public IP address and then get NAT over to the private address of the wireless controllers.&nbsp; When we migrated to the PA, we spent a few hours trying to figure out why the remote APs weren't able to communicate with the controller.&nbsp; We eventually found the problem, which was that the external IP was part of the internal space in the Virtual Router.&nbsp; </P><P></P><P>The bottom line was that after we figured this out, we were trying to see if there was a way to easily monitor the NAT traffic without having to look at each half separately.&nbsp; It would have been helpful to see the "U-Turn"-like behavior while we were troubleshooting it.&nbsp; </P><P></P><P>Any thoughts/suggestions would be appreciated.&nbsp; Thanks!</P><P></P><P>-- Will </P></BODY></HTML> Tue, 12 Jun 2012 18:38:54 GMT https://live.paloaltonetworks.com/t5/general-topics/monitor-nat-traffic/m-p/11335#M8339 mcw015 2012-06-12T18:38:54Z Re: Monitor NAT Traffic? https://live.paloaltonetworks.com/t5/general-topics/monitor-nat-traffic/m-p/11336#M8340 <HTML><HEAD></HEAD><BODY><P>Best Bet would be to include Columns such as NAT&nbsp; Source IP,NAT Destination IP and for NATed ports as well in the GUI Traffic Logs (Monitor&gt;Logs&gt;Traffic)&nbsp; to have a bird's eye view.</P><P>If you need detailed view click the "Magnifying Glass"" icon at start of the log.</P><P></P><P>Refer: <A class="active_link" href="https://live.paloaltonetworks.com/docs/DOC-2799">https://live.paloaltonetworks.com/docs/DOC-2799</A></P><P></P><P></P><P>Regards,</P><P>Ameya</P></BODY></HTML> Tue, 12 Jun 2012 21:12:10 GMT https://live.paloaltonetworks.com/t5/general-topics/monitor-nat-traffic/m-p/11336#M8340 UhMayYeah 2012-06-12T21:12:10Z