topic Re: destination nat from Mikrotik router to Palo ato in General Topics

destination nat from Mikrotik router to Palo ato

JALAL79 — Sat, 13 Jun 2020 10:23:40 GMT

hello

i am about to transfer from Mikrotik router to palo alto i have one issue i don't know how to do it in palo alto

i have some servers with privet IP address and ports (web-server and database server) and these servers need to be accessible from our public IP address so what i do in Mikrotik router just add destination NAT its contain the server IP and port to our public IP and port to be accessible from our clients

how can i do it in palo alto FW i will be so thankful if some one help me with configuration

Re: destination nat from Mikrotik router to Palo ato

GlennSJ — Sat, 13 Jun 2020 14:29:11 GMT

Take a look at this, destination nat example one address to many servers behind the firewall, of course each server must be on different port.

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/nat-configuration-examples/destination-nat-exampleone-to-many-mapping

Re: destination nat from Mikrotik router to Palo ato

MP18 — Sat, 13 Jun 2020 16:08:34 GMT

In palo Alto you need to create first NAT Rule with same destination and source zone and for destination translated port for you need to specify the port which server need to listen on.

for example user open url https://4.4.4.4 then if server is listening on port say 456 then under destination port translation you can put port 456 and also server private ip address.

Then security policy with your external zone as source and destination zone where server lives.

Destination IP will be the public IP.