Best practice when uploads CP configuration in Expedition

[Apadilla]

Hi, 

I need to migrate from CP 80.40 to PANOS 10.1.8. 

Generally, Checkpoint NAT behaves the same way as NAT in PAN-OS. 

For this reason, my question, it is a best practice when we uploaded the CP config to expedition enable this option?

 

Option A:  do not modify Destination Address in NAT related security policies

[lychiang · Accepted solution]

@Apadilla Best practice is to not check the box , and let Expedition auto correct the destination of the security policies based on the NAT policies 

[Apadilla]

Perfect!!!. So is better do not enable that option, when uploaded the CP config. Thanks for the claritication.