destination nat from Mikrotik router to Palo ato

Reply
Highlighted
L0 Member

destination nat from Mikrotik router to Palo ato

hello 

i am about to transfer from Mikrotik router to palo alto i have one issue i don't know how to do it in palo alto 

i have some servers with privet IP address and ports (web-server and database server) and these servers need to be accessible from our public IP address so what i do in Mikrotik router just add destination NAT its contain the server IP and port to our public IP and port to be accessible from our clients 

how can i do it in palo alto FW i will be so thankful if some one help  me with configuration 

Tags (1)
Highlighted
L1 Bithead

Take a look at this, destination nat example one address to many servers behind the firewall, of course each server must be on different port.

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/nat-configuration-examples/...

Highlighted
Cyber Elite

In palo Alto you need to create first NAT Rule with same destination and source  zone and for destination translated port  for you need to specify the port which server need to listen on.

 

for example user open url  https://4.4.4.4  then if server is listening on port say 456 then under destination port translation you can put port 456 and also server private ip address.

 

Then security policy with your external zone as source and destination zone where server lives.

Destination IP will be the public IP.

 

 

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!