difference between NAT Pre Rules and Post Rules

[ismailsh]

Please can someone explain when to use Device Groups - Policies - NAT - Pre Rules vs Post Rules.  I cant seem to find any documentation on this.  

Thanks

[TomYoung · Accepted solution]

Hi @ismailsh ,

Pre-rules are ordered on the NGFW before local rules, and post-rules are ordered after local rules.  Although this doc references the security policy, Panorama pre- and post-rules function the same for all policies.  Check out the pic in the doc below:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CljVCAS

Beacon has free training, Managing Firewalls at Scale, that is an excellent online tutorial for Panorama.  It covers this and many other topics.

Thanks,

Tom

[ismailsh]

Thank you very much for the reply.  Really appreciate your help.