Help required to convert Cisco ASA NAT rule onto Palo Alto

[kalyanram.piratla]

Hi Guys,

I am not expert in reading or understanding the Cisco ASA NAT rules and I have just started to feel comfortable with Palo Alto except for NAT rules.  Can someone please guide me through on how to go around configuring the following Cisco ASA NAT rule onto the Palo Alto?

I have just taken a couple of rules to convert.  Based on this, I would get the rest done on my own.

Following are the CISCO ASA NAT RULEs:

Rule 1 # access-list inside_nat0_outbound extended permit ip 10.1.2.0 255.255.255.0 10.1.250.128 255.255.255.128

Rule 2 # access-list inside_nat0_outbound extended permit ip EH_Staff_Network 255.255.255.0 10.1.250.128 255.255.255.128

I know the exact rule cannot be expalined, but an overview on how to re-configure the above rules will be very helpful.

Many Thanks in Advance.

Regards,

Kal

[kalyanram.piratla]

Prince,

I will be doing it again during this week.  Hopefully it goes well. 

[jseals]

Hello,

We have a very good article that goes over the different types of NAT in detail with screenshots of what the security policy and the NAT policy should look like for each:

If you still have trouble, you could contact your SE or support.

Thanks,

Jason