How NAT Oversubscription works?

[Vikashh]

Hi experts,

I am trying to understand how NAT oversubscriptions works in Plao Alto. What will be its exact use case and how firewall behaves in default settings?

[rmfalconer · Accepted solution]

Oversubscription allows the same address and port combination to be used multiple times for NAT. The default settings are dependent on firewall model.

[SutareMayur · Accepted solution]

Agreed with @rmfalconer . NAT Superscription gives you more scalability when we have few public IP addresses. So this setting multiplies the sessions to 2, 4 or 8 times. Model wise default subscription rates are given in below link.

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/dynamic-ip-and-port-nat-ove...

Mayur

[Vikashh]

@rmfalconer @SutareMayur ,

Thank you guys, that makes sense to me.