How to settings NAT and Application Override?

Reply
Highlighted
L2 Linker

How to settings NAT and Application Override?

Hi all.

 

How do I settings NAT and Application Override?

 

PC-A  :201.xx.xx.182

  |

Palo  :210.xx.xx.168

          :210.xx.xx.169 -> 192.168.1.10   and TcpTimeout 4000ms

          :192.168.1.1

  |

Server-A  :192.168.1.10

 

Set Policy is

  Allow From 201.xx.xx.182 To 210.xx.xx.169 HTTPS, and NAT To 192.168.1.10.

 

 OverRide is

   From 201.xx.xx.182 To 210.xx.xx.169 HTTPS?

   or

   From 201.xx.xx.182 To 192.168.1.10 HTTPS?

Which one?

 

Thank you.


Accepted Solutions
Highlighted
L7 Applicator

Re: How to settings NAT and Application Override?

Policies should be configured wit pre-nat IP, post-nat zone.

So From 201.xx.xx.182 To 210.xx.xx.169 HTTPS

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE, PCNSE, PCNSI

View solution in original post


All Replies
Highlighted
L4 Transporter

Re: How to settings NAT and Application Override?

Hi awawa100,

 

NAT takes place separately to App-ID (app override). You can find full details in the packet flow document here:

 

https://live.paloaltonetworks.com/t5/Learning-Articles/Packet-Flow-Sequence-in-PAN-OS/ta-p/56081

 

hope this helps,

Ben

Highlighted
L2 Linker

Re: How to settings NAT and Application Override?

Thank you Ben.

 

What do I chioce one?

Highlighted
L7 Applicator

Re: How to settings NAT and Application Override?

Policies should be configured wit pre-nat IP, post-nat zone.

So From 201.xx.xx.182 To 210.xx.xx.169 HTTPS

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE, PCNSE, PCNSI

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!