How to settings NAT and Application Override?

[awawa100]

Hi all.

How do I settings NAT and Application Override?

PC-A  :201.xx.xx.182

  |

Palo  :210.xx.xx.168

          :210.xx.xx.169 -> 192.168.1.10   and TcpTimeout 4000ms

          :192.168.1.1

  |

Server-A  :192.168.1.10

Set Policy is

  Allow From 201.xx.xx.182 To 210.xx.xx.169 HTTPS, and NAT To 192.168.1.10.

 OverRide is

   From 201.xx.xx.182 To 210.xx.xx.169 HTTPS?

   or

   From 201.xx.xx.182 To 192.168.1.10 HTTPS?

Which one?

Thank you.

[bmorris1]

Hi awawa100,

NAT takes place separately to App-ID (app override). You can find full details in the packet flow document here:

https://live.paloaltonetworks.com/t5/Learning-Articles/Packet-Flow-Sequence-in-PAN-OS/ta-p/56081

hope this helps,

Ben

[awawa100]

Thank you Ben.

What do I chioce one?

[Raido_Rattameister · Accepted solution]

Policies should be configured wit pre-nat IP, post-nat zone.

So From 201.xx.xx.182 To 210.xx.xx.169 HTTPS