Inbound NAT with Port Redirection

[Ammar]

Dears,

I want to publish a web server to the internet over port 443 and direct the inbound traffic to the port 80 on the server. How that can be done in both PAN OS v7 and v8 ??

[reaper · Accepted solution]

simply create a NAT policy as you would normally, but add a pre-nat port to the 'original packet' column (port 443 already has 'service-https' preconfigured in the services) and then add a port to the 'translated packet' column which the server is listeing on (eg. 8443)

[Ammar]

@reaper it worked well. Thanks a lot.

i have another senario here, i have some internet users with specific public IPs, i need to direct them only to a spesific internal server.

in another world all who will access my site at 1.1.1.1 will go to 192.168.1.5 and for some specific public IPs they should go to 192.168.1.10

Is that applicable ??

[reaper]

ofcourse!

nat (all) policies are processed top to bottom and the rule that is hit first will apply

so if you set a policy first with the specific source IP addresses in the 'original packet', you can change the NAT translation for those sources, then set the 'any' policy below that for everyone else