For details on cookie usage on our site, read our Privacy Policy
is port forwarding is possible with 1 to many NAT,.?
- LIVEcommunity
- Discussions
- General Topics
- is port forwarding is possible with 1 to many NAT,.?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
- Mark as New
- Subscribe to RSS Feed
- Permalink
10-26-2012 12:16 AM
Hi All,.
is port forwarding is possible with 1 to many NAT,.? if yes,.how to configure? please help me,..
Regards,
Guru
Accepted Solutions
- Mark as New
- Subscribe to RSS Feed
- Permalink
10-29-2012 09:01 AM
Gururaj,
1. Create a service with the destination port you want (example RDP TCP port 3389)
2. Create a NAT rule S zone=untrusted> D zone=untrusted> D address=your public IP> Service=RDP> D translation=private IP/port 3389.
3. Create a security policy S zone=untrusted> D zone=trusted> D address= your public IP> srvices=RDP> Action=all.
See if that helps..
- Mark as New
- Subscribe to RSS Feed
- Permalink
10-29-2012 09:01 AM
Gururaj,
1. Create a service with the destination port you want (example RDP TCP port 3389)
2. Create a NAT rule S zone=untrusted> D zone=untrusted> D address=your public IP> Service=RDP> D translation=private IP/port 3389.
3. Create a security policy S zone=untrusted> D zone=trusted> D address= your public IP> srvices=RDP> Action=all.
See if that helps..
- Mark as New
- Subscribe to RSS Feed
- Permalink
10-29-2012 12:14 PM
I dont think PA currently supports 1 to many NAT meaning (for example) incoming TCP80 is nated to two or more servers on the inside.
- Mark as New
- Subscribe to RSS Feed
- Permalink
10-30-2012 12:33 PM
If you wish to setup port forwarding, that is fine, but when you configure Many to One, dynamic IP and port (Source NAT) then it is not possible to forward ports at the same time, as that information would most likely be changed.
If this is a feature that you feel would add to the product, and would like this to be added, then it is recommended to communicate with your local SE and have them submit a feature request for this.
Have a Great Day!
Stay Secure,
Joe
Don't forget to Like items if a post is helpful to you!
- Mark as New
- Subscribe to RSS Feed
- Permalink
03-26-2019 03:09 AM
Hi
i want to do port forwarding and tried the steps described above ,but its not working.
- Log Forwarding in General Topics
- URL mapping or forwarding in Palo Alto Firewall via GP in GlobalProtect Discussions
- Change forward decrypt trust cert to a new one. in General Topics
- URL Filtering log with action allow in General Topics
- IoT Security, Does not Require Data Lake | Without Panorama | Setup in IoT Security Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
