nat and microsoft nlb/cluster in dmz

[lildeniz]

Hi,

do you have any idea or experience nat for any cluster/nlb microsoft machine (sql or exchange) in dmz zone...

how can we do that

regards

[jseals]

Hello,

If you're just trying to do a destination NAT for servers in your DMZ zone that should be pretty straight forward.

We have a really good document that goes over all types of NAT with screenshot examples of what the security policy and NAT policy should look like.

https://support.paloaltonetworks.com/index.php?option=com_pan&task=dl_tech_doc&filename=Understandin...

I believe you'll want to look at the destination NAT section starting on page 19.

Thanks,

Jason Seals