NAT mapping public to private IP

[BenjaminRaimondi]

Hello all,

I have been updating our NAT policies within our PA-3220 to specify traffic translation mapping from our public addresses to private addresses. After committing the changes the traffic has only been routing to the catch all NAT rule at the bottom of our NAT policies. I am concerned that I did not configure everything correctly after following Palo's guide and would like any suggestions to correct the traffic.

The current NAT configurations look like this (image attached below):

Name: Squid Proxy | Source: Untrusted | Destination : Trusted | Destination Interface: e1/19 | Source Address: Any | Destination: (Public IP) | Service: Any | Source Translation: dynamic-ip-and-port, e1/19 | Destination Translation: 10.20.1.249

Any help would be appreciated. Thank you!

[JayGolf]

Hi @BenjaminRaimondi ,

Please change your destination zone to untrusted as well. In your security policy, the destination zone will be the true source zone. Here is a very helpful article written by @reaper on NATs. https://live.paloaltonetworks.com/t5/community-blogs/i-m-gonna-make-him-a-nat-rule-he-can-t-refuse/b...