PAN release 4.0 and NAT feature

[bdaussin]

Hi all,

With this new release, is it possible to define destination NAT rules based on source region criteria ? for example : ASIA => NAT1, Europe => NAT 2 and so on....

Thanks a lot.

[jpa · Accepted solution]

No. region based objects cannot be used in NAT rules.

-jerish

[bdaussin]

Hi,

Thanks for your answer even if it's the the one I expect.

Could you explain why this object cannot be used ?

Can we use region objects within Policy based Forwarding rules ?

Is it something that can be asked as a feature request ?

Thanks,

[reaper]

The region is available as an option when specifying source and destination for security policies, decryption policies, and DoS policies. If you would like to see region based objects in different policies you can contact your SE to have him open a feature request.

[bdaussin]

Ok, I'll do that.

This feature would enable customer to design some global access ( through multiple DMZ ) without having to use some DNS stuff...

Thanks for your quick reply.