Using external zone in DNAT policy

[Bouthaina]

Hi Team,

We have 2 VSYS configured to communicate. 

VSYS 1 has 172.25.80.254 zone L3 : DC

VSYS 2 has 172.25.70.254 zone L3 : DMZ

I added two external zone (DC to DMZ) and (DMZ to DC) to allow communication between vsys and also the routing between VR of both Vsys.

In DC , i have DNAT policy allowing a load balancing to 2 SRV located in zone L3 : DC.  i need to allow zone source from vsys 2 in the DNAT policy, how to deal with it ? that works or no ?

Thank you.🤔

[reaper]

you can just add the external zone (DMZtoDC) in the NAT rules as a source