05-26-2022 10:21 AM
Hi Team,
We have an SDWAN box placed behind the firewall and the SD_WAN box need to communicate with the controllers which is located on the internet.
The topology is given below:
SD_WAN Box<--->F/W LAN interface<--->F/W ISP interface <--> Internet <---->Controllers.
The SD_WAN Box is trying to establish VXLAN connectivity to the Controllers located on the internet.
On the traffic logs and the session browsers we could see the traffic flow b/n the SD_WAN Box and the VXLAN is being allowed by the firewall and the application is being correctly identified as "VXLAN".
We had configured only source NAT on the firewall but we could see on the log that the destination port is being translated to 511 from 4789
Why the firewall is translating the destination port even though the DNAT is not configured.
