This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Carlos_N
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Carlos_N
04-27-2023
11Posts
0Likes
0Solutions
Apr 27, 2023Last Visited
User
Activity
User
Profile
Latest posts by Carlos_N
| Subject | Views | Posted |
|---|---|---|
| 370 | 01-19-2023 03:52 PM | |
| 390 | 01-19-2023 03:12 PM | |
| 394 | 01-19-2023 02:30 PM | |
| 667 | 01-19-2023 01:53 PM | |
| 718 | 01-18-2023 06:35 AM | |
| 923 | 01-17-2023 02:49 PM | |
| 2440 | 04-28-2021 10:30 AM | |
| 2485 | 04-26-2021 01:50 PM | |
| 2679 | 04-21-2021 04:53 PM | |
| 5121 | 05-14-2020 02:19 PM |
User Badges
Community Statistics
| Member Since | 08-31-2017 12:43 PM |
| Date Last Visited | 04-27-2023 12:05 PM |
| Posts | 11 |
01-19-2023
03:52 PM
Many thanks Adrian and Aztardzhiev, I will use multiple source and destination zones for this static nat. I will test it this saturday and will let you know how it went.
Cheers
... View more
01-19-2023
03:12 PM
Sorry One more doubt as I have many destination zones, what if I put any on destination zone, what i need is no matter what is the destination zone the source network 192.168.1.0/24 or all the smaller subnets /29 get translated to static 10.1.1.0/24 only changing last octet. Can I make this on one NAT rule.
... View more
01-19-2023
02:30 PM
Also what happen if I have different destination zones so the static nat to happen. Can I have one rule with many source networks and many destination zones, with one source network /24 and one source static translation /24?
Thanks!
... View more
01-19-2023
01:53 PM
Hi all, many thanks for the information! If my source networks are in smaller subnets of a /24, lets say /29 segments and in different source zones i can set the static source translation with one /24 and will still work the same or have to create static source nat with one source zone and the smaller real subnet mask. Follow example with two source zones:
Example:
Source Zone Source Network Destination Zone Source Static Nat Zone_One(192.168.1.0/29) 192.168.1.0/24 Zone_INET 10.1.1/24 Zone_Two(192.168.8.0/29)
... View more
01-18-2023
06:35 AM
Hey Tom, many thanks for your help. Can you please share the pdf to my mail crnoel@gmail.com or other way. Im not able to access your local shares file:///Users/tomyoung/Downloads/TechNote_UnderstandingNAT.pdf
... View more
01-17-2023
02:49 PM
I want to know if this is possible, make a Static Source NAT so that source network last octet lets say 192.168.1.10 is translated to 10.1.1.10 then next host 192.168.1.11 is translated to 10.1.1.11 and this should happen always only natting last octet, so it does not get mixed and source nat to a different Ip that does not match the last octet.
Not sure if setting the NAT rule to: Source Network 192.168.1.0/24 Source NAT 10.1.1.0/24
... View more
04-28-2021
10:30 AM
@raji_toor I sent the mail on april 19 and until today I have not received any reply. Is unacceptable at least one should get an automatic reply. Let me know if you get response. I sent it again today.
... View more
04-26-2021
01:50 PM
Hi Raji, yes it is very confusing. How can I get formal support on this. I need to send bpa@paloaltonetworks.com the reports but my Antispam is not letting.
... View more
04-21-2021
04:53 PM
Hi All, I generated a BPA report for some firewalls and I’m getting most URL-Filtering and DNS Sinkhole as not enabled but on firewall most rules does have URL-filtering and Anti-Spiware profiles have DNS Sinkhole enabled. Please provide option to upload (PA-3260) report (Mail Filtering does not permit to attach this kind of files to bpa@paloaltonetworks.com) from today and past year report with old hardware PA-3060 but here you can see URL-Filtering is at least 75.9% and DNS Sinkhole is same as other profiles. Rules have not changed a lot after we migrated the configuration. I already wrote to bpa@paloaltonetworks.com but now answer. Could someone kindly help. Thanks
... View more
05-14-2020
02:19 PM
Hi Phoenix, Yes all zones have zone protection profiles applied. I have shared the reports to bpa@paloaltonetworks.com. Thanks
... View more
05-14-2020
09:31 AM
Hi All, I have set all my zones with zone protection but after running BPA the zone protection adoption result is 90%, i have tested same on other firewall and get 97%, what i'm missing, Is it possible to get 100%? Online manual says: (https://docs.paloaltonetworks.com/best-practices/9-0/bpa-getting-started/evaluate-security-policy-capability-adoption/review-the-adoption-summary.html) Zone Protection Adoption —Adoption of Zone protection across Security policy allow rules. The percentage value is based on the total number of allow rules in which the source zone has a Zone Protection profile configured. The BPA doesn’t count disabled rules. If all zones have zone protection then is not possible there is an allow rule without zone protection on source zone. Same concept on Antivirus, urlfiltering, etc and I can get 100% without problems. Thanks!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-27-2023
12:05 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks