DNAT with port number change

Hi,

you do not need to setup a specific translate of the port, you set the rule in the firewall and select RDP which will translate 1:66635 to 3389.

Where does your firewall rule sit in your list of rules? How many devices will access the rule? How are you limiting the access to the rule?

The XG searched your firewall rules starting at the top, not by rule number.

Ian

That doesn't exactly meet my needs. I have two users who want to RDP into their computers. I want to set up user 1 on port 3889 and then User 2 on 3989. Depending which port number they specify would depend which computer they connect to. I don't want to edit the computer registry on the destination computers. I want to keep their RDP ports at 3389 (so I can RDP internally).

I don't see how I can accept an incoming request on port 3989 and translate the request to 3389.

https://community.sophos.com/kb/en-us/122976

You would have to setup Port 3989 under "services" and change the Port back under "Mapped Port". 

PS: Would suggest to perform this in XG V17.5. We changed this layout in V17.5. 

Sorry, I answered incorrectly based on your original post, your followup post had additional details.

Ian