Firewall Rule and Linked NAT Rule not matching

Question

Hi All, 
 
 Today I came across an unusual behaviour, my XG230 with SFOS 18.0.1Buil396, was using Firewall Rule #3 and NAT Rule #5 instead of the linked NAT rule #3. 
 This happened when I moved one of our user to the host group / Client less user group of Firewall Rule #3. In SFOS 17, when we moved users from one group to other the policy applied perfectly. 
 If any one has any lead on this please suggest. Thanks

LuCar Toni · Accepted Answer

I would not recommend to use the Linked Nat Rule in the first place. There is no reason to do so. You could simply use the Default SNAT down below, it will also pick up all MASQ traffic.

LuCar Toni · Answer

See: https://community.sophos.com/xg-firewall/f/recommended-reads/121408/routing-in-xgv18-with-sd-wan-pbr 
 NAT is for IP usage. SD-PBR is for Routing decision.

rfcat_vk · Answer

Hi. if you look at the righthand side numbering you will find how the firewall and NAT rules are related. What you have shown is quite okay. 
 Ian

Firewall Rule and Linked NAT Rule not matching

Top Replies