1:1 Nat possible with Sophos XG V18.5?

PS: 1:1 NAT with destination is possible with the Range object (/24). Everything else is not possible within one rule. 

Hi,

I tried it using the range object, but it doesn´t work. The traffic is beeing generated correctly, when I use a single IP from that subnet.

This Range Object your are talking about.....for a /24 network, does it start with .1 and end with .254?

Thanks.

If you want to do a 1:1 NAT, which works vice versa (Bidirectional), you need to create two DNATs with 1:1. One from A to B with IP Range to B. 

Then one from B to A with IP Range to A. 

Ok maybe, my understandig from 1:1 NAT is a different one. I mean the 1:1 NAT Feature in terms of the UTM9 function.

This:

This has nothing to do in the first place with bidirectionality, but to map one whole /24 network for example to another /24 network. This is the feature I need. In the moment, even the one side is not working. 

Can this be configured with XG?

Thanks.

This is the same like IP Range in SFOS. If you select a IP range, it will pop up a matching option down below, which offers 1:1 mapping. 

See:

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/tasks/NATRuleAdd.html

Now I got it, I must select a range in the Orignal Source aswell, not a network. It works, thanks.

Now I got it, I must select a range in the Orignal Source aswell, not a network. It works, thanks.

Just an important information. XG is not doing 1:1 Source NAT. Only DNAT. Therefore the range of Source MASQ is "random". Which does not make much sense in most deployments and could stay with MASQ (One IP).