Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 12 replies
  • Answers 1 answer
  • Subscribers 29 subscribers
  • Views 2455 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Nat Rule 0

David Jumbi

Hi all

I have a requirement to split NATing between different users in my office. I managed to configure this successfully but after going live some PCs have access to the internet while some do not. On the Log viewer, the ones that do not have access to internet have their traffic logged as allowed but processed by a NAT rule 0. I'm certain this is what is causing issues. can anyone help on how to resolve this?



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    the answer is very simple, the ones that don't do not meet any of the firewall rule requirements. I don't understand why you are doing this through NAT rules rather than firewall rules with user selection policies?

    Ian

  • 0 in reply to rfcat_vk

    I cannot use user selection policies as two specific departments have to use a different ISP from other departments. so on the initial NAT the source was ALL. On the new NAT rules the source are the respective subnets achieved by using the host feature. The firewall rules remain the same as the only thing that changes is the source parameter and the outbound interface on the NAT rules.

  • 0 in reply to David Jumbi

    Hi,

    well some of your Nat rules are not being met. I suggest you review the sd-wan and see f that might help, also you might try using the user selection process and create seperate rules for each department, further you could also investigate linked rules.

    though ultimately you will need to refine your firewall rules for improved management.

    ian

Reply
  • 0 in reply to David Jumbi

    Hi,

    well some of your Nat rules are not being met. I suggest you review the sd-wan and see f that might help, also you might try using the user selection process and create seperate rules for each department, further you could also investigate linked rules.

    though ultimately you will need to refine your firewall rules for improved management.

    ian

Children