XG 19 SD WAN with NAT rules

Question

Our XG 19 has 2 ISP links. 
 I created a NAT policy though the wizard which allows reaching a server on the LAN. this NAT policy is set to be available only on ISP1 - FiOS 
 I also created an SD WAN policy for outbount connections to select ISP based on lateny. 
 in case the SD WAN policy selects ISP2 - Optimum as the outbound link, the incoming port rule does not work anymore 
 how does SD WAN correlate with NAT policies ?

LuCar Toni · Answer

The point is, they dont. NAT does not care about Routing at all. See: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/121408/routing-in-xgv18-with-sd-wan-pbr 
 NAT will be applied, if its matching. But NAT will not change the routing. NAT is used after routing decisions. So you need to have a routing in place (Default routing, sd-wan, static etc.). And then the firewall will apply NAT if it finds a matching rule.

XG 19 SD WAN with NAT rules

Top Replies

Submitted a Tech Support Case lately from the Support Portal?