[Newbie] How is PAT many-to-many working?

Question

Hi all, 
 sorry for the newbie question. I'm using UTM since decades and now with UTM EOL in 2026, I gave it a shot and tried to migrate to SFOS. 
 Unfortunately it's not as intuative as UTM but I try to move everything over. One problem I encountered are many-to-many PAT configuration. 
 When having a service with e.g. TCP and UDP ports 11443 and I want to translate it to another service with TCP and UDP ports 22443 I get the message "Original and translated services don't match." From the documation ( docs.sophos.com/.../index.html I only find this "For many-to-many translation, the ports for the original and translated services must be equal in number." 
 My question is how this now works? What does equal in number mean? Does it mean if the service has 2 ports the other service needs also to ports? 
 Thanks for your help. 
 Cheers, 
 Fred

LuCar Toni · Answer

Likely it is based on the fact, you are having a service with TCP and UDP. Is your service really TCP and UDP at the same time? If not, remove the not using part. Then it should work fine.

Prism · Answer

I don't think It's currently possible to do this with a single NAT Rule. 
 Manfred Hofer said: If I can't use it that way I would need to built 2 NAT rules right? 
 Yes, you will have to create two separates' NAT Rules, one for TCP and another for UDP.

[Newbie] How is PAT many-to-many working?

Top Replies