So... after wasting a few hours trying to decipher the scattered info on 1-1 NAT and the various firewall rule options, it appears that only Business Application rules will work. The description of the Network rule for use when "you want to control traffic by source, service, destination, zone" (administrator's guide) is not accurate or complete. If you do this you can make the traffic go out on the desired public IP, but the firewall does not accept the return on that IP. Am I missing something? There is no reflexive option for network rules but you'd think based on the described use that would at least be the default behavior. This has been very frustrating. In addition to all the problems with the GUI things just don't make a lot of sense. Why does the network rule option even exist?
This thread was automatically locked due to age.
