I.P Address Private to Public

Hi Justin,

I assume you want a DNAT from your public ip to your SFTP Server.

You can do this under Network Protection -> NAT

Best Regards
DKKDG

Hi DKKDG,

Is this Config correct?

For traffic from: I selected an internal user 

and Going to : our internal net

and changed to : public ip of our internet

Hi Justin,

what is the way you want to communicate?

Internal to external or external to internal?

If you want that your internal user can use sftp to an external server a masquerading to your external interface would be the trick plus firewall rule that the internal user can use sftp to the external server.

If it is external to internal you have to make your DNAT rule like this
Source: Any or the external server
Service: desired service (SFTP or HTTP)
Destination: your public IP

Change destination: your internal IP
Chance service: can be blank

Keep in mind if automatic firewall rule is not ticked you have to create one.

When you want to publish a webserver your can use the Webserver Protection of your UTM intead of DNAT.

Best Regards
DKKDG

Hi DKKDG,

We want the user to have an external i.p 

Thanks

Hi Justin,

then use SNAT.

Source: Internal IP
Service: desired service
Destination: external server IP
Change Source: Your public IP
Change Service: blank

Best Regards
DKKDG

Hi DKKDG,

Thanks how can I check if the user was able to have a External i.p?

is this fine?

Hi Justin,

I wrote you an example in the post above.

You can check your external ip with this here
https://www.whatismyip.com/

Best Regards
DKKDG

Justin, that SNAT is not what you want.  You want something more like 'For traffic from: Internal (Network)'.  Refer to #3 through #5 in Rulz.

Cheers - Bob

Justin, that SNAT is not what you want.  You want something more like 'For traffic from: Internal (Network)'.  Refer to #3 through #5 in Rulz.

Cheers - Bob