In most cases, a Full-NAT is used to avoid creating new static routes in other devices. Sometimes, a Full-NAT rule is the only solution. An example of that is when two sites are connected via VPN and you want to offer a public IP at one site for a server located in the other site.
An SNAT simply changes the source (IP and/or service) in a packet. Most of the times I've seen SNAT to be necessary are examples of unexpected changes. If the Astaro is in place, and a decision is made to eliminate another edge router that was handling email, you would put the public IP as an Additional Address on the External interface and SNAT SMTP traffic from it.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
In most cases, a Full-NAT is used to avoid creating new static routes in other devices. Sometimes, a Full-NAT rule is the only solution. An example of that is when two sites are connected via VPN and you want to offer a public IP at one site for a server located in the other site.
An SNAT simply changes the source (IP and/or service) in a packet. Most of the times I've seen SNAT to be necessary are examples of unexpected changes. If the Astaro is in place, and a decision is made to eliminate another edge router that was handling email, you would put the public IP as an Additional Address on the External interface and SNAT SMTP traffic from it.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
