Hi All,
I´ve been reading some articles here on the forum related to the NAT 1:1.
This is a "very" begginners questions, and probably the answer is very logical, but until now, i was not able to take any conclusion.
Currently my setup consists on two HA ASG 320 version 9.108-23.
I need to make a NAT 1:1 to the traffic that comes from internal networks when the destination it´s a specific destination net (10.x.x.x/8). Assuming that the source network is 192.168.x.x/16, i need to "translate" to 10.10.x.x/16
Currently, the HA UTM is working as a second firewall layer (networks - UTM - Checkpoint - Wan), and it´s providing webfiltering in Standart mode, email protection, and also it´s publishing the OWA).
The idea, is that after the connections are NATed (1:1) the checkpoint firewall, will deliver those, to another router that will route the traffic to the pretended destination network.
The destination network to whom i need to make the NAT 1:1, it´s used to access some services (some of them, provided by HTTP).
My questions, are:
a) Considering that i´m using the WebProxy in Standard mode, can i use the proxy exceptions to make sure the connection made by browsers from the PC´s from the inside, are performed by the firewall , thus making it possible that the NAT 1:1 is made sucessfully. I need to make sure that the IP from the HTTP requests, are also nated in this way.
b) What can be the impact, on the currently existing masquerad/SNAT/DNAT rules, that i have.
Any help would be greatly appreciated [:D]
This thread was automatically locked due to age.
