Re: Question, please comment A is correct as you do not need NAT b/w internal network and DMZ, so you need to add manual rules that do not perform any translation for this traffic..All you need is correct routing and this should work..But remember to add the manual rule before the automatic rule for Hide NAT Original packet Translated Packet Src Dst Serv Src Dst Serv internal_net DMZ Any Original Original Original |