[northlandboy]

Suit yourself, but when I've always found automatic NAT to be a pain, particularly once you have a complex network, with multiple layers of firewalls, automatic NAT will cause more problems than it's worth. You end up natting connections that don't need to be natted, and you have to put in manual rules above the automatic ones, to say "don't nat anything between these internal networks"

You also then have the issue of not having objects created with the NAT address, so you can't search for them in Tracker, and you can't see the NAT IPs in your objects list.

I don't really understand what the advantages of automatic NAT are - care to enlighten me? ;-)