NAT with exception

[ganoderma]

Hi all :

I have 1 question on NAT issue. If I apply NAT on 1 interface on FW , can I have some IP not be bet NATed . For example 10.10.10.0/24 , I want ip range from 10.10.10.200 - 10.10.10.254 remain as it is. Can it be done on CheckPoint FW ?

Please help.

regards
Jimmy

[Sergej]

Yes, this is possible.
Add the folowing rule to the begin of NAT rules:
Create address range object "Range1" Beg:10.10.10.200 End:10.10.10.254
Add the flolwing rule to the Address Translation policy
Orig[Sor:Range1 Des:(Any) Prot:(Any)] Trans[Sor:(Orig) Des:(Orig) Prot:(Orig)]