CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Results 1 to 2 of 2

Thread: Manual NAT and IP Pool NAT

  1. #1
    Join Date
    2007-03-12
    Posts
    8
    Rep Power
    0

    Default Manual NAT and IP Pool NAT

    I have a client had some issue with these NAT. NGX 6.5. Here is the nat rule: manual nat: source: 192.168.130.20/Destination: 216.16.26.100 --> source: original/Destionation: 10.102.10.20 IP Pool NAT is 192.168.100.0/24 When traffic coming from VPN tunnel, and the source and destionation is 192.168.130.20/216.16.26.100, I would like the checkpoint to NAT it to 192.168.130.20/10.102.10.20. But I checked the log and it showed that the source was natted to one of the IP pool NAT, and destionation nat was working. (It is natted to 192.168.100.111/10.102.10.20). Any suggestion would be appreciated.

  2. #2
    Join Date
    2007-07-27
    Posts
    127
    Rep Power
    15

    Default Re: Manual NAT and IP Pool NAT

    hrrm. Nat rules read top down and stops when it hits a match. IP Pool nat is used before manual nat rules so it will never read your rule. This will be evident if you turn on the NAT Rule # in Tracker. I know there is a way to change that behavior. I will let you know as soon as I track it down.

Similar Threads

  1. SMTP MAX Pool
    By Tooltime in forum Messaging Security
    Replies: 0
    Last Post: 2010-04-15, 15:02
  2. NAT pool possible in NG ?
    By karimi in forum NAT (Network Address Translation)
    Replies: 0
    Last Post: 2007-03-29, 11:21
  3. IP Pool NAT Question
    By Yasushi Kono in forum NAT (Network Address Translation)
    Replies: 0
    Last Post: 2006-12-19, 09:26
  4. can you explain IP Pool NAT.
    By derspot in forum NAT (Network Address Translation)
    Replies: 2
    Last Post: 2006-12-06, 15:34
  5. What IP was I assigned via IP Pool NAT?
    By roadrunner in forum SecureClient/SecuRemote
    Replies: 0
    Last Post: 2005-08-13, 14:39

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •