Skip to main content

Create NAT rule

Step 1: In the Object Pane (F11) > find the object to SNAT > right-click and select Edit.

Userguide Checkpoint FPT NGFW 2022 60

Step 2: In the menu, select NAT > check Add automatic address translation rules > check Hide behind IP address > enter the SNAT IP > select the gateway to apply.

Userguide Checkpoint FPT NGFW 2022 61

Step 3: In the menu, select Security Policies (Ctrl + 2) > select Access Control > select NAT > verify the rule was created.

Userguide Checkpoint FPT NGFW 2022 62

Step 4: Install Policy.

Step 1: In the menu, select Security Policies (Ctrl + 2) > select Access Control > select NAT.

Userguide Checkpoint FPT NGFW 2022 63

Step 2: Click Add rule above / to top / to bottom to insert the rule at the appropriate position.

Userguide Checkpoint FPT NGFW 2022 64

Step 3: Configure the new rule:

Userguide Checkpoint FPT NGFW 2022 65

  • Name:

    Userguide Checkpoint FPT NGFW 2022 66

  • Original Source (source IP before NAT):

    Userguide Checkpoint FPT NGFW 2022 67

  • Original Destination (destination IP before NAT):

    Userguide Checkpoint FPT NGFW 2022 68

  • Original Services (service/port before NAT):

    Userguide Checkpoint FPT NGFW 2022 69

  • Translated Source (source IP after NAT):

    Userguide Checkpoint FPT NGFW 2022 70

Keep original source IP.

  • Translated Destination (destination IP after NAT):

    Userguide Checkpoint FPT NGFW 2022 71

  • Translated Services (service/port after NAT):

    Userguide Checkpoint FPT NGFW 2022 72

  • Install On (device containing the NAT rule):

    Userguide Checkpoint FPT NGFW 2022 73

DNAT rule after creation:

Userguide Checkpoint FPT NGFW 2022 74

Step 4: Create a firewall rule to allow the DNAT connection.

Userguide Checkpoint FPT NGFW 2022 75

Step 5: Install Policy.