topic Re: FTD Nat Question in Network Security

FTD Nat Question

benolyndav — Thu, 21 Oct 2021 08:34:06 GMT

Is it possible to Nat to another device so if I have a public IP natting to a Private IP does that private IP have to reside on the FTD or can it somehow be forwarded on to private IP (server) routing is inplace between FTD and Server.???

Thanks

Re: FTD Nat Question

Rob Ingram — Thu, 21 Oct 2021 08:37:10 GMT

Hi @benolyndav no it doesn't have to reside on the FTD, it needs to be routable from the FTD.

Re: FTD Nat Question

benolyndav — Thu, 21 Oct 2021 08:47:07 GMT

Hi Rob

1. Nat rule Public outside (interface) to private IP ( interface that has route to internal IP not residing on FTD Interface)

2. acl allowing the above.

Thanks

Re: FTD Nat Question

Rob Ingram — Thu, 21 Oct 2021 08:49:12 GMT

@benolyndav correct. Ensure the Access Control rule (ACL) references the real private IP address not the translated.

Re: FTD Nat Question

benolyndav — Thu, 21 Oct 2021 16:39:41 GMT

Hi rob

Im a bit confused as to what interface to stipukate in nat rule as the private ip (server) dosent reside on the FTD itself, i have an acl saying outside to in any to private Ip??

Re: FTD Nat Question

Rob Ingram — Thu, 21 Oct 2021 16:43:12 GMT

@benolyndav you would define the interface that the private server is reachachable via, so the inside or DMZ interface for example.

Re: FTD Nat Question

benolyndav — Thu, 21 Oct 2021 17:37:06 GMT

Brilliant Rob it works Thankyou