topic Re: Query regarding firewall operation in Network Security https://community.cisco.com/t5/network-security/query-regarding-firewall-operation/m-p/1594579#M591139 <HTML><HEAD></HEAD><BODY><P>when packets come in from outside, first happens NAT, then routing. Therefore it would be translated first, and only then routed to the translated IP.</P></BODY></HTML> Tue, 22 Feb 2011 04:40:43 GMT Roman Rodichev 2011-02-22T04:40:43Z Query regarding firewall operation https://community.cisco.com/t5/network-security/query-regarding-firewall-operation/m-p/1594578#M591138 <P>I have a basic question as to how a firewall works.</P><P></P><P>Say there is a server in the DMZ zone with a private IP of 10.11.1.4&nbsp; and it is statically NATTed by the firewall to a public IP of 100.11.1.4. Now when a packet with the destination of 100.11.1.4 hits the firewall does it get translated back to its private IP ie 10.11.1.4? What happens if the firewall has a static route to a network 100.11.1.0/24 ( of which 100.11.1.4 is a part of) pointing to another IP? Does the packet reach 10.11.1.4 or gets routed to the next hop IP defined by static route?</P> Mon, 11 Mar 2019 19:54:03 GMT https://community.cisco.com/t5/network-security/query-regarding-firewall-operation/m-p/1594578#M591138 mukundh86 2019-03-11T19:54:03Z Re: Query regarding firewall operation https://community.cisco.com/t5/network-security/query-regarding-firewall-operation/m-p/1594579#M591139 <HTML><HEAD></HEAD><BODY><P>when packets come in from outside, first happens NAT, then routing. Therefore it would be translated first, and only then routed to the translated IP.</P></BODY></HTML> Tue, 22 Feb 2011 04:40:43 GMT https://community.cisco.com/t5/network-security/query-regarding-firewall-operation/m-p/1594579#M591139 Roman Rodichev 2011-02-22T04:40:43Z