topic Re: NAT Advantages in Network Security

NAT Advantages

luciano_rangel — Mon, 11 Mar 2019 16:19:39 GMT

What are the security advantages to make NAT between DMZ and inside??

Thanks a lot

Re: NAT Advantages

JORGE RODRIGUEZ — Fri, 25 Sep 2009 19:10:52 GMT

One advantage is to hide your private IP scheme from external vendors connected to DMZ..

say your DMZ network is 172.16.1.0/24

and your inside is 192.168.1.0/24

DMZ vendor host 172.16.1.50 needs to access host on inside network 192.168.1.10 you can then use a 172.16.1.X address as NAT address for 192.168.1.10.. so DMZ will use 172.16.1.X to connect to 192.168.1.10 host.

Re: NAT Advantages

luciano_rangel — Fri, 25 Sep 2009 19:21:44 GMT

Excuse-me but did not mention that had this concept, we would like to know is if there is some other advantage such as attacks

Thanks for help

Re: NAT Advantages

JORGE RODRIGUEZ — Fri, 25 Sep 2009 19:42:42 GMT

Luciano, in your original post you had asked What are the security advantages to make NAT between DMZ and inside?? I gave you an answer that is commonly use in DMZs..

but in your second post you are asking something different.. NAT is a function of address translation and nothing else, NAT does not save you from network attacks such ip spoofing or sync attacks.

If I still missunderstand your first and second question PLS correct me.

Regards

Re: NAT Advantages

luciano_rangel — Mon, 28 Sep 2009 12:47:01 GMT

It's all right, Thanks a lot.