NAT for Facebook.com URL Access

[Fantas]

Hi,

I need to allow internet access for internal client for facebook access and need to build NAT on FMC. I did many times source NAT for internet access on other firewalls but not sure nat. type on. FMC.

I can see client url traffic on fmc but there is no nat to go out. I can see option of dynamic and static nat on fmc. I dont wana do static nat as it allows traffic initiated from both directions and I dont wana allow from oputside to inside.

which nat type on fmc is best for this scenario so that client can access facebook.com

[Francesco Molino]

Hi

When you add a nat rule, choose manual nat and then detect dynamic as type.
However you won't be able to do a nat just for a specific url.
I would suggest to have a role ACP to allow only the url you want and build your dynamic nat for the whole user subnet trying to access internet.