Sourcefire - module behind nat

[rich-nelson]

How do you configure the module and how to it when the module is behind a nat device? What is meant be nat id?

Let say the remote SFR module is 192.168.1.1 and the public ip address is 1.1.1.1. The SFR management center is 10.10.10.10 and appears as 2.2.2.2 on the internet.

Is the nat-id just a value picked at random and used on both sides?

What is the configuration for the sourcefire module, configure manager add 2.2.2.2 somekey nat-id 50000?

What about on the SFR MC, 1.1.1.1 somekey nat-id 50000?

The 5.4 userguide in chapter 4 section 8 (page 128) icover this topic but i don't think does well enough. 

Thanks

Rich

[Aastha Bhardwaj · Accepted solution]

Hi,

Yes you are right. That should work . If the nat is working properly you should be able to register the sensor with DC.

Let me know if you are getting any particular error ?

Regards,

Aastha Bhardwaj

Rate if that helps!!!