NAT Basics

Question 1

How is NAT enforced and on what?

Answer 1

enforced through NAT policies on address objects or IP addresses

Question 2

At minimum NAT policy needs to specify what?

Answer 2

packet’s source zone and destination zone

Question 3

in addition to zones, what can be matching criteriums? (3)

Answer 3

1. destination interface
2. source and destination address
3. service

Question 4

Security policies are applied to pre-NAT or post-NAT IP addresses?

Answer 4

security policies are applied to the original IP address (the pre-NAT address)

Question 5

Security policies are enforced on pre-NAT or post-NAT zones?

Answer 5

security policies are enforced on the post-NAT zone

Question 6

How are NAT rules evaluated?

Answer 6

from the top down, therefore once a packet matches the criteria of a single NAT rule, the packet is not subjected to additional NAT rules - means rules should be in order from most specific to least specific

Question 7

Do static NAT rules have precedence over other forms of NAT?

Answer 7

no; static NAT rules must be above all other NAT rules in the list on the firewall