No video :(

U Turn NAT | Why and how do we configure it | Palo Alto firewall

Подписаться 6 тыс.

Просмотров 4,9 тыс.

50% 1

In this Palo Alto training session, you will learn what is U turn NAT. Why do we configure that. At the end we will set up a lab on EVE NG and see how does its configuration work on Palo Alto firewall.
For all training videos in this series, please go to below links.

Опубликовано:

5 сен 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 16

@sss-bbb Год назад

Man You Explain well

@freshdeveloper Год назад

Thank you, i am improving

@ravikumars764 2 месяца назад

Could you let me know from where did you create the IP address 50.50.50.100 in PA and assign it as public IP for webserver?

@pradeepkumarkaraka4966 3 месяца назад

Also on the same Source NAT you applied destination NAT which is not required because we already have a D-NAT from Untrust to Untrust to NAT from 50.50.50.100 to 10.1.1.100 which takes care of traffic from Untrust to DMZ.

@freshdeveloper 2 месяца назад

That's right, i just demonstrated that we can do both on same policy.

@devhunjan Месяц назад

For the destination NAT rules you have setup, shouldn't be the destination zone in security policy be DMZ instead of Untrust ?

@freshdeveloper Месяц назад

It's for outside traffic....

@sumanratnalu1717 2 месяца назад

No NAT or Security policy required from Untrust DMZ ? As the server is in DMZ zone right!! please clarify.

@freshdeveloper 2 месяца назад

It will be required to allow traffic from Untrust to DMZ.

@sumanratnalu1717 2 месяца назад

@@freshdeveloper Thanks for the response but in the video you created only from trust to untrust. And it started working.

@khurshidkhandy6622 3 месяца назад

Hello Sir, it seems Security policy for inbound ACL is wrong. As per my understanding the destination Zone and IP should pre Nat BUT POST ZONE. Please correct me if I'm wrong.

@freshdeveloper 3 месяца назад

Can you be little specific at what time duration of the video you are referring May explain better....

@pradeepkumarkaraka4966 3 месяца назад

First security policy cannot be untrust to untrust because as per Packet flow NAT happens first so zone gets changed so it should be Untrust to Trust but IP remains pre-nat IP

@freshdeveloper 3 месяца назад

I don't think NAT happens first. it looks up the NAT if its required or not. But actually security policy checks first and then NAT takes place.