SonicWALL TZ 180 Bedienungsanleitung PDF herunterladen (Seite 249)

Network > NAT Policies

249

SonicOS Enhanced 4.0 Administrator Guide

• Translated Service: This drop-down menu setting is what the SonicWALL security

appliance translates the Original Service to as it exits the SonicWALL security appliance,

whether it be to another interface, or into/out-of VPN tunnels. You can use the default

services in the SonicWALL security appliance, or you can create your own entries. For

many NAT Policies, this field is set to Original, as the policy is only altering source or

destination IP addresses.

• Inbound Interface: This drop-down menu setting is used to specify the entry interface of

the packet. When dealing with VPNs, this is usually set to Any, since VPN tunnels aren’t

really interfaces.

• Outbound Interface: This drop-down is used to specify the exit interface of the packet

once the NAT policy has been applied. This field is mainly used for specifying which WAN

interface to apply the translation to. Of all fields in NAT policy, this one has the most

potential for confusion. When dealing with VPNs, this is usually set to Any, since VPN

tunnels aren’t really interfaces. Also, as noted in the Quick Q&A’ section of this chapter,

when creating inbound 1-2-1 NAT Policies where the destination is being remapped from a

public IP address to a private IP address, this field must be set to Any.

• Comment: This field can be used to describe your NAT policy entry. The field has a 32-

character limit, and once saved, can be viewed in the main Network > NAT Policies page

by running the mouse over the text balloon next to the NAT policy entry. Your comment

appears in a pop-up window as long as the mouse is over the text balloon.

• Enable NAT Policy: By default, this box is checked, meaning the new NAT policy is

activated the moment it is saved. To create a NAT policy entry but not activate it

immediately, uncheck this box.

• Create a reflective policy: When you check this box, a mirror outbound or inbound NAT

policy for the NAT policy you defined in the Add NAT Policy window is automatically

created.

NAT Policies Q&A

Why is it necessary to specify ‘Any’ as the destination interface for inbound 1-2-1

NAT policies?

It may seem counter-intuitive to do this, given that other types of NAT policies require you to

specify the destination interface, but for this type of NAT policy, this is what is necessary. The

SonicWALL security appliance uses this field during the NAT Policy lookup and validates it

against the packet that it receives, but if this is set to some internal interface such as LAN, the

lookup fails because at that point, the SonicWALL security appliance does not know that the

packet is going to LAN. It’s not until after the SonicWALL security appliance performs the NAT

Policy lookup that it knows that the packet is going to LAN. At the precise time that the

SonicWALL security appliance does the NAT Policy lookup, the packet looks like it is going from

WAN -> WAN (or whatever interface it is coming in on), since doing a route lookup on the NAT

Public address returns the Public interface.

Can I manually order the NAT Polices?

No, the SonicWALL security appliance automatically orders them, depending on the granularity

of the rule. This means that you can create NAT policy entries for the same objects, if each

policy has more granularity than the existing policy. For example, you can create a NAT policy

1 2 ... 244 245 246 247 248 249 250 251 252 253 254 ... 842 843

Kommentare zu diesen Handbüchern

BryanAbemy 07 Apr 2024 | 03:13:56

Hello! Crazy discounts, hurry up! We are Drop Dead Studio and our goal is to help companies achieve impressive sales results through automated marketing. I. We sell fresh databases for GSA Search Engine Ranker. • The databases are updated monthly through 24/7 parsing and by connecting purchased databases from other sources. • You have the option to purchase a one-time fresh database or pay for a lifetime subscription for updates. ATTENTION! 40% discount only until 04/10/2024! When ap

BryanAbemy 07 Apr 2024 | 03:16:14

BryanAbemy 07 Apr 2024 | 03:18:40

BryanAbemy 07 Apr 2024 | 03:20:48

BryanAbemy 07 Apr 2024 | 12:27:59

BryanAbemy 08 Apr 2024 | 08:54:19

BryanAbemy 08 Apr 2024 | 08:56:50

BryanAbemy 08 Apr 2024 | 08:59:01

BryanAbemy 08 Apr 2024 | 09:00:40

BryanAbemy 08 Apr 2024 | 23:09:31

BryanAbemy 08 Apr 2024 | 23:11:32

BryanAbemy 08 Apr 2024 | 23:13:08

BryanAbemy 08 Apr 2024 | 23:14:53

BryanAbemy 08 Apr 2024 | 23:16:48

BryanAbemy 09 Apr 2024 | 10:29:08

BryanAbemy 09 Apr 2024 | 10:31:50

BryanAbemy 09 Apr 2024 | 10:33:42

BryanAbemy 09 Apr 2024 | 20:48:36

Hello! We are Drop Dead Studio and our goal is to help companies achieve impressive sales results through automated marketing. We sell fresh bases for GSA Search Engine Ranker and XRumer as well as a premium base for XRumer. • Bases are updated monthly through 24/7 parsing and by connecting purchased databases from other sources. • You have the option to purchase a one-time fresh database or pay for a lifetime subscription for updates. ATTENTION! 40% discount on base purchases only until

BryanAbemy 09 Apr 2024 | 20:50:57

BryanAbemy 09 Apr 2024 | 20:52:58

BryanAbemy 09 Apr 2024 | 20:54:09

SonicWALL TZ 180 Bedienungsanleitung Seite 249

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Router SonicWALL TZ 180