How to Create Secure Connector Source NAT Firewall Rules

You can create source NAT access rules to rewrite the source IP address for a zone behind the Secure Connector with the IP address of the NAT interface in the destination firewall zone. If multiple interfaces are in the destination firewall zone, the interface that matches according to a routing lookup is chosen.

Create a Secure Connector Source NAT Rule

1. Go to your cluster > Cluster Settings > Secure Connector Editor.
2. Click Lock.
3. Double-click to edit the device or template.
4. In the left menu, click Firewall Settings.
5. (Template only) Select the check box for Source NAT. Any existing source NAT rules on Secure Connectors using this template will be overwritten.
6. Click + to add a Source NAT rule.
7. Enter a Name and click OK. The Source NAT window opens.
8. Configure the source NAT rule:
   • Source Interface – Select the source firewall zone.
   • NAT Interface – Select the firewall zone.
   
9. Click OK.
10. Click OK and Activate.

Delete a Secure Connector Source NAT Rule

1. Go to your cluster > Cluster Settings > Secure Connector Editor.
2. Click Lock.
3. Double-click to edit the device or template.
4. In the left menu, click Firewall Settings.
5. In the Source NAT list, select the rule you want to delete.
6. Click .
7. Click OK and Activate.