How to Create Secure Connector Destination NAT Firewall Rules

To redirect incoming traffic using a specified port to an IP address in another firewall zone, use destination NAT firewall rules. For each rule, you can define the source firewall zone and which TCP and UDP port should be redirected.

Create a Secure Connector Destination NAT Rule

1. Go to your cluster > Cluster Settings > Secure Connector Editor.
2. Click Lock.
3. Double-click to edit the device or template.
4. In the left menu, click Firewall Settings.
5. (Template only) Select the check box for Destination NAT. Any existing destination NAT rules on Secure Connectors using this template will be overwritten.
6. Click + to add a Destination NAT Rule.
7. Enter a Name and click OK. The Destination NAT windows opens.
8. Configure the destination NAT rule:
   • Source Zone – Select the source firewall zone.
   • IP Address – Enter the target IP address the traffic is redirected to.
   • TCP Ports – Click + and add the TCP ports that are redirected.
   • UDP Ports – Click + and add the UDP ports that are redirected.
   
9. (optional) Enter a Description.
10. Click OK.
11. Click OK and Activate.

Delete a Secure Connector Destination NAT Rule

1. Go to your cluster > Cluster Settings > Secure Connector Editor.
2. Click Lock.
3. Double-click to edit the device or template.
4. In the left menu, click Firewall Settings.
5. In the Destination NAT list, select the rule you want to delete.
6. Click .
7. Click OK and Activate.