How to Create SC Source NAT Firewall Rules

You can create source NAT firewall rules to rewrite the source IP address for a zone behind the Secure Connector with the IP address of the NAT Interface in the destination firewall zone. If multiple Interfaces are in the destination firewall zone, the interface that matches according to a routing lookup is chosen.

In this article:

Create an SC Source NAT Rule

1. Go to your Cluster > Cluster Settings > Secure Connector Editor.
2. Click Lock.
3. Double-click to edit the device or template.
4. In the left menu, click Firewall Settings.
5. (Template only) Enable check box for Source NAT. Any existing source NAT rules on SCs using this template will be overwritten.
6. Click + to add a Firewall Rule. The Firewall Rules windows opens.
7. Enter a Name and click OK.
8. Configure the source NAT rule:
   • Source Interface – Select the source firewall zone.
   • NAT Interface – Select the firewall zone.
   
9. Click OK.
10. Click OK and Activate.

Delete an SC Source NAT Rule

1. Go to your Cluster > Cluster Settings > Secure Connector Editor.
2. Click Lock.
3. Double-click to edit the device or template.
4. In the left menu, click Firewall Settings.
5. In the Source NAT list, select the rule you want to delete.
6. Click .
7. Click OK and Activate.