Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Replies 27 replies
  • Subscribers 5 subscribers
  • Views 8005 views
  • Users 0 members are here
Options
Suggested

Unable to edit NAT-Firewall rule

lferrara

I am not sure if it is a bug or not, but how can I unlink or edit a NAT to a specific firewall rule?

For example, I see that for each rule, during the migration, a single NAT for each firewall rule have been created. So,

  • I want to edit the NAT-Firewall rule association from firewall rule and from NAT but the option is not available.

Is this by design or a bug?

Thanks

Parents
  • 0

    Unlink a linked NAT rule by clicking the ellipsis and selecting Unlink rule. During migration linking NAT rules to Firewall rules is important so you dont break previous connectivity. This is why each FW rule has a linked NAT rule. You associate NAT Rules to FW Rules by the matching criteria in the NAT rule Translation settings. Original Source, Original destination, Original Service Inbound and outbound interfaces. 

    You cannot edit Linked NAT rules because by definition they take their matching criteria from the FW rule they are linked with. Unlinking will allow you to edit them

  • 0 in reply to PMStuart

    This is a very bad behaviour. To change the linked NAT for a single firewall, rule, you need to go to NAT tab, unlink and remember the firewall iD of the rule?

    No no no guys, this is just waste of clicking. Imagine with 200+ rules, you need to write down the rule where the NAT need to be changed?

    Bad implementation!

Reply Children
  • 0 in reply to lferrara

    No Luk - you only need to know the matching criteria. NAT linking was done for migration purposes, to make sure no connectivity was lost. It could be entirely possible if all 200 rules (in your example) were simple MASQ this could be reduced to just one unlinked rule.

    However, if you feel that the implementation is wrong then please look at the post on how to provide feedback, or click the Feedback link in the Control Centre 

Unfiltered HTML