Unable to edit NAT-Firewall rule

Hmmm, can you post screenshot, as I "think" i do not have this issue?! :-)

I can edit them both...

It is by design. To be able to change the NAT rule for a firewall rule, you need to:

• Unlink the NAT rule from the NAT tab
• Link a new NAT rule from the NAT tab to an existing firewall rule

Feedbacks:

Please:

• Allow to edit and link the NAT rule from the Firewall rule
• From the Firewall rule, use the white space by providing information about the NAT rule you are linking to the rule. For example, NAT_NAME where a "i" information icon is availble and we can see the NAT rule proprierties without moving back and forth from NAT Tab.

Thanks

The option is not clickable.

Unlink a linked NAT rule by clicking the ellipsis and selecting Unlink rule. During migration linking NAT rules to Firewall rules is important so you dont break previous connectivity. This is why each FW rule has a linked NAT rule. You associate NAT Rules to FW Rules by the matching criteria in the NAT rule Translation settings. Original Source, Original destination, Original Service Inbound and outbound interfaces. 

You cannot edit Linked NAT rules because by definition they take their matching criteria from the FW rule they are linked with. Unlinking will allow you to edit them

Ahh yes, you also see this in there:

You do not need to link a NAT rule to a FW rule. NAT rules operate on the matching criteria. NAT Rule linking was a needed step for migration. You do not need to unlink rules if you want to keep the same kind of setup you had previously. We would suggest however that over time you unlink rules and create NAT rules based on matching criteria. It may look complicated at first but it is actually more powerful and elegant.

If you have 100 FW rules now, and they are all MASQ rules that will mean 100 Linked NAT rules are created on migration. However it is very likely you could reduce this to a single SNAT rule which applies to all 100 FW rules by the matching criteria.

Twister5800,

creating a new firewall rule with a new NAT rule behaves in the same way. No option to edit the NAT rule from Firewall rule or most important to unlink and choose another NAT rule from Firewall rule section.

Just tried!

PMStuart 

I  do not agree on this. Admins should be able to change the NAT from the Firewall rule also and not only from NAT tab. Also, from the Firewall rule, there should be a way to view information about the linked NAT rule. A name is not enough!

Thanks

This is a very bad behaviour. To change the linked NAT for a single firewall, rule, you need to go to NAT tab, unlink and remember the firewall iD of the rule?

No no no guys, this is just waste of clicking. Imagine with 200+ rules, you need to write down the rule where the NAT need to be changed?

Bad implementation!

I am working with V18 since couple of weeks and i do not use any Linked NAT Rules anymore. 

Would recommend to work with NAT Rules, which uses the Interface Criteria (for example WAN outbound).

You can actually use a default NAT Rule on the bottom with Matching Interface WAN and SNAT enabled (MASQ). So you would reduce the need of a Linked NAT Rule from X Rules to 1.