NAT disabled

Double sure you can, just don't enable nat on the policy that allows the traffic.

 

e.g

 

config firewall policy

    edit 1

        set uuid 6109d3c2-b4e4-51eb-548f-7b34dbca756a

        set srcintf "internal"

        set dstintf "wan1"

        set action accept

        set srcaddr "all"

        set dstaddr "all"

        set schedule "always"

        set service "ALL"

        set inspection-mode proxy

        set nat enable

    next

end

 

config firewall policy

    edit 1

        set uuid 6109d3c2-b4e4-51eb-548f-7b34dbca756a

        set srcintf "internal"

        set dstintf "wan1"

        set action accept

        set srcaddr "all"

        set dstaddr "all"

        set schedule "always"

        set service "ALL"

        set inspection-mode proxy

        set nat disable

    next

end

Ken Felix