Central SNAT controlled with destination port

[Unai_SecFnet]

HI!

Does anybody know if exist the possibility of configuring and controlling central SNAT using the destination port? I mean, could you make the firewall SNAT HTTPS traffic and not SSH traffic, for example?

I think that it is not possible, in the version I am using, 6.0.13, but I would like to check if it is as I expect.

Thanks for support!

[Debbie_FTNT]

Hey Unai,

as far as I can tell, SNAT can only be set according to source port and IP protocol (TCP/UDP/ICMP/etc), but not destination port or service, even in newer versions.

The only way I have been able to find is with different policies with different NAT settings (no central NAT)

-> policy 1 applies to HTTPS, NATs to pool1

-> policy2 applies to SSH, NATs to pool2

[Unai_SecFnet]

Hey debbie,

It is as I thought, it is a big problem not to control the SNAT using the service or destination port.

[Debbie_FTNT]

Hey Unai,

I'm sorry I didn't have better news for you. You can reach out to your local Sales representative for a feature request, to have the option of destination port/services added to central SNAT.

[Unai_SecFnet]

I checked that this is possible in the 7.0.x version, but upgrading to that version is not a option for us