DNAT using VIP for Outbound traffic

[johnlloyd_13]

hi,

the DNAT uses VIP for inbound traffic, i.e. internet to private LAN/host.

is the outbound traffic stateful, meaning it uses the same VIP public IP for outbound?

or do i still need to configure a separate outbound FW policy and use the same VIP?

[dingjerry_FTNT · Accepted solution]

Hi @johnlloyd_13 ,

Here is an KB for explanation:

Technical Tip: Mapping VIP outbound connections (Source NAT)

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Mapping-VIP-outbound-connections-Source-NA...

[johnlloyd_13]

thank you! the link is very helpful!

[dingjerry_FTNT]

I am glad I could be of assistance.  If it does help you, please mark it as a solution.